Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32342d3234203d3e203137383136.roa
File:                     3130332e3231392e38362e302f32342d3234203d3e203137383136.roa (raw, json)
Hash identifier:          MsotgNCbJVnwcF6GNHfJFvug+8qFy3u27Fwx0K4RaYs=
Subject key identifier:   85:B0:86:45:DB:B2:16:D7:FE:71:AD:F4:4E:B2:E6:6B:EF:BB:2C:5C
Certificate issuer:       /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial:       6CC562EDA6C17326C626556BDDF045E603DA2D90
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32342d3234203d3e203137383136.roa
Signing time:             Sat 09 May 2026 01:20:08 +0000
ROA not before:           Sat 09 May 2026 01:15:08 +0000
ROA not after:            Sat 08 May 2027 01:20:08 +0000
asID:                     17816
IP address blocks:        103.219.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c5:62:ed:a6:c1:73:26:c6:26:55:6b:dd:f0:45:e6:03:da:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
        Validity
            Not Before: May  9 01:15:08 2026 GMT
            Not After : May  8 01:20:08 2027 GMT
        Subject: CN=85B08645DBB216D7FE71ADF44EB2E66BEFBB2C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:df:10:e2:51:bd:4f:ed:4a:9e:da:cd:ac:
                    d8:1d:69:a1:49:f1:5c:54:ea:25:79:f5:d9:d8:06:
                    1b:8a:3c:c7:c0:90:9d:c0:0d:8b:d0:3b:4f:d4:9b:
                    6e:d2:52:dc:02:fa:20:de:3d:de:f5:45:5d:8e:92:
                    c4:fd:c3:91:89:3b:78:a2:72:e4:62:95:cd:d8:3c:
                    45:ef:d5:8f:4d:57:15:1f:06:c3:e8:e3:d4:a8:30:
                    cf:ce:99:8e:f8:3d:75:31:6e:92:a2:29:73:d8:c0:
                    3b:2b:10:0e:81:53:09:33:ba:b7:dc:29:95:c1:c5:
                    41:43:e3:c7:f4:bd:af:77:67:13:c9:e7:f6:00:a7:
                    6a:b6:a4:b6:5b:56:c5:ef:7f:2c:4a:6f:44:c7:91:
                    4a:37:1e:f0:13:41:23:c1:01:6e:d8:13:d2:71:61:
                    aa:21:ae:3a:f8:a4:ab:33:81:c4:4c:b7:99:55:7f:
                    a1:0b:b7:de:83:97:71:64:8a:87:ed:82:58:5d:cd:
                    15:e3:99:1d:da:f3:77:1b:a3:4e:b2:c0:69:f4:fa:
                    ee:d3:57:5c:5d:d7:93:d5:2d:f2:01:a8:98:ea:d6:
                    1b:33:7b:ea:03:0e:8b:d7:08:1a:da:3f:26:a4:d7:
                    46:2f:4e:63:e9:13:b9:db:32:2a:c8:9e:39:73:66:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:86:45:DB:B2:16:D7:FE:71:AD:F4:4E:B2:E6:6B:EF:BB:2C:5C
            X509v3 Authority Key Identifier:
                keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32342d3234203d3e203137383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:7c:53:1b:50:ad:84:48:5c:68:64:9d:8d:72:44:b6:10:
         98:cc:6d:49:1d:58:e1:cf:05:68:c7:98:b3:d8:3b:b7:a0:ab:
         58:e8:93:45:b4:cf:53:8d:db:03:11:0c:1e:c7:cc:c7:85:86:
         46:9b:55:bf:bc:c9:17:30:ba:28:9f:0f:06:ee:6c:45:b8:52:
         29:a5:0c:d4:e7:e8:d7:c3:02:39:df:e9:65:1f:ef:08:85:22:
         47:48:7c:6a:86:f2:9f:81:c1:f7:4c:c6:c5:8d:c8:e8:aa:13:
         83:74:15:76:eb:75:f5:31:d4:89:ef:77:70:29:68:ce:f4:bf:
         b3:e6:a5:32:33:d2:eb:38:22:6e:d5:f0:8b:4a:34:20:b1:09:
         73:c0:fe:d7:11:e1:7d:f1:e3:26:a6:82:8e:f0:bc:48:7e:4e:
         15:31:ca:4b:4d:bc:9a:72:a3:fe:39:26:ca:b4:21:e8:3e:03:
         ef:e1:ce:05:d4:cb:e8:e5:aa:75:36:89:45:35:d2:80:6c:32:
         6a:3d:df:30:bb:a7:f2:a6:89:6c:cb:12:f3:06:84:76:8e:9f:
         bb:48:7f:d3:5c:35:60:11:08:3f:61:b7:58:e4:d6:c5:11:b5:
         0a:e2:48:36:53:44:e2:85:05:77:9e:08:b3:d4:1f:bf:90:f4:
         99:d0:e6:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:06:31 2026 by rpki-client