Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
File:                     3130332e34352e3136302e302f32322d3234203d3e203133333738.roa (raw, json)
Hash identifier:          kUZ7KcfVFnED9sfnL7AkisPNMkuCJI+ii50jloiZfWI=
Subject key identifier:   94:11:2C:2C:9A:D2:C6:C6:20:6B:10:59:C2:F5:83:76:65:9F:0D:AC
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       07F0EFF18D98085F36827FB6A23922B0CE98A31F
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa
Signing time:             Mon 28 Sep 2026 01:00:35 +0000
ROA not before:           Mon 28 Sep 2026 00:55:35 +0000
ROA not after:            Mon 27 Sep 2027 01:00:35 +0000
asID:                     13378
IP address blocks:        103.45.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:ef:f1:8d:98:08:5f:36:82:7f:b6:a2:39:22:b0:ce:98:a3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:35 2026 GMT
            Not After : Sep 27 01:00:35 2027 GMT
        Subject: CN=94112C2C9AD2C6C6206B1059C2F58376659F0DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:e3:58:90:d1:1b:bc:4f:b8:58:53:e7:6e:
                    78:a8:6e:ba:8c:c3:31:53:f4:10:72:c6:9d:92:86:
                    75:66:71:09:27:07:f0:ce:db:3d:3a:c0:19:9f:1d:
                    d2:a9:00:71:d8:20:ab:29:9c:2f:1b:01:a2:52:77:
                    23:e0:90:e7:ea:38:fb:3e:19:31:ad:3e:86:a2:7a:
                    18:e3:92:56:54:39:b8:05:5a:ea:bd:c7:16:8e:4b:
                    6c:02:4a:ca:a4:f2:0b:8f:f2:72:3e:91:be:7f:46:
                    3d:8a:be:8d:9b:0d:57:88:dc:4c:1a:a3:a6:64:20:
                    b5:7d:10:9d:e1:d4:4d:3b:f1:1a:22:20:20:0e:12:
                    2f:b9:07:0e:44:df:7c:48:96:ea:82:2c:5f:3d:05:
                    aa:49:82:e6:76:c1:95:fd:30:db:b1:43:52:ff:a9:
                    de:75:95:52:2f:a5:00:81:cd:8d:23:56:7a:46:45:
                    b7:97:25:a5:d5:c0:90:ac:5c:c5:0d:3b:b2:db:0b:
                    11:7e:70:10:0f:81:75:05:54:36:da:29:05:e4:37:
                    95:5e:17:b6:af:41:5a:96:70:9d:0f:0e:4b:fd:e9:
                    e1:5b:e9:bc:34:47:c9:ab:c4:ae:cb:39:d5:b4:2a:
                    a4:79:b7:11:7c:09:fa:84:03:5f:5c:f8:3e:0f:cf:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:11:2C:2C:9A:D2:C6:C6:20:6B:10:59:C2:F5:83:76:65:9F:0D:AC
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203133333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:89:72:35:8c:0a:77:aa:7b:fc:bb:dd:ee:1c:f9:be:00:
         2d:da:57:2a:20:c2:ed:7d:bb:98:f6:de:08:ea:43:6b:9b:4d:
         cb:f8:be:45:7e:7b:6a:c5:24:04:34:bd:29:04:c1:46:c3:52:
         26:9c:99:d8:47:f7:92:81:f5:0a:68:ce:18:52:37:1d:fc:ee:
         a0:8b:a3:a0:97:fc:8d:09:13:0c:00:67:98:62:b1:a6:2e:80:
         d1:d0:64:2e:5f:d7:db:29:5e:32:db:25:c7:ba:99:87:6e:30:
         c5:77:38:b0:b4:c9:7e:c6:da:03:55:d5:38:a8:d3:96:49:e7:
         67:92:78:df:f0:4b:a7:c3:82:f9:17:bc:18:d4:c0:fb:02:ab:
         75:2c:d2:d1:b7:3b:63:2e:ef:14:bd:8a:86:c5:d3:dd:d2:77:
         f3:d2:2a:7f:e0:b1:8b:92:3c:57:43:2c:e3:56:04:0e:bc:99:
         5f:25:46:37:b4:31:a9:79:ab:0c:9d:c8:61:08:fa:62:08:fa:
         23:ba:98:17:bb:ce:ba:f3:67:81:43:b9:f1:6c:43:17:62:51:
         e4:3f:c2:7e:81:9d:31:9c:f6:fa:f5:b1:5f:74:52:ed:ef:cb:
         25:16:6f:32:fb:b7:94:02:02:bf:c0:6d:6a:65:20:8a:62:d0:
         57:6f:f9:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:22:56 2026 by rpki-client