Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa
File:                     3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa (raw, json)
Hash identifier:          V0EG+w4//opp0LXEw2L6fUoisMZUJ3b1c3mJzeOwhn4=
Subject key identifier:   0A:E0:93:CF:6D:89:43:85:CF:F8:4B:A8:48:F4:A0:F4:9F:FA:94:09
Certificate issuer:       /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial:       1B0503D7034E2DE25E3EA4923D6416A5F621EBE3
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa
Signing time:             Thu 23 Apr 2026 07:47:12 +0000
ROA not before:           Thu 23 Apr 2026 07:42:12 +0000
ROA not after:            Thu 22 Apr 2027 07:47:12 +0000
asID:                     59012
IP address blocks:        103.110.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:05:03:d7:03:4e:2d:e2:5e:3e:a4:92:3d:64:16:a5:f6:21:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
        Validity
            Not Before: Apr 23 07:42:12 2026 GMT
            Not After : Apr 22 07:47:12 2027 GMT
        Subject: CN=0AE093CF6D894385CFF84BA848F4A0F49FFA9409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:3d:57:a7:b7:12:d9:a5:26:04:0d:0a:23:
                    3d:29:d5:9e:37:b4:d3:e3:11:19:01:fb:b3:79:e2:
                    ea:0e:2b:cb:e3:59:63:0d:e0:a6:e4:37:29:ea:b3:
                    f4:e3:f2:83:05:15:91:c3:95:99:3e:d6:fa:b3:27:
                    79:80:2b:6c:e4:af:40:1d:0f:d8:68:03:e9:dd:2e:
                    72:c6:ab:39:94:1d:11:5e:d7:35:8b:0f:a1:27:43:
                    f9:41:1c:0d:aa:b9:b0:2f:00:63:d3:0b:9c:93:0e:
                    9d:ce:61:07:4a:97:e0:4f:70:9c:f6:1a:87:bf:7e:
                    d7:40:bf:b4:6a:41:6a:b8:33:a5:f2:00:be:93:9b:
                    61:2c:15:16:cb:7e:ee:39:a0:86:54:72:30:ff:b5:
                    8e:63:f9:fe:a0:36:f4:57:30:b3:58:01:c7:c6:e1:
                    be:6b:41:c9:84:92:52:46:26:50:6b:8a:c4:f3:1c:
                    d9:ad:e9:ef:a0:a2:1f:c2:e5:15:d2:dc:51:c5:22:
                    71:65:7b:cf:15:34:4e:62:d9:66:2b:d6:d7:9b:2e:
                    fd:29:57:b7:66:32:6a:70:c2:3d:a9:d4:3c:6a:00:
                    08:62:d2:23:7b:79:eb:0d:99:42:3d:2b:d7:51:57:
                    d5:1d:b9:aa:24:07:a2:fc:79:0b:4e:4c:96:f9:85:
                    82:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E0:93:CF:6D:89:43:85:CF:F8:4B:A8:48:F4:A0:F4:9F:FA:94:09
            X509v3 Authority Key Identifier:
                keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:28:c5:60:5e:bc:51:8c:77:90:c5:30:b4:21:fc:37:af:3c:
         24:3d:ba:9a:0c:a6:a1:4c:0b:21:f4:03:46:0d:1a:8b:82:39:
         0d:40:d9:c9:11:e3:3a:47:3a:a0:ff:4d:0c:b5:b3:94:16:a7:
         d9:07:97:d4:df:37:0c:63:32:f5:09:03:df:16:c4:20:55:a5:
         bb:70:e5:fc:47:06:41:a5:59:22:95:b2:60:76:13:0d:7d:27:
         50:1d:e3:46:57:8f:59:31:f2:19:63:04:ae:8d:62:53:4f:32:
         a2:9b:34:a6:9b:9b:de:c0:ee:46:44:3e:66:96:fe:bb:d5:20:
         84:fd:cb:96:6e:03:7c:59:7c:7d:f8:58:1d:ea:12:48:5d:58:
         c9:39:78:89:68:ce:91:4f:dd:65:65:e1:49:47:e2:20:e3:73:
         71:3c:6d:0c:97:2e:7c:f8:14:7b:06:a6:fe:81:8c:54:84:6f:
         88:10:0c:b5:48:51:08:0f:fb:3e:62:ce:d6:2e:72:81:24:d5:
         f3:15:ef:ed:81:48:61:f7:48:f0:e4:ae:ee:76:44:37:24:2c:
         29:a3:b1:1f:a7:8f:1f:f9:94:ad:44:0d:89:41:ef:f3:4d:55:
         d7:27:c9:f3:21:0a:27:fb:fd:18:e5:81:62:35:0a:a3:3d:cb:
         97:7b:1b:4f
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUGwUD1wNOLeJePqSSPWQWpfYh6+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJF
MTgwODVGOTAeFw0yNjA0MjMwNzQyMTJaFw0yNzA0MjIwNzQ3MTJaMDMxMTAvBgNV
BAMTKDBBRTA5M0NGNkQ4OTQzODVDRkY4NEJBODQ4RjRBMEY0OUZGQTk0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXIz1Xp7cS2aUmBA0KIz0p1Z43
tNPjERkB+7N54uoOK8vjWWMN4KbkNynqs/Tj8oMFFZHDlZk+1vqzJ3mAK2zkr0Ad
D9hoA+ndLnLGqzmUHRFe1zWLD6EnQ/lBHA2qubAvAGPTC5yTDp3OYQdKl+BPcJz2
Goe/ftdAv7RqQWq4M6XyAL6Tm2EsFRbLfu45oIZUcjD/tY5j+f6gNvRXMLNYAcfG
4b5rQcmEklJGJlBrisTzHNmt6e+goh/C5RXS3FHFInFle88VNE5i2WYr1tebLv0p
V7dmMmpwwj2p1DxqAAhi0iN7eesNmUI9K9dRV9UduaokB6L8eQtOTJb5hYJzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUCuCTz22JQ4XP+EuoSPSg9J/6lAkwHwYDVR0j
BBgwFoAUpu9Oonqm3Trt5/gqvxGA2+GAhfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjE0MDAzNS8wL0E2RUY0RUEyN0FBNkREM0FFREU3RjgyQUJGMTE4
MERCRTE4MDg1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIxNDAwMzUvMC8zMTMwMzMyZTMx
MzEzMDJlMzEzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzEzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGduizANBgkqhkiG9w0BAQsFAAOCAQEAqyjFYF68UYx3kMUwtCH8
N688JD26mgymoUwLIfQDRg0ai4I5DUDZyRHjOkc6oP9NDLWzlBan2QeX1N83DGMy
9QkD3xbEIFWlu3Dl/EcGQaVZIpWyYHYTDX0nUB3jRlePWTHyGWMEro1iU08yops0
ppub3sDuRkQ+Zpb+u9UghP3Llm4DfFl8ffhYHeoSSF1YyTl4iWjOkU/dZWXhSUfi
IONzcTxtDJcufPgUewam/oGMVIRviBAMtUhRCA/7PmLO1i5ygSTV8xXv7YFIYfdI
8OSu7nZENyQsKaOxH6ePH/mUrUQNiUHv801V1yfJ8yEKJ/v9GOWBYjUKoz3Ll3sb
Tw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:30 2026 by rpki-client