Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa
File:                     3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          Kbc2X0VP7C3m3lXwC3QYmP+Anp96pYrDBmtlsHz1SDs=
Subject key identifier:   D2:83:64:3C:4F:24:97:F1:46:E4:F1:50:B6:C9:16:7A:4C:44:5C:26
Certificate issuer:       /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial:       34B5B85BB4BA49A9736E8055031CB26E6BC7653C
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa
Signing time:             Sun 28 Jun 2026 13:40:14 +0000
ROA not before:           Sun 28 Jun 2026 13:35:14 +0000
ROA not after:            Sun 27 Jun 2027 13:40:14 +0000
asID:                     56046
IP address blocks:        103.229.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 22:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b5:b8:5b:b4:ba:49:a9:73:6e:80:55:03:1c:b2:6e:6b:c7:65:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
        Validity
            Not Before: Jun 28 13:35:14 2026 GMT
            Not After : Jun 27 13:40:14 2027 GMT
        Subject: CN=D283643C4F2497F146E4F150B6C9167A4C445C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:6d:8a:e7:2e:fc:13:86:3b:0b:45:22:f9:
                    e6:42:09:f6:97:b8:fe:40:43:2b:5d:a0:9b:27:3f:
                    be:06:dd:00:44:90:0f:1d:9a:eb:a3:b9:83:bb:0a:
                    5f:3d:74:2f:72:44:ea:1e:b9:e6:79:3f:f0:6c:78:
                    64:08:f8:fa:00:cf:3b:12:87:7c:cf:86:cf:1b:75:
                    98:5a:5f:9c:f9:5f:da:52:22:5b:1c:f6:74:53:d7:
                    66:03:7a:b5:ea:d5:d0:52:92:16:54:7c:53:c4:c8:
                    fe:4c:a3:3a:a0:a1:bc:06:be:39:de:20:17:87:60:
                    e0:31:d9:4e:25:3a:4a:5c:99:72:13:5a:b6:23:71:
                    de:a1:6e:81:53:18:87:70:bf:68:d1:05:19:4c:91:
                    54:dd:01:41:16:81:d6:0d:32:fd:1a:5a:e0:d8:4f:
                    98:1d:0f:35:bf:99:5d:4a:5a:16:97:0e:b9:01:14:
                    07:7d:29:54:e2:9f:27:95:aa:87:50:38:1d:60:5d:
                    2a:0a:61:42:5c:b3:b4:fd:7e:a9:dc:67:33:31:0d:
                    06:b0:8f:bb:95:c0:23:d9:50:a9:ea:b1:94:5f:68:
                    7f:bd:92:26:11:72:c6:38:20:1f:d6:6b:5d:3e:e9:
                    e1:23:b0:4e:e3:c5:b7:b1:e7:dc:0c:aa:4f:6c:ab:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:83:64:3C:4F:24:97:F1:46:E4:F1:50:B6:C9:16:7A:4C:44:5C:26
            X509v3 Authority Key Identifier:
                keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3130332e3232392e3231322e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:7e:14:14:7b:fc:9a:7c:fe:76:fd:d6:73:7f:ae:d9:5a:
         2f:19:46:b3:e4:3d:73:7a:b3:79:e8:17:ab:d0:84:2c:60:3d:
         cd:49:e2:41:3b:a2:8a:46:1e:09:bf:7d:99:1e:88:9e:41:15:
         39:ee:39:af:7c:6f:51:07:c5:dc:d0:69:51:6a:48:8c:20:7b:
         58:88:c8:cc:f7:34:79:6f:da:67:b2:66:78:54:83:a9:d2:6a:
         81:be:c0:b2:4d:ba:e2:4d:08:5e:7d:97:5b:5a:ae:d8:34:b3:
         30:86:82:60:4c:d7:65:3a:4d:05:50:46:85:67:36:1c:02:89:
         01:a4:a8:4d:44:22:df:76:76:9e:5a:3d:f5:84:cd:37:9f:9c:
         57:7f:d9:92:8e:bf:da:92:45:55:26:6c:2e:1f:f0:46:71:fd:
         cd:23:aa:48:54:8b:12:7d:fc:47:33:f5:a7:2e:59:d8:67:cb:
         b6:b4:80:64:1b:ca:5b:4e:c9:d4:60:6d:3b:d9:5c:5d:81:80:
         c4:fd:85:51:db:b0:ac:0e:f7:2d:73:6d:5d:c8:59:ef:bc:4d:
         5c:b0:3f:74:da:51:da:be:cf:68:3b:06:be:35:a8:17:29:b2:
         a5:5d:37:c1:9f:84:c3:72:26:c4:b9:e0:03:58:3e:09:2b:0f:
         62:94:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:39:20 2026 by rpki-client