Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32332d3234203d3e203535393936.roa
File:                     3130332e36312e3139302e302f32332d3234203d3e203535393936.roa (raw, json)
Hash identifier:          PXMzRIdaKTMt7AogtofdMReMyOa66iDkmwy5iBYSGBQ=
Subject key identifier:   D8:C0:8B:47:6E:B1:A4:92:C7:92:97:BF:B6:08:D3:6E:2A:58:47:31
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       343B693A4D96E44B8BB5E03409C47E7A52614A26
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32332d3234203d3e203535393936.roa
Signing time:             Thu 07 May 2026 16:06:43 +0000
ROA not before:           Thu 07 May 2026 16:01:43 +0000
ROA not after:            Thu 06 May 2027 16:06:43 +0000
asID:                     55996
IP address blocks:        103.61.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:69:3a:4d:96:e4:4b:8b:b5:e0:34:09:c4:7e:7a:52:61:4a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 16:01:43 2026 GMT
            Not After : May  6 16:06:43 2027 GMT
        Subject: CN=D8C08B476EB1A492C79297BFB608D36E2A584731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:36:37:ad:a4:93:f4:51:f5:ee:44:9d:84:
                    f2:a3:6f:dc:f7:90:be:e6:fd:36:e8:b6:26:6a:cd:
                    c5:ad:55:63:d8:39:4a:64:4b:16:e4:57:a4:8b:57:
                    98:83:20:06:60:c5:75:fd:93:c4:e0:06:40:e1:d5:
                    d1:37:d7:ff:0c:be:c8:ea:8e:17:2a:3e:b1:db:f0:
                    96:b2:93:a7:31:12:87:40:7b:3f:51:8d:97:28:45:
                    c1:15:cb:f7:c3:6f:bf:01:b7:1a:88:8e:85:e4:12:
                    d3:2a:bc:9b:b9:61:b1:c1:06:50:32:cf:c7:74:90:
                    63:e7:70:7c:d9:4b:54:03:f3:1f:d1:ac:68:b0:16:
                    9f:ee:74:d7:c3:69:8d:d8:17:f8:d8:51:58:9f:fe:
                    54:39:da:60:0c:36:ba:ae:c2:de:e7:6f:07:b0:e1:
                    63:8d:34:8d:e3:dd:00:1b:08:64:5a:6c:fa:c6:e7:
                    cc:da:e7:62:ed:17:1d:5e:cf:a4:32:df:15:ce:51:
                    5c:bc:ad:cc:2b:db:a3:ce:df:fe:dc:0c:d5:2d:3d:
                    e2:ed:f2:63:b7:6b:22:e6:6c:2e:1e:3d:87:01:63:
                    04:7e:49:af:0a:75:cf:d4:69:b9:09:24:51:ed:0a:
                    c9:29:f3:29:d4:61:87:82:12:e4:8c:9d:e8:72:35:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:8B:47:6E:B1:A4:92:C7:92:97:BF:B6:08:D3:6E:2A:58:47:31
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32332d3234203d3e203535393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:64:8b:38:af:42:49:79:de:28:4b:0d:b8:09:ef:80:e5:23:
         09:8d:03:22:26:b7:4b:28:4f:2f:f5:64:69:a5:a7:50:a9:26:
         b1:43:2e:55:94:94:f0:66:86:29:eb:d8:b3:f4:8b:f5:d4:34:
         14:3c:3b:6c:a0:57:17:03:96:14:9c:d3:99:86:73:a6:25:78:
         54:2c:fa:29:62:86:92:6d:84:0b:b0:46:2c:6e:1b:a1:34:4d:
         3f:30:28:f4:dd:4d:6e:09:10:56:e2:e1:71:1c:5a:28:cd:67:
         40:85:e8:ab:32:b5:25:69:3a:50:d4:db:bd:88:20:00:21:c9:
         e4:b1:2c:27:7f:16:48:21:c5:19:cb:19:28:0f:c6:a3:19:92:
         2f:c9:03:94:b4:01:89:12:20:71:0b:9f:f9:df:7a:bd:d0:fc:
         72:12:97:d7:c6:71:9c:3d:68:35:8b:df:77:d2:a1:32:e3:6c:
         79:98:6f:b8:c4:1d:6f:2e:e3:bb:ff:24:ff:be:fa:54:41:83:
         4f:bf:dc:3b:1d:95:11:84:7a:25:27:63:e8:06:a0:0b:4c:ce:
         69:37:79:30:f0:3d:cd:d9:a7:11:65:3f:73:e2:d4:07:9d:91:
         27:2f:fa:4a:50:6d:00:3d:c0:8c:46:0d:5a:3a:bd:60:ee:31:
         91:cf:55:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:36:43 2026 by rpki-client