Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134823.roa
File:                     AS134823.roa (raw, json)
Hash identifier:          dXFXqdbUWbLAz57ogL8UZc3s0L76L9nRxbuQmx6PaKQ=
Subject key identifier:   AF:48:4C:A8:BE:AF:A7:6B:6F:F3:6B:B1:43:34:85:DD:4E:C9:BA:17
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       2605EAF0E1790757EA7AD4BEAF6EA85794D84D21
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134823.roa
Signing time:             Sat 31 Oct 2026 05:09:41 +0000
ROA not before:           Sat 31 Oct 2026 05:04:41 +0000
ROA not after:            Sat 30 Oct 2027 05:09:41 +0000
asID:                     134823
IP address blocks:        103.118.204.0/22 maxlen: 24
                          103.118.208.0/22 maxlen: 24
                          103.118.212.0/22 maxlen: 24
                          103.118.216.0/22 maxlen: 24
                          103.118.220.0/22 maxlen: 24
                          103.118.248.0/22 maxlen: 24
                          103.132.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 06:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:05:ea:f0:e1:79:07:57:ea:7a:d4:be:af:6e:a8:57:94:d8:4d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Oct 31 05:04:41 2026 GMT
            Not After : Oct 30 05:09:41 2027 GMT
        Subject: CN=AF484CA8BEAFA76B6FF36BB1433485DD4EC9BA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:33:56:5b:af:43:5e:dd:c1:2f:0a:81:7c:
                    b0:19:a8:8c:d7:e6:a4:48:db:16:fa:2e:1a:1f:fe:
                    c1:ca:86:6b:4f:e2:11:7c:92:7e:e9:b3:dc:4c:da:
                    c4:89:7a:a0:f6:46:2d:cc:7e:93:c2:32:19:9b:50:
                    cd:13:ba:68:1c:bb:5a:22:b8:5f:29:28:86:f7:93:
                    47:2e:e2:a2:dd:d6:87:e5:b7:a3:27:7e:ab:ec:ee:
                    14:8b:8b:75:61:f0:ef:d0:a9:63:b1:c0:55:95:18:
                    33:b5:8f:e7:b9:8b:91:82:a4:e7:9a:b1:db:39:29:
                    de:cc:27:d2:45:b0:9f:6d:e3:35:7c:22:c1:a5:30:
                    ec:cd:6d:60:6d:22:07:4e:a3:18:67:ea:2c:6c:bb:
                    45:33:22:27:a0:6e:78:52:e8:15:1c:79:28:d1:59:
                    32:72:34:9c:6c:ec:ac:a2:f1:e2:88:6c:2e:8b:75:
                    b5:c7:5d:f8:40:2d:d0:bf:ad:18:da:53:8a:2d:ea:
                    56:12:c4:26:d5:d7:e9:d1:e6:99:65:68:e7:9f:a8:
                    b7:a8:75:b8:f4:ab:dc:d0:50:73:8b:41:d2:38:3c:
                    fd:96:7e:a0:a9:18:4f:31:35:3e:45:30:a6:e3:3e:
                    7a:f4:1c:c0:df:0b:5b:b1:6c:71:57:19:9a:c8:e0:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:48:4C:A8:BE:AF:A7:6B:6F:F3:6B:B1:43:34:85:DD:4E:C9:BA:17
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134823.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.204.0-103.118.223.255
                  103.118.248.0/22
                  103.132.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:8e:99:39:3c:6b:c3:71:35:c5:63:bc:c9:38:ee:0f:88:
         d0:6f:8b:85:52:70:67:b0:31:1d:b9:12:12:91:0e:cd:36:4a:
         d8:4f:96:10:6a:e8:45:db:d3:af:8e:e3:fb:c8:e1:56:22:e7:
         43:c2:5d:0f:f3:b0:ee:d0:9f:b2:61:21:ae:be:60:35:35:8e:
         07:3e:8b:04:ec:cc:94:29:77:9f:c8:b8:d1:d4:c7:bc:f1:eb:
         cc:f3:39:04:c9:da:89:ea:96:3a:e8:3a:b4:f0:80:2f:f3:09:
         44:a3:7f:70:57:90:18:71:0c:88:26:15:e1:28:1a:cb:c6:14:
         a7:01:a7:d5:29:ae:07:45:8e:a7:b4:1c:07:a9:02:28:58:fd:
         be:df:a2:b9:9a:2c:30:f0:11:97:be:44:10:2c:58:8a:6f:2e:
         fd:74:e2:25:a8:67:8b:7f:00:16:f8:d9:a4:e3:6e:99:cd:cd:
         b3:f7:46:4d:c2:4c:b4:e9:69:33:b9:5b:7f:07:64:39:6d:d1:
         34:2d:dc:ee:da:e6:43:fe:e1:d2:67:25:86:d4:97:60:83:ac:
         a0:ca:79:93:4f:00:16:f9:66:c0:46:57:43:5e:ac:48:10:a3:
         92:42:b4:94:14:25:60:28:87:51:46:c7:25:31:f5:19:d3:b6:
         3e:b1:9b:87
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUJgXq8OF5B1fqetS+r26oV5TYTSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjEwMzEwNTA0NDFaFw0yNzEwMzAwNTA5NDFaMDMxMTAvBgNV
BAMTKEFGNDg0Q0E4QkVBRkE3NkI2RkYzNkJCMTQzMzQ4NURENEVDOUJBMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEzNWW69DXt3BLwqBfLAZqIzX
5qRI2xb6Lhof/sHKhmtP4hF8kn7ps9xM2sSJeqD2Ri3MfpPCMhmbUM0Tumgcu1oi
uF8pKIb3k0cu4qLd1oflt6Mnfqvs7hSLi3Vh8O/QqWOxwFWVGDO1j+e5i5GCpOea
sds5Kd7MJ9JFsJ9t4zV8IsGlMOzNbWBtIgdOoxhn6ixsu0UzIiegbnhS6BUceSjR
WTJyNJxs7Kyi8eKIbC6LdbXHXfhALdC/rRjaU4ot6lYSxCbV1+nR5pllaOefqLeo
dbj0q9zQUHOLQdI4PP2WfqCpGE8xNT5FMKbjPnr0HMDfC1uxbHFXGZrI4DDvAgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQUr0hMqL6vp2tv82uxQzSF3U7JuhcwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzEzNDgyMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQC
AAEwGjAMAwQCZ3bMAwQFZ3bAAwQCZ3b4AwQCZ4SgMA0GCSqGSIb3DQEBCwUAA4IB
AQBPiI6ZOTxrw3E1xWO8yTjuD4jQb4uFUnBnsDEduRISkQ7NNkrYT5YQauhF29Ov
juP7yOFWIudDwl0P87Du0J+yYSGuvmA1NY4HPosE7MyUKXefyLjR1Me88evM8zkE
ydqJ6pY66Dq08IAv8wlEo39wV5AYcQyIJhXhKBrLxhSnAafVKa4HRY6ntBwHqQIo
WP2+36K5miww8BGXvkQQLFiKby79dOIlqGeLfwAW+Nmk426Zzc2z90ZNwky06Wkz
uVt/B2Q5bdE0Ldzu2uZD/uHSZyWG1Jdgg6ygynmTTwAW+WbARldDXqxIEKOSQrSU
FCVgKIdRRsclMfUZ07Y+sZuH
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:41:34 2026 by rpki-client