Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32342d3234203d3e20313331353734.roa
File:                     3130332e34312e322e302f32342d3234203d3e20313331353734.roa (raw, json)
Hash identifier:          MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=
Subject key identifier:   16:05:4D:EE:16:8F:07:6C:04:A2:8B:F2:95:30:47:DC:32:AB:51:B3
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       7DDF27A187D07E27B906676B700EDFF826A13FA1
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32342d3234203d3e20313331353734.roa
Signing time:             Wed 13 May 2026 05:22:57 +0000
ROA not before:           Wed 13 May 2026 05:17:57 +0000
ROA not after:            Wed 12 May 2027 05:22:57 +0000
asID:                     131574
IP address blocks:        103.41.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:df:27:a1:87:d0:7e:27:b9:06:67:6b:70:0e:df:f8:26:a1:3f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: May 13 05:17:57 2026 GMT
            Not After : May 12 05:22:57 2027 GMT
        Subject: CN=16054DEE168F076C04A28BF2953047DC32AB51B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:56:6d:b5:f5:b1:91:60:66:93:0f:11:9f:62:
                    7b:29:06:0e:dc:4f:fa:f5:5c:1e:b2:2b:fd:b5:d0:
                    7d:d9:02:16:3c:fd:0d:27:a9:38:dc:01:61:d4:fc:
                    30:69:e5:8e:22:65:d3:a1:73:91:99:a6:67:cd:eb:
                    fd:8c:f7:e1:96:d3:fd:06:31:c0:b1:2e:83:f0:b3:
                    a7:b9:fd:4e:27:c0:2a:02:70:b5:0b:2c:fb:a5:c3:
                    5c:33:4e:bf:ce:cb:7f:68:7f:b2:57:dd:7f:a4:2f:
                    08:96:99:c9:73:db:10:3b:29:3e:cc:8a:16:dd:05:
                    11:6a:3a:fd:b7:7f:eb:68:f1:76:c9:6d:dd:69:de:
                    b7:0a:dd:d5:82:4e:d7:1e:c2:c1:0d:d7:41:04:37:
                    7f:8e:e5:30:7f:aa:bc:1b:90:76:0c:d9:b4:bc:ee:
                    9b:26:87:47:52:70:29:8a:55:33:16:29:67:2d:18:
                    91:e7:ce:bc:6d:9d:b0:bf:d9:8c:ee:ac:c5:76:c1:
                    36:b5:ff:36:93:99:e5:72:5e:4b:ae:48:40:2e:fd:
                    99:6f:e9:5b:08:43:31:4e:4c:f5:c1:98:07:6a:ac:
                    97:8a:a8:53:a2:11:79:8f:b3:ad:30:71:c7:d1:9f:
                    9f:c9:59:d8:cd:4e:72:d8:1e:ab:63:43:94:a1:c1:
                    12:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:05:4D:EE:16:8F:07:6C:04:A2:8B:F2:95:30:47:DC:32:AB:51:B3
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32342d3234203d3e20313331353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:01:eb:ce:9b:8e:5d:69:fb:88:9d:0d:e2:ff:0a:22:6a:3c:
         5d:d4:89:ce:1d:78:78:6d:c1:c2:b4:5d:55:d2:03:93:1a:75:
         cb:ee:24:fe:ab:20:31:90:8e:b0:f1:c5:66:25:bf:a1:8b:cc:
         5c:3b:5a:fa:5b:60:7c:4b:73:fb:a4:0c:12:15:2b:7e:2e:9a:
         3a:7c:da:94:6d:6f:ec:8b:f8:72:f7:dc:81:5d:c8:c7:b3:55:
         60:0e:38:da:f1:35:dd:ae:7d:2a:d7:81:af:af:80:a6:17:b7:
         fd:5c:02:75:ac:c8:3f:51:e2:21:96:ac:28:b4:6a:76:86:98:
         af:a0:ea:73:99:e9:8e:59:cd:eb:39:78:31:96:97:0b:b6:70:
         df:e7:2d:f1:5a:bb:f5:97:b3:10:93:e3:a4:44:c0:5e:6a:26:
         73:81:b7:70:a8:58:65:74:bd:fc:d0:79:08:af:d3:b1:d6:0f:
         0e:cf:56:82:1a:b3:50:53:12:e5:a9:47:b5:74:ef:7f:11:4d:
         82:ac:3e:86:5a:45:1d:a4:4a:64:fb:d4:34:a2:3b:11:af:5c:
         ec:89:7f:50:3e:56:e3:af:ee:3a:68:41:38:91:c6:20:11:e1:
         09:92:fa:bf:43:74:1b:11:c7:6e:01:cc:14:8e:a4:cc:52:3b:
         0e:93:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:49 2026 by rpki-client