Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS1054.roa
File:                     AS1054.roa (raw, json)
Hash identifier:          jvdyqNUi/NqPTAtxyqM/tWTSQjZhPQv12eABk6f63H4=
Subject key identifier:   C7:6D:59:5B:54:97:F2:D6:B1:0C:C5:B7:7C:41:39:16:54:87:D0:D3
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       24439735161624C5509D166EB28D753F00A8FB1D
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS1054.roa
Signing time:             Sat 31 Oct 2026 09:57:38 +0000
ROA not before:           Sat 31 Oct 2026 09:52:38 +0000
ROA not after:            Sat 30 Oct 2027 09:57:38 +0000
asID:                     1054
IP address blocks:        103.132.164.0/22 maxlen: 24
                          103.132.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 06:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:43:97:35:16:16:24:c5:50:9d:16:6e:b2:8d:75:3f:00:a8:fb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Oct 31 09:52:38 2026 GMT
            Not After : Oct 30 09:57:38 2027 GMT
        Subject: CN=C76D595B5497F2D6B10CC5B77C4139165487D0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:ab:42:53:47:9a:66:d4:1e:a6:92:68:8f:
                    6c:8a:9c:c6:f1:27:9c:79:21:55:af:5f:f9:ce:80:
                    2d:f2:93:f9:a7:ff:50:af:d8:5d:f2:e3:57:d2:be:
                    43:51:39:f3:83:e4:64:66:0e:df:3d:ff:e1:5e:fc:
                    9b:95:6d:b8:f9:d7:06:19:21:a8:ba:26:17:52:14:
                    21:a7:c0:05:26:93:19:5f:7f:06:26:42:27:14:f6:
                    df:9e:cc:1b:92:37:37:ef:fa:ed:d4:78:31:48:81:
                    f9:dd:d2:f1:29:9c:20:37:d6:62:ef:46:96:85:ff:
                    7a:48:61:84:1f:c0:d2:42:6f:bb:59:32:8e:d0:08:
                    55:53:ff:3e:2b:08:68:06:4f:d1:46:f4:78:6a:da:
                    39:07:f1:0b:0e:c9:e1:32:7b:d3:07:14:8b:bb:a9:
                    48:52:b5:c5:17:59:66:f8:21:2a:04:1a:d6:d6:de:
                    42:f9:e0:5d:b7:34:0c:9c:f3:5d:9d:f3:3b:9f:40:
                    3a:45:01:4e:a7:97:bb:3c:39:7e:63:e1:bc:d4:ce:
                    63:3c:56:41:67:c7:50:d8:54:d1:4a:d7:c1:47:ec:
                    17:ec:31:10:a1:01:8a:8d:b1:8d:40:75:0c:28:ac:
                    fb:41:0f:54:15:d8:64:61:30:21:ca:1f:76:fc:ce:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6D:59:5B:54:97:F2:D6:B1:0C:C5:B7:7C:41:39:16:54:87:D0:D3
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS1054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:d9:03:aa:e5:18:80:2c:17:21:04:d2:b0:14:06:6e:e1:
         23:99:8c:af:26:ba:1b:44:1c:3e:70:5f:a4:dc:e1:88:1d:0f:
         ec:04:c1:df:4c:92:fd:4a:01:ab:ab:ae:7c:11:31:fb:b7:71:
         92:bb:bf:f2:ea:91:bd:6b:f0:56:4b:8e:8d:05:b5:bd:e6:f3:
         46:6f:10:b2:41:d9:38:e4:78:d4:f7:27:5a:7d:06:58:45:c8:
         45:64:a4:81:f8:aa:c0:c0:7f:d6:19:56:ad:ea:aa:06:83:9e:
         2b:cb:41:d2:23:81:58:65:a2:97:65:70:8c:1a:7d:28:9c:d0:
         5b:91:74:95:68:88:a4:ed:f3:fd:09:a2:55:42:ed:44:8a:31:
         f4:78:77:66:ff:fc:5c:62:47:36:3d:28:be:96:bd:48:e3:7f:
         a8:2f:34:3d:54:47:ff:f5:c8:16:e4:0f:dd:0e:0c:68:c7:38:
         68:aa:8f:f7:36:4c:d6:22:14:e2:99:0c:bd:e1:82:ae:f4:09:
         c9:e5:bd:7d:45:69:a1:e1:16:89:9e:2b:99:2a:2f:95:00:38:
         fc:46:d2:97:10:f2:81:07:34:5d:ec:20:41:7b:07:ad:4c:99:
         f4:d3:26:73:06:e3:54:e1:72:4e:85:1d:7b:c4:b7:d0:a6:fd:
         91:ab:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:18:06 2026 by rpki-client