Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa
File:                     3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa (raw, json)
Hash identifier:          /sYnbyNE8n5tD7rL8BZspwNAMdcCPAdNW+N/JljypYg=
Subject key identifier:   E4:05:77:39:22:D6:31:64:12:8D:FA:A1:53:FC:99:BD:3F:F6:4B:81
Certificate issuer:       /CN=09F7B3237C248B53A3ADBB771E63C783610963AB
Certificate serial:       52C3C4761B3825C83D62B21F58419FFCFD3C8AA4
Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa
Signing time:             Tue 10 Mar 2026 04:38:02 +0000
ROA not before:           Tue 10 Mar 2026 04:33:02 +0000
ROA not after:            Tue 09 Mar 2027 04:38:02 +0000
asID:                     154321
IP address blocks:        103.197.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c3:c4:76:1b:38:25:c8:3d:62:b2:1f:58:41:9f:fc:fd:3c:8a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB
        Validity
            Not Before: Mar 10 04:33:02 2026 GMT
            Not After : Mar  9 04:38:02 2027 GMT
        Subject: CN=E405773922D63164128DFAA153FC99BD3FF64B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5a:e5:0b:27:e9:e4:5f:33:24:6a:c7:15:ef:
                    9d:1e:cf:76:25:c9:fc:bb:7f:88:25:8a:35:45:12:
                    30:f9:4b:ed:4f:55:8d:80:f3:b5:89:55:b8:6c:48:
                    bc:7d:7d:20:b0:73:7a:d1:64:18:69:a9:52:80:f8:
                    89:82:c6:60:af:9b:26:3e:78:32:d6:62:4c:20:c4:
                    14:26:9d:ee:d2:18:50:d9:5c:f4:01:d6:55:95:82:
                    fa:ab:29:6b:7a:a0:8e:fd:d6:7b:4a:f2:3c:3b:6f:
                    f3:c0:3d:47:5b:f3:54:77:91:c7:26:48:03:bd:9c:
                    78:08:67:7a:a9:57:b7:67:ef:66:10:b6:cd:6a:7d:
                    ad:0c:b7:dd:8d:12:f3:41:19:ea:43:ae:6e:6f:93:
                    87:6c:1a:52:94:02:bb:b2:be:d2:8c:d6:0b:20:14:
                    cc:39:46:31:8d:93:0e:23:41:bf:57:60:b4:c7:3c:
                    8a:43:77:ff:66:f9:61:a8:db:ce:0d:65:81:4a:19:
                    77:6e:f9:89:94:50:93:1b:12:9c:32:d9:4b:96:2c:
                    25:da:71:da:38:a3:87:42:f6:3c:c2:da:fd:55:f8:
                    d0:08:34:de:c6:c1:4a:b7:f3:be:76:69:77:d4:5e:
                    3c:a3:b4:cd:57:e9:ef:89:68:c8:1d:e6:7b:5f:3b:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:77:39:22:D6:31:64:12:8D:FA:A1:53:FC:99:BD:3F:F6:4B:81
            X509v3 Authority Key Identifier:
                keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3139372e3138302e302f32322d3234203d3e20313534333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:7b:87:b7:fd:93:8a:81:77:26:b1:38:9a:6e:ee:65:34:
         f1:23:de:a9:ad:05:dc:76:e0:65:37:11:02:3f:e5:3a:8d:85:
         0c:8b:c1:2a:e5:09:20:fe:e5:0b:71:b7:2b:ff:c8:d3:b8:99:
         59:72:8f:8e:3e:7e:a9:24:2a:8c:3b:48:80:d1:bf:77:5d:b4:
         ac:3c:ab:b4:2f:58:b5:e0:4d:b1:4d:94:d8:6f:14:43:51:aa:
         9c:3f:0a:f0:bf:d8:98:0f:23:bb:b4:0e:50:23:80:14:80:72:
         82:0f:00:57:f8:cd:20:71:e2:db:64:1e:a6:19:64:7d:87:70:
         85:4e:be:ff:f3:ba:cf:00:42:0f:6a:fb:93:93:df:74:30:b3:
         75:05:08:55:48:7b:cb:79:87:4a:a8:85:db:f1:7d:17:ea:81:
         98:15:76:e2:1e:bc:98:ab:bc:6f:67:88:10:1b:6e:83:37:88:
         62:77:48:5d:3e:d6:aa:58:5b:b3:92:e9:aa:0c:31:37:9c:6a:
         76:fa:4a:06:8d:78:df:90:11:6a:47:c7:88:2b:eb:91:84:76:
         1c:1e:06:22:72:de:94:14:d4:56:33:f0:3c:fb:f5:28:12:bb:
         1c:17:d1:a0:f7:bd:d3:6a:1e:0f:37:1a:48:d9:54:7e:67:63:
         d7:e6:aa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:43 2026 by rpki-client