Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313337363937.roa
File:                     3130332e35332e3132342e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          pYUrLzWoIQNowzmBIE2YwlmtNv8c+gwHix2eVMgw5Iw=
Subject key identifier:   6E:15:92:62:A8:2E:81:76:4C:91:5C:D5:6F:B4:B6:40:C1:A2:A6:46
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       1ABD6DE7CEA5870B6058FE9DDDA800E381FDDD45
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 07:27:37 +0000
ROA not before:           Thu 14 May 2026 07:22:37 +0000
ROA not after:            Thu 13 May 2027 07:27:37 +0000
asID:                     137697
IP address blocks:        103.53.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bd:6d:e7:ce:a5:87:0b:60:58:fe:9d:dd:a8:00:e3:81:fd:dd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:22:37 2026 GMT
            Not After : May 13 07:27:37 2027 GMT
        Subject: CN=6E159262A82E81764C915CD56FB4B640C1A2A646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:77:bf:2e:99:a6:1f:88:39:23:c7:23:ca:
                    f8:11:7b:ca:e9:b9:a1:a9:2a:9c:38:8d:e3:40:1a:
                    1c:77:8a:52:28:c6:97:01:ae:f1:a6:f4:ff:d5:5e:
                    27:13:cd:61:db:e6:1e:41:8f:71:fd:d0:52:63:37:
                    2e:5c:1c:df:8f:1f:ac:79:45:15:8a:13:19:b0:fa:
                    92:d3:08:85:39:b4:a2:09:9e:a0:9b:e7:da:a4:6e:
                    d0:b3:f4:1e:ed:cd:d2:14:3f:05:e0:55:b9:ab:0f:
                    10:92:06:6e:97:20:1c:52:ff:9d:f2:07:97:72:4f:
                    3d:fb:4f:0e:c9:c6:be:a2:87:5a:99:6b:e8:bb:a6:
                    95:dc:f0:96:be:62:cb:a8:1e:e8:c5:65:e0:be:11:
                    59:c1:49:e2:8a:45:b2:e6:0b:11:db:56:54:9a:83:
                    20:02:d1:b7:ab:7b:f6:dd:21:36:24:5e:ee:bc:ec:
                    0c:cd:7e:5c:83:0d:7a:82:8a:ac:8c:83:29:a4:ef:
                    3e:e7:ff:1d:d8:d7:52:df:69:d9:55:f8:8d:9c:29:
                    e3:6b:3e:0d:26:29:70:fe:e0:7f:3d:e7:66:a0:1f:
                    18:83:af:f3:b1:fe:40:92:93:93:bc:6c:31:ba:30:
                    42:27:d4:df:ea:a4:5e:7b:03:61:bd:3c:5d:99:69:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:15:92:62:A8:2E:81:76:4C:91:5C:D5:6F:B4:B6:40:C1:A2:A6:46
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:15:3c:af:b6:a7:25:d1:f9:a2:bf:57:29:50:c0:50:d6:5b:
         e1:a8:46:34:31:7e:0b:14:ce:f8:de:98:53:d1:c9:5e:ce:74:
         a6:b1:9c:90:60:ec:62:d2:c7:fc:78:6e:cc:22:62:87:5c:19:
         c5:24:17:f4:30:61:04:92:f3:86:a8:a4:29:3b:3e:6f:51:18:
         7d:5c:ab:03:8d:9e:af:18:8a:ec:88:6b:0a:a0:72:1d:f5:fe:
         da:53:e7:0e:07:32:6c:f1:c2:21:37:aa:f9:bb:36:8f:4f:dc:
         5f:27:6e:23:74:22:b9:40:af:a2:26:5f:e5:f2:97:e5:cc:a6:
         78:ba:09:84:48:68:64:78:82:5a:94:45:b5:35:d1:91:a0:80:
         5c:b6:35:48:bb:15:ef:16:2f:1e:a4:cf:fc:e1:bc:02:a7:46:
         49:9c:36:33:97:68:1b:16:cf:57:9d:b3:d1:10:74:54:04:fb:
         68:8d:55:ba:76:48:59:29:ab:d7:80:9d:25:1a:8b:30:9d:c0:
         a1:1e:75:ba:57:1d:da:9e:e8:61:f8:17:c6:54:25:18:7e:54:
         64:00:17:fe:81:a7:1d:2c:88:69:26:29:02:19:f7:eb:b6:e2:
         bf:56:13:c7:5f:06:b1:ff:2d:74:a3:c1:38:3e:25:aa:1d:3c:
         15:ac:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client