Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034383131.roa
File:                     3130332e36312e3138382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          5d5Vjwm2rktCCp830jqbkVnLiUJ4EyPxVRWFN92YceM=
Subject key identifier:   38:A5:A5:D1:7F:EC:24:B4:AE:32:85:37:A2:D2:1F:41:CC:60:5A:8F
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       4544F7C3EC73F5A6C4C378860495F878688D3BA8
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 07 May 2026 16:03:42 +0000
ROA not before:           Thu 07 May 2026 15:58:42 +0000
ROA not after:            Thu 06 May 2027 16:03:42 +0000
asID:                     4811
IP address blocks:        103.61.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:44:f7:c3:ec:73:f5:a6:c4:c3:78:86:04:95:f8:78:68:8d:3b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:58:42 2026 GMT
            Not After : May  6 16:03:42 2027 GMT
        Subject: CN=38A5A5D17FEC24B4AE328537A2D21F41CC605A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:db:d6:c9:20:d6:20:d0:46:14:28:b9:22:80:
                    a1:95:fb:31:e5:72:2d:c5:7a:f5:92:a9:06:c0:1c:
                    6c:1f:14:aa:31:65:f4:02:0a:7d:ed:1e:c0:9c:cf:
                    1c:df:e9:45:b6:db:5d:79:e0:9e:a6:7c:1d:93:f7:
                    9c:68:6d:67:cf:1c:18:69:d0:66:e2:3e:bd:0d:60:
                    0e:f4:ac:73:50:10:61:3e:02:db:b6:12:17:e9:04:
                    d5:6b:81:8a:ba:fd:62:80:fa:53:ad:35:66:ad:75:
                    52:ee:a0:b6:7b:52:bd:1a:fb:b4:78:45:f9:e5:50:
                    45:9c:5e:d1:69:d5:c8:64:54:1a:62:ec:e2:98:7a:
                    26:1b:98:71:38:8b:00:7f:4c:e1:05:fc:56:5b:da:
                    c0:92:49:fb:77:c4:4b:e0:55:40:7b:f7:b4:c5:72:
                    64:55:bd:0e:04:be:8a:1f:c3:7e:0d:57:6c:6a:02:
                    e9:c7:2c:ec:e4:6e:72:bc:61:9e:d5:63:e1:cf:b8:
                    6d:69:f0:30:98:6a:83:89:d5:cb:a0:d7:4c:93:68:
                    bb:0d:23:4f:4a:67:34:0e:c7:9d:bd:78:72:52:b2:
                    d7:b8:b1:5e:d8:96:7c:e5:77:a3:0a:af:20:5b:3b:
                    26:d8:00:77:b7:d3:9c:03:c4:34:f9:17:48:06:5d:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A5:A5:D1:7F:EC:24:B4:AE:32:85:37:A2:D2:1F:41:CC:60:5A:8F
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:05:51:22:dd:a5:99:bf:79:55:e4:1e:72:14:58:ba:f0:fe:
         9e:c9:d0:ea:b8:f6:bf:a4:b9:76:27:6b:03:2e:b0:c5:ec:f7:
         79:0e:91:09:e8:c7:32:d3:65:d4:d2:00:bc:68:de:76:12:87:
         af:32:7b:e4:f2:b6:38:c6:46:3f:9b:b5:aa:e3:6d:39:94:fb:
         a6:49:1f:a7:fc:b0:e0:c5:b6:66:89:13:52:fd:d1:fa:d8:6e:
         94:e3:b9:9d:74:f1:68:98:c7:e5:6b:08:8c:02:52:3c:e0:a4:
         f9:54:e8:d0:59:1b:6a:a4:c0:cf:3d:c5:a0:67:99:1c:e8:bc:
         9b:dd:4b:29:a9:25:e3:9b:ac:16:88:21:d6:c5:d2:67:60:b6:
         7b:46:a3:8d:36:65:c2:aa:24:97:30:c1:8d:dd:e0:5f:79:fc:
         77:4e:e5:8c:7c:33:b6:75:8a:39:0d:fa:c8:90:be:f7:75:99:
         a7:70:8a:6b:07:ad:76:0e:f3:d6:7c:a6:e9:10:d1:68:e0:e5:
         df:41:b4:73:e2:92:bf:42:fc:03:8d:58:a7:a5:a2:bf:e2:f5:
         45:6c:db:a7:87:e1:ba:84:71:3c:2e:07:bf:ca:b8:98:16:7d:
         da:54:b2:9b:b2:19:c6:18:2c:94:7e:b7:07:db:d6:21:2e:6e:
         d0:d6:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:55 2026 by rpki-client