Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/3130332e3235342e36342e302f32322d3232203d3e2030.roa
File:                     3130332e3235342e36342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          hjS7BW3zHSAnRNi4pQrZlUCqq+EbaE99J+UKmBpx3Ac=
Subject key identifier:   16:43:EE:4E:ED:08:0E:B2:40:EA:E2:6D:0E:31:58:6E:72:AA:FA:F6
Certificate issuer:       /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08
Certificate serial:       47518526BCE3236AA445835A96CED81457847123
Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/3130332e3235342e36342e302f32322d3232203d3e2030.roa
Signing time:             Sat 09 May 2026 06:52:18 +0000
ROA not before:           Sat 09 May 2026 06:47:18 +0000
ROA not after:            Sat 08 May 2027 06:52:18 +0000
asID:                     0
IP address blocks:        103.254.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:51:85:26:bc:e3:23:6a:a4:45:83:5a:96:ce:d8:14:57:84:71:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08
        Validity
            Not Before: May  9 06:47:18 2026 GMT
            Not After : May  8 06:52:18 2027 GMT
        Subject: CN=1643EE4EED080EB240EAE26D0E31586E72AAFAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:cb:71:03:b4:49:41:43:3c:99:c6:de:f2:
                    f8:90:d4:b7:2b:b5:2b:2b:ba:6a:70:07:fc:9d:0c:
                    67:6e:6d:1d:0b:d3:16:16:ed:d3:94:59:cf:08:59:
                    0d:bb:79:51:6c:6b:d3:22:86:ec:68:5a:8a:bd:4f:
                    b9:0a:81:53:ed:9e:30:f7:b9:99:36:64:47:96:1c:
                    d4:ad:ba:83:e5:d6:2e:5d:de:1b:c9:23:2e:8a:96:
                    84:2a:c5:b6:77:7d:af:5a:aa:63:63:67:28:ef:cf:
                    a6:00:8c:c5:79:a0:63:79:69:e5:38:a2:bc:ae:45:
                    85:34:03:c0:b0:f4:d3:ef:b8:95:0e:7d:51:3a:eb:
                    42:ef:32:2d:64:a2:c0:28:0e:f8:4a:39:ab:7a:8d:
                    d4:60:ab:2d:ff:bd:b8:60:d4:35:b0:dc:18:4d:26:
                    29:17:a3:45:8a:b2:58:4c:1f:de:23:f5:6f:85:70:
                    f4:44:89:de:d6:6f:c3:4c:be:22:19:b1:3a:a3:e4:
                    fc:be:a1:1c:fa:84:b6:56:1d:35:38:af:c8:25:e3:
                    6d:ab:5b:95:40:24:53:20:b4:e1:a7:a7:98:5d:de:
                    f1:80:c5:c1:ce:a7:52:28:80:b5:35:f5:b6:69:2a:
                    f4:b5:12:87:24:c8:bc:ba:6a:f1:6b:d7:9f:e5:83:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:43:EE:4E:ED:08:0E:B2:40:EA:E2:6D:0E:31:58:6E:72:AA:FA:F6
            X509v3 Authority Key Identifier:
                keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/3130332e3235342e36342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:40:7c:ff:ef:53:53:73:d4:74:8c:4c:08:e1:17:6d:19:da:
         d0:0d:87:1a:36:a1:81:d6:13:fa:b2:63:53:a7:65:80:27:66:
         07:06:bb:9d:3a:78:7b:98:44:d6:1c:97:17:82:5b:b1:85:00:
         db:31:0b:19:ff:b4:84:83:b0:d3:22:9e:68:ed:2b:80:ae:7b:
         7a:60:62:8c:a6:7e:33:8d:e7:aa:38:e0:71:16:57:15:c6:62:
         2a:a7:a1:59:54:cc:1e:b9:c2:94:60:38:ab:3f:68:08:45:f1:
         41:f7:3c:8d:ad:1b:8c:9b:63:a7:bc:43:e0:79:9c:2f:ef:91:
         c1:9c:cb:83:a1:97:59:1b:99:6b:a0:78:56:9d:13:6c:a7:c3:
         4e:0a:6a:8a:58:06:08:f6:95:1f:4c:89:86:f3:60:7d:2f:92:
         bb:08:c6:29:50:f4:a7:85:47:d4:78:c4:1a:c8:80:b1:09:f2:
         31:9d:b3:df:20:c6:20:8c:ab:44:e3:6e:6e:60:f1:92:c3:4a:
         01:97:1c:4a:fe:40:4a:a6:d0:9c:22:fc:53:bc:c2:09:dd:cb:
         51:82:ea:54:71:46:77:ba:75:09:c2:5d:24:4e:7e:64:17:9f:
         79:ce:50:9c:65:5e:9d:d9:a8:0b:ec:02:aa:bb:a2:a0:89:7b:
         65:e2:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:12 2026 by rpki-client