Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa
File:                     3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa (raw, json)
Hash identifier:          S6hC0YjpsJuxmy8Axv3uYCWhbCGQrPkkDePjTyATLac=
Subject key identifier:   52:1C:40:6B:03:28:A1:5D:A0:36:73:2A:ED:FC:96:5A:D7:F8:73:40
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       2959BB243322240D8C69B84055B13F61B28445C9
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa
Signing time:             Mon 11 May 2026 02:49:05 +0000
ROA not before:           Mon 11 May 2026 02:44:05 +0000
ROA not after:            Mon 10 May 2027 02:49:05 +0000
asID:                     133774
IP address blocks:        103.64.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:bb:24:33:22:24:0d:8c:69:b8:40:55:b1:3f:61:b2:84:45:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 11 02:44:05 2026 GMT
            Not After : May 10 02:49:05 2027 GMT
        Subject: CN=521C406B0328A15DA036732AEDFC965AD7F87340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:33:15:2e:ef:37:84:0b:7e:10:e9:90:19:
                    d1:54:43:02:60:3a:ae:68:eb:a1:d1:c5:a5:89:29:
                    9d:47:e2:89:06:38:23:ab:3b:02:0b:b5:4b:e2:f9:
                    10:20:44:02:53:7b:21:a9:94:52:7e:e1:19:1a:24:
                    54:5e:52:9e:3f:1e:de:b5:f5:e6:4e:6f:0a:c0:b7:
                    55:ba:72:ed:ef:68:50:5d:48:4e:b7:54:b7:2a:b6:
                    a2:90:ea:90:03:e1:70:b8:7f:3d:3f:7f:2c:98:8a:
                    07:8c:e8:2a:57:03:43:52:39:5c:98:38:08:a6:25:
                    1d:0b:26:56:45:38:9f:ab:67:27:20:25:be:23:06:
                    50:cd:2e:bf:75:df:00:61:e3:3c:28:c4:9f:af:d5:
                    7c:41:f3:54:47:9c:d7:28:f9:1c:f7:2d:c7:eb:8c:
                    5d:d7:03:2f:00:80:47:51:60:a9:49:ed:58:20:ed:
                    f9:df:25:ca:0c:a6:33:a0:87:91:84:9b:75:c3:f4:
                    23:18:b0:44:3d:0a:cf:25:21:2f:a0:79:c8:5a:e2:
                    cf:0f:d2:cd:40:62:37:91:d2:99:84:1f:f8:6b:71:
                    af:05:9a:ab:75:d6:f4:67:c7:d5:c1:1b:76:f0:34:
                    6d:3c:6f:2a:85:e0:12:63:be:cd:6e:80:57:f6:bb:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1C:40:6B:03:28:A1:5D:A0:36:73:2A:ED:FC:96:5A:D7:F8:73:40
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e36342e3135362e302f32322d3232203d3e20313333373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:30:6c:ad:38:73:2a:0c:8d:32:a3:cd:4a:33:72:d1:da:85:
         16:2a:03:e9:a2:6f:ca:a5:bc:99:39:77:f7:94:2d:ef:ff:b9:
         51:1d:cc:7b:c7:0c:36:f5:d6:81:51:e4:3f:2b:d9:88:f5:88:
         d1:49:3e:e4:c1:8a:73:52:29:cb:d5:8e:f8:66:2e:75:1c:3b:
         a7:eb:2f:4c:75:5b:a1:5b:0e:88:63:86:ea:d3:40:f9:e4:2e:
         18:0f:d3:c9:60:f3:f6:07:d6:cd:ea:7e:d4:9c:ef:de:7b:4a:
         c6:28:ff:8b:b5:ff:e1:2f:b8:ef:b4:88:96:ec:a5:a4:e8:b3:
         c6:c6:05:0a:25:0e:0c:9a:46:d7:a8:b9:d6:bd:86:93:a5:c0:
         e3:b0:27:a4:9c:cb:8c:71:5a:a6:5a:16:7b:ff:a1:7a:37:a2:
         5c:5f:b2:a5:3c:81:da:66:c5:32:6c:3a:28:f8:ca:40:a8:38:
         92:56:d4:5b:a0:e6:b4:28:61:b3:ee:3c:4c:09:33:f1:87:d4:
         f8:06:11:cc:31:19:0d:68:67:1d:12:52:c6:9d:f6:9f:ba:ff:
         4b:f1:65:aa:f8:8b:e9:be:0f:a0:d6:77:64:03:38:32:f1:11:
         c1:eb:80:fb:c7:bd:d3:10:82:7f:c7:5c:78:c8:4a:a5:bc:ba:
         6c:92:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:00 2026 by rpki-client