Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa
File:                     3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (raw, json)
Hash identifier:          AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=
Subject key identifier:   9B:0C:0B:14:21:B6:1A:74:3D:56:5E:16:14:0B:21:F8:D4:91:35:47
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       361740F730B7A0193FFA75D2119A55A1458737C6
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa
Signing time:             Fri 10 Apr 2026 08:16:33 +0000
ROA not before:           Fri 10 Apr 2026 08:11:33 +0000
ROA not after:            Fri 09 Apr 2027 08:16:33 +0000
asID:                     63701
IP address blocks:        103.152.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:17:40:f7:30:b7:a0:19:3f:fa:75:d2:11:9a:55:a1:45:87:37:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Apr 10 08:11:33 2026 GMT
            Not After : Apr  9 08:16:33 2027 GMT
        Subject: CN=9B0C0B1421B61A743D565E16140B21F8D4913547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:44:94:4d:e9:f1:62:a0:92:7c:b9:b8:f1:
                    47:db:54:f2:39:31:98:92:56:4d:23:80:3e:2e:3b:
                    3a:5d:5b:a1:eb:a0:69:d6:e5:5e:45:c4:b0:6c:88:
                    b0:7e:69:b7:0f:89:19:a5:f6:0b:af:0c:41:ba:a0:
                    eb:89:4e:00:24:ac:58:d0:b2:b2:ef:5c:4e:05:b3:
                    f1:89:74:65:fb:3b:e6:cf:02:57:38:d7:6a:01:6c:
                    fe:7f:4c:b1:c2:aa:20:92:27:b2:32:9a:93:27:c8:
                    df:ae:1a:8e:97:2f:d7:ff:60:61:f7:8f:08:f2:9c:
                    55:e4:43:2c:f1:e0:0d:f8:2f:14:5a:bf:6c:ec:4d:
                    f2:e3:d8:0c:c0:7b:fe:b8:c7:5a:c2:73:3f:c2:c4:
                    c2:29:38:b9:54:11:3d:9b:e4:42:de:df:ea:c7:fe:
                    f7:dd:d1:6d:80:0f:a1:40:92:9a:0e:17:79:57:3e:
                    82:63:c7:6e:b1:35:28:b7:bd:29:45:fa:6f:d9:58:
                    6c:b3:52:0f:b2:80:ad:cb:00:d2:63:b2:51:1b:d2:
                    41:c3:db:47:7e:11:77:32:37:b5:65:50:5c:50:cb:
                    97:c0:f2:99:4c:0e:94:fc:df:91:c5:f0:c0:28:d3:
                    fa:35:11:22:09:59:77:df:9b:ec:9e:de:43:a5:64:
                    9f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:0B:14:21:B6:1A:74:3D:56:5E:16:14:0B:21:F8:D4:91:35:47
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:48:b4:9a:fd:71:9a:d1:b1:71:88:0e:2e:f9:58:dd:a6:
         73:2e:98:58:5c:a4:2d:9f:1b:10:a3:d0:24:57:f6:b7:3d:64:
         0e:e5:1f:47:16:8d:d3:55:46:da:95:9c:a7:92:db:69:f4:9b:
         a1:ef:c9:b5:15:53:5f:86:fa:34:d3:97:71:91:62:71:7c:65:
         a8:49:b6:e1:e5:72:ca:40:9d:0c:af:37:5c:c2:84:1c:84:3e:
         fb:76:60:38:7e:9b:5d:e9:5a:ea:73:a4:4b:7d:ff:59:a3:91:
         3c:fc:5f:21:9a:8b:aa:62:9d:d0:d6:30:e8:2e:2f:d7:cd:19:
         9c:53:dc:ed:f3:ae:ca:ef:4c:94:bf:c9:24:1d:56:ef:c2:54:
         99:72:a0:52:a1:75:33:22:94:66:57:6e:48:fd:21:e4:3c:5e:
         26:0c:24:05:9c:e4:9f:22:e0:ec:9c:25:a4:c5:25:ce:ba:04:
         62:45:ea:7d:ff:85:38:f2:81:90:52:98:c4:5d:5a:22:67:00:
         31:62:e8:2f:46:89:36:41:92:e8:e1:f1:bb:38:9d:33:ab:7f:
         5c:c8:3b:92:94:e5:fe:19:1e:83:19:3f:dd:ec:09:ca:9c:52:
         27:8a:68:18:23:45:61:da:c5:87:74:b9:4c:28:94:24:f8:66:
         4f:d9:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:26 2026 by rpki-client