Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa
File:                     3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa (raw, json)
Hash identifier:          IxvGkSL3Er+XiPPz4CPRi6DYs7Ptmccc5+yrQw2zvDc=
Subject key identifier:   56:49:79:F0:45:7D:1D:6B:4B:D5:10:4C:E1:1E:A5:0B:EC:DE:15:1F
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       1D3470DA15612A8AD9E979704DF17D9F2A303B11
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa
Signing time:             Mon 15 Jun 2026 06:18:15 +0000
ROA not before:           Mon 15 Jun 2026 06:13:15 +0000
ROA not after:            Mon 14 Jun 2027 06:18:15 +0000
asID:                     133033
IP address blocks:        103.53.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 09:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:34:70:da:15:61:2a:8a:d9:e9:79:70:4d:f1:7d:9f:2a:30:3b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Jun 15 06:13:15 2026 GMT
            Not After : Jun 14 06:18:15 2027 GMT
        Subject: CN=564979F0457D1D6B4BD5104CE11EA50BECDE151F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:79:11:07:07:cf:bc:47:6d:6a:64:18:05:01:
                    d6:44:e4:fc:96:9c:56:4a:6b:cd:2b:a2:29:b7:7d:
                    73:77:02:08:cf:f5:2c:19:ff:0b:01:31:13:40:bb:
                    19:5e:6b:1f:c7:b2:72:97:63:24:d4:a8:e7:5f:45:
                    1f:05:89:d1:d9:8e:a4:a8:6e:ce:28:68:bb:81:38:
                    fc:71:3b:63:c7:0c:e6:9e:87:e1:a2:0f:e8:83:e3:
                    3d:fc:74:bb:06:9e:9f:4f:15:50:ed:87:a5:4a:c4:
                    6a:4a:c7:74:76:09:92:35:bc:2c:de:bc:77:96:f9:
                    76:b7:ab:19:b9:84:29:82:74:e3:46:b2:b3:66:fe:
                    aa:3a:4a:0a:94:8e:fd:03:1e:b9:1b:73:08:c0:e9:
                    50:9d:9d:c2:22:44:8c:a2:39:b8:3d:61:14:87:63:
                    e2:db:6c:76:ba:44:f6:46:34:cd:0b:92:d3:ba:76:
                    99:6d:c9:47:12:6b:5e:40:78:8a:1a:0f:fb:a0:cb:
                    a7:bc:4e:9b:8d:5d:44:75:66:a9:28:dd:48:05:86:
                    84:d4:2f:b0:88:bf:56:76:cc:5d:24:14:43:7c:83:
                    8c:76:ad:86:1e:d2:42:31:fa:67:b8:67:0b:29:cc:
                    09:07:f0:1c:0e:79:5c:c0:66:74:e0:63:50:92:59:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:49:79:F0:45:7D:1D:6B:4B:D5:10:4C:E1:1E:A5:0B:EC:DE:15:1F
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313333303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:31:bd:5c:f0:80:51:3d:28:91:72:e0:5c:f6:37:6a:3c:c6:
         29:0b:bb:28:d6:4e:47:59:2c:43:fb:27:a9:c8:86:6c:1a:10:
         04:d1:1e:80:fe:40:73:64:2a:18:5d:c3:1f:64:fd:a2:c5:93:
         25:17:06:ff:c7:e3:36:73:71:9d:c5:e3:45:cf:bf:e5:33:33:
         1b:aa:e8:2f:ad:8d:75:20:51:e8:b6:d6:2f:03:45:34:f0:ea:
         26:0b:36:b0:1e:75:1b:8d:da:00:7e:75:68:2c:c6:58:36:6e:
         fc:d8:5b:ce:40:4e:0c:2b:da:e5:a3:95:23:df:b5:f8:37:0f:
         c0:86:7b:b2:7a:78:90:b1:90:9e:ea:77:39:9f:52:a3:27:0f:
         79:45:bf:32:1d:90:d7:37:42:b5:97:82:e1:04:23:24:31:5f:
         fc:62:a6:44:e9:9f:eb:9c:ed:7c:9e:58:3a:c0:c9:09:89:c7:
         84:4b:1c:7b:67:d2:ff:bc:62:24:c3:64:85:4d:c5:fe:79:eb:
         fd:de:f5:4b:6b:f0:d7:54:2b:eb:f5:17:b5:96:53:56:22:5a:
         06:f7:de:d0:19:83:ab:dd:07:da:4c:64:e7:40:8e:5a:fd:29:
         cc:1c:26:d8:9d:78:ce:49:22:8d:1d:61:95:18:db:39:b6:de:
         44:83:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:22:07 2026 by rpki-client