Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32342d3234203d3e203536303436.roa
File:                     3130332e31392e3233322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          mmMRp63UOEj5b3AVDS+MBa5etFjG7hbMjXxQ8ZkNkqE=
Subject key identifier:   3A:ED:56:04:E7:E7:66:FA:6E:CB:8B:1F:7D:97:F5:13:CC:9C:4D:74
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       2222D1918487ECB684A1D60048B374EAA0C13A47
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 02:48:34 +0000
ROA not before:           Thu 14 May 2026 02:43:34 +0000
ROA not after:            Thu 13 May 2027 02:48:34 +0000
asID:                     56046
IP address blocks:        103.19.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:22:d1:91:84:87:ec:b6:84:a1:d6:00:48:b3:74:ea:a0:c1:3a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 02:43:34 2026 GMT
            Not After : May 13 02:48:34 2027 GMT
        Subject: CN=3AED5604E7E766FA6ECB8B1F7D97F513CC9C4D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:f3:8e:38:2d:a3:b1:3b:a5:ec:63:7a:c8:
                    db:7c:de:a4:54:0f:5c:6a:22:8f:3f:ba:6c:d5:3b:
                    00:22:63:40:8d:e1:ec:fb:f2:5c:20:32:10:69:36:
                    7c:ba:71:02:6c:a9:51:e9:68:d2:df:15:ef:45:d7:
                    6e:48:c7:b9:ea:f6:84:4c:3b:b4:22:f5:2c:8d:c1:
                    e1:ae:97:be:8e:73:34:0c:e9:b5:cf:03:99:fb:da:
                    df:9b:b1:11:d3:e6:39:3d:64:b2:ba:87:c5:ac:31:
                    2b:0e:35:d2:86:f0:db:21:6a:df:03:10:56:10:b5:
                    1f:b7:0b:7a:d2:c4:ea:d0:aa:48:81:da:19:73:97:
                    46:38:f6:55:cd:24:cb:ef:82:a9:37:24:85:8a:c2:
                    6e:5b:6b:c7:e3:17:1a:28:8b:7e:f8:8d:dd:cf:90:
                    70:2a:9c:ac:77:1a:79:32:2a:15:de:e4:e4:ca:14:
                    e2:a7:cf:9c:5c:c5:1b:71:d0:97:03:ae:33:5f:2e:
                    b8:e1:ce:42:f2:9e:ae:9e:8c:ea:0b:4c:a2:b9:77:
                    87:fb:b5:fc:cb:1c:64:07:70:70:23:57:38:d4:c3:
                    1c:7f:3e:30:be:2d:ec:88:ba:e7:19:4d:4d:cc:ec:
                    7e:ec:1f:b8:7f:ae:8a:a4:65:6d:87:74:44:e5:aa:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:56:04:E7:E7:66:FA:6E:CB:8B:1F:7D:97:F5:13:CC:9C:4D:74
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:17:bb:bd:66:95:f0:31:b0:b9:41:8b:77:36:00:49:ee:ba:
         d2:00:2b:50:eb:41:93:1b:cf:ec:cc:40:bf:69:c9:8b:b5:7b:
         fe:81:b8:80:1c:17:8b:1c:79:15:65:b6:28:4a:62:3a:43:ae:
         98:d5:fa:69:3e:d5:67:9f:6e:98:b3:8b:6e:59:4a:5a:ea:90:
         18:db:0b:d8:39:a3:d7:cf:28:bb:5e:fc:b2:9e:fc:99:c4:2f:
         34:3d:3e:d2:12:23:23:04:e4:97:e2:cb:0a:06:b0:c4:b4:5a:
         35:1d:75:af:6f:4c:01:00:9f:79:87:f0:61:ae:4b:74:17:8f:
         37:d1:57:9e:31:95:a6:29:0a:ff:a1:b1:6c:a8:26:3a:4a:56:
         4c:c9:3b:84:06:2c:74:d2:4b:2e:77:5a:8d:9d:6e:35:22:a4:
         56:65:ea:f1:dc:b0:71:9c:3c:dd:c2:7f:47:de:4b:e6:82:61:
         0d:56:2c:74:80:93:63:82:2b:ef:af:c3:64:77:8f:04:53:ed:
         fb:58:be:b4:f4:f5:84:07:0d:66:19:1d:c7:2e:bb:28:d1:31:
         9c:11:bc:be:04:d7:6f:c7:18:f6:b6:71:41:bd:34:97:f0:27:
         6f:1e:19:e4:f4:1c:66:9d:6b:e3:af:fd:f8:dc:ac:d9:10:cf:
         3f:e2:cd:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:45 2026 by rpki-client