Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa
File:                     3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=
Subject key identifier:   A0:B3:65:D9:91:3A:CA:90:AA:90:7A:51:1D:2C:BF:DB:08:9C:88:8A
Certificate issuer:       /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Certificate serial:       4182F123461AE0E4D71AE2692B9CA5AC7D236BC3
Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa
Signing time:             Mon 11 May 2026 03:19:35 +0000
ROA not before:           Mon 11 May 2026 03:14:35 +0000
ROA not after:            Mon 10 May 2027 03:19:35 +0000
asID:                     4808
IP address blocks:        103.135.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:82:f1:23:46:1a:e0:e4:d7:1a:e2:69:2b:9c:a5:ac:7d:23:6b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
        Validity
            Not Before: May 11 03:14:35 2026 GMT
            Not After : May 10 03:19:35 2027 GMT
        Subject: CN=A0B365D9913ACA90AA907A511D2CBFDB089C888A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:e1:fd:1b:51:50:45:b5:22:7f:95:6d:ca:
                    b5:6c:c8:90:4e:d0:8b:ba:16:53:ab:23:57:74:8b:
                    2f:44:ee:2e:28:c8:5c:95:e9:11:f2:85:9f:76:0e:
                    fe:11:2c:1c:0a:96:37:f9:e6:ab:a9:1a:41:17:c0:
                    1e:9f:a2:9f:50:a7:23:80:54:2d:71:30:42:38:53:
                    f8:29:78:15:4d:5b:36:34:a2:39:98:b1:3d:ff:54:
                    87:15:72:1f:bc:a0:7f:fb:39:22:7a:51:ba:e9:cd:
                    d0:84:25:32:4d:48:ae:67:8b:cc:ee:28:8a:c0:98:
                    1f:ff:ce:40:e3:67:f0:ba:06:5f:59:fe:3b:bf:8a:
                    6a:b4:27:98:92:c8:53:64:d3:cb:f5:c6:ac:c3:2f:
                    2f:73:76:3f:70:f3:97:55:6b:50:de:69:d0:e2:a1:
                    a2:18:03:7f:3c:a5:98:91:5f:0e:1b:0f:6b:12:91:
                    76:91:cd:67:8e:c2:df:83:9c:c3:ae:b8:93:98:c9:
                    19:62:78:d4:3c:a0:a3:e7:f0:f2:00:1a:46:75:bb:
                    2c:02:7e:b5:8d:28:c0:32:c2:bd:0f:a8:b7:ad:18:
                    62:26:9e:1b:05:5d:c6:65:89:a8:a5:44:9a:d8:66:
                    6b:1a:cb:cf:b9:a0:85:2c:92:a3:9b:3f:bd:02:03:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:65:D9:91:3A:CA:90:AA:90:7A:51:1D:2C:BF:DB:08:9C:88:8A
            X509v3 Authority Key Identifier:
                keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:87:18:ca:f0:5b:4b:39:66:fd:a7:55:17:2e:9a:b6:10:2e:
         2e:1a:73:22:e7:b3:0e:ba:cc:83:5e:b9:57:a3:e1:18:c4:08:
         ec:ce:e9:74:cc:26:c7:68:eb:8c:fb:42:17:81:2e:5f:83:7c:
         b0:97:6f:a6:b0:b6:cd:45:4f:a7:0b:29:3b:55:31:e3:07:f8:
         3c:53:b6:50:bb:94:e7:5d:12:34:6f:54:2b:37:01:71:4b:e7:
         31:db:14:48:74:b6:84:97:18:a5:00:f6:37:12:f3:08:6f:bf:
         63:4b:de:45:58:db:af:97:55:0e:0e:ae:85:65:6e:ef:19:8e:
         e1:17:52:22:a5:88:96:cc:c9:ec:29:02:be:ea:60:cb:83:f9:
         81:77:ea:c4:cf:09:99:c5:0f:95:fd:ef:7d:00:e3:b8:6f:37:
         58:02:2b:90:70:8d:b0:55:51:fb:aa:02:69:17:63:bf:e3:a6:
         b3:8b:1f:9e:fd:d2:0c:5a:d2:81:30:1b:de:eb:89:42:47:74:
         47:db:f6:b9:75:19:9c:ee:5d:8b:4b:c6:fe:f5:12:74:56:b4:
         bd:63:12:2e:e9:cc:c1:e5:2a:3c:97:52:12:67:c5:12:52:f3:
         7e:ef:e4:17:e1:81:7f:07:8b:ab:37:d2:4f:30:b2:53:df:1b:
         5d:c5:3a:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:27 2026 by rpki-client