Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          nj1XuBZcIhwUhDaapH2EIsU4FY7yiIz6hDhKXmgxuhU=
Subject key identifier:   14:0E:02:6C:B3:09:64:EA:33:11:23:59:53:37:C0:DF:B6:9A:35:12
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       58C136D3F321113A9F22830812D345E616E82DC0
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa
Signing time:             Wed 23 Sep 2026 02:04:20 +0000
ROA not before:           Wed 23 Sep 2026 01:59:20 +0000
ROA not after:            Wed 22 Sep 2027 02:04:20 +0000
asID:                     151263
IP address blocks:        103.45.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 21:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c1:36:d3:f3:21:11:3a:9f:22:83:08:12:d3:45:e6:16:e8:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Sep 23 01:59:20 2026 GMT
            Not After : Sep 22 02:04:20 2027 GMT
        Subject: CN=140E026CB30964EA331123595337C0DFB69A3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:74:ad:94:b2:9e:9b:b6:fa:09:37:ef:17:
                    04:49:1a:18:4d:39:14:f2:d0:63:39:a3:74:98:99:
                    44:4a:40:cb:5a:ac:14:49:17:a2:f3:74:60:ef:29:
                    5d:32:24:56:d1:8c:55:a9:f0:7b:79:ba:0a:29:df:
                    92:ec:8a:cb:74:0d:c0:d9:9d:83:8a:99:10:af:83:
                    dc:8f:d5:d4:ae:ca:e1:71:d7:37:86:5d:5d:1f:0f:
                    37:48:61:b1:df:cd:2d:58:ea:26:00:c5:8d:e5:ba:
                    bd:e3:02:6c:87:b6:38:b2:af:5a:e5:e0:e2:ee:79:
                    e9:31:85:8a:79:77:e3:20:48:48:37:ce:71:e4:5b:
                    b3:1a:68:85:03:70:d3:e5:05:0d:63:62:dd:22:fc:
                    3d:db:7d:01:87:60:e0:b5:c1:38:17:3d:cd:a1:89:
                    c5:24:b8:43:85:3c:2a:6a:f1:2a:00:78:6d:31:05:
                    91:f8:00:ba:5a:db:9a:fc:aa:78:fd:56:e8:5e:c2:
                    6a:08:7b:94:4c:5a:38:36:d1:bf:c5:d8:49:2d:8b:
                    65:6b:1d:ea:cd:3f:41:37:fd:3e:a1:78:50:ae:ff:
                    88:52:ab:3f:89:95:03:9e:ca:87:be:fe:06:21:8c:
                    a3:22:ee:bd:fe:5d:4d:a7:0d:8d:41:b2:ae:dc:98:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:02:6C:B3:09:64:EA:33:11:23:59:53:37:C0:DF:B6:9A:35:12
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134342e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:c8:4a:d2:57:cd:97:0d:ca:13:8b:c4:ee:fc:98:29:49:
         9a:f7:51:fc:19:c5:43:08:f9:b7:24:6a:b7:ac:a1:47:22:0a:
         e1:19:84:5b:6d:aa:6f:41:4d:e2:f7:7c:98:66:99:b7:4b:74:
         44:6d:70:88:36:fb:8f:4b:90:20:9c:9f:e2:14:d7:e0:49:14:
         10:d8:83:4a:26:48:3b:7b:86:0b:f6:ec:3a:82:8d:a9:ae:45:
         b7:16:e8:4d:da:81:ae:d5:64:56:28:a3:00:a4:af:4f:3c:fb:
         97:fe:9a:c9:19:5c:59:ec:6c:7b:11:71:6a:63:8a:fe:86:ed:
         c6:b7:3c:fb:4e:71:bb:bf:2f:a9:20:33:0d:82:b8:23:d0:2e:
         46:2f:a3:a0:2d:38:c4:79:c6:7e:0d:08:16:6e:73:e4:12:ea:
         5f:f8:46:8a:4d:ba:8e:42:0d:fa:46:56:a9:3c:13:2c:94:31:
         9d:46:a9:6f:e8:96:1b:43:ba:77:7d:13:1e:ed:bf:05:9a:c8:
         f4:7a:2d:72:af:41:60:d9:ce:0a:00:f7:10:92:48:78:6d:b4:
         fe:88:ba:7f:6d:7a:b9:b5:97:2b:f3:56:c7:c9:dc:c4:77:14:
         54:10:c2:43:59:f3:09:7e:b7:86:28:e9:05:5a:de:eb:fc:69:
         0e:e8:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 22:19:44 2026 by rpki-client