Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa
File:                     3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          6N3+73HOIfBb+Xu5C5PWQopZ7m+4sk0JVZa6rnEvbYc=
Subject key identifier:   7E:71:70:60:D8:F0:89:5B:E7:4D:CD:27:EB:FF:2D:70:D6:DF:95:2B
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       6F76D165FEC7DFA90B47AFE04D2E9CA0A04B62CA
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 07:24:30 +0000
ROA not before:           Thu 14 May 2026 07:19:30 +0000
ROA not after:            Thu 13 May 2027 07:24:30 +0000
asID:                     137697
IP address blocks:        103.19.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:76:d1:65:fe:c7:df:a9:0b:47:af:e0:4d:2e:9c:a0:a0:4b:62:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:19:30 2026 GMT
            Not After : May 13 07:24:30 2027 GMT
        Subject: CN=7E717060D8F0895BE74DCD27EBFF2D70D6DF952B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:dd:38:47:7a:8f:68:c6:69:77:43:f5:54:
                    30:ca:ab:ed:94:10:ee:b6:56:57:52:d5:90:4e:74:
                    47:12:38:eb:2e:5d:df:9f:24:e0:ae:7d:fd:be:fe:
                    8a:10:c8:93:91:54:7e:87:07:49:90:69:b3:21:35:
                    de:06:45:66:6f:6e:71:f0:d1:d5:ca:d8:e2:01:f4:
                    50:0b:f2:83:72:e8:b7:f0:df:a5:94:49:9f:7c:d2:
                    db:8d:f0:0f:54:d3:c1:af:ac:43:c0:3b:34:d9:47:
                    a7:d8:61:58:f7:da:f6:55:82:b5:77:dc:f7:c3:73:
                    5b:fd:e4:e8:39:f9:4d:16:76:ef:b7:28:22:ea:78:
                    d0:6c:72:0b:04:b3:46:74:6e:38:52:4c:76:df:ec:
                    ac:d3:09:41:52:61:ef:6f:37:11:da:8f:99:1a:b3:
                    71:c9:76:da:05:3a:11:50:cb:c3:a0:18:ef:0d:e8:
                    40:01:ed:99:b1:22:b5:67:27:e9:8f:4f:1c:09:03:
                    7e:40:0a:dc:f1:8a:68:a5:48:42:8d:d6:53:7c:de:
                    5d:81:aa:2b:a7:d8:0d:4a:c8:2b:ba:b2:4f:35:25:
                    2c:5d:82:dc:23:c3:0a:3d:b1:3f:36:dd:63:f3:26:
                    ca:68:ae:20:50:05:9e:6b:3c:1f:54:05:a4:30:1d:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:70:60:D8:F0:89:5B:E7:4D:CD:27:EB:FF:2D:70:D6:DF:95:2B
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:b4:ca:0d:77:ef:c5:7f:b4:c1:de:4f:24:27:a7:f7:5c:5a:
         d8:b1:8b:16:23:21:b4:ca:88:2f:13:b8:73:a8:f1:31:a0:3e:
         9f:7b:e2:5c:2f:e6:1b:19:95:b2:08:ee:bf:30:18:58:1f:4a:
         77:17:ff:b1:23:0d:f1:84:0c:fd:a0:65:56:a2:6a:92:7f:d2:
         c9:d3:b7:ee:6c:a8:24:ca:8b:a8:9d:a9:98:ff:c1:e5:cd:de:
         fc:7c:a0:6a:5e:0a:7a:8c:e3:71:86:c1:fa:a7:c6:6e:0e:31:
         5d:06:cf:f5:3d:c1:08:63:de:d7:6e:84:c4:4f:85:e6:36:14:
         c6:95:7c:e2:3d:e2:dc:17:1e:87:a0:c1:49:b0:33:bc:96:80:
         fc:16:b8:46:69:90:32:cc:ba:79:6a:42:ef:b9:8a:d1:fe:77:
         bd:20:37:d7:8f:d9:c8:26:10:f5:dc:dc:92:91:7e:b8:3d:e0:
         aa:cd:eb:53:14:fe:c1:53:68:5f:6d:2a:45:7a:4f:4a:78:af:
         95:00:7e:93:a5:72:d8:93:e3:bf:c1:78:07:db:5d:cf:93:3a:
         13:32:2f:21:66:15:1f:14:40:66:31:3c:64:41:fb:35:d5:8f:
         3e:0d:ac:b1:9c:d7:37:ec:bd:a7:f9:f8:4a:6c:33:d8:cc:ab:
         62:bb:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:07 2026 by rpki-client