Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132372e302f32342d3234203d3e203633363538.roa
File:                     3130332e35332e3132372e302f32342d3234203d3e203633363538.roa (raw, json)
Hash identifier:          gIP2Ft1JanbAOZ9DQwxjfqz5OPbHKERZSXR7wUROU0o=
Subject key identifier:   53:CA:FD:A7:25:71:A1:BB:EC:1D:67:9E:A2:C5:8A:F5:5F:BD:EF:71
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       17114E95ECED8CF44DF27D7E3DD2F57DA22E4443
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132372e302f32342d3234203d3e203633363538.roa
Signing time:             Thu 22 Oct 2026 02:11:48 +0000
ROA not before:           Thu 22 Oct 2026 02:06:48 +0000
ROA not after:            Thu 21 Oct 2027 02:11:48 +0000
asID:                     63658
IP address blocks:        103.53.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:11:4e:95:ec:ed:8c:f4:4d:f2:7d:7e:3d:d2:f5:7d:a2:2e:44:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Oct 22 02:06:48 2026 GMT
            Not After : Oct 21 02:11:48 2027 GMT
        Subject: CN=53CAFDA72571A1BBEC1D679EA2C58AF55FBDEF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f7:39:ba:0f:1d:80:de:20:bf:63:7f:56:63:
                    63:82:b1:bc:86:ef:92:a7:b6:e4:9f:e2:a8:f8:68:
                    ca:31:7f:de:6e:6f:4c:3b:f0:0d:1a:a0:37:9f:36:
                    8d:da:c9:82:ba:7a:48:a2:59:1b:52:37:7b:bb:14:
                    02:67:cd:8d:19:54:ce:8c:06:ed:51:39:e1:91:fe:
                    34:8a:b6:f2:62:22:f4:86:d8:ad:20:b8:4e:b6:95:
                    29:bd:ee:0d:0f:36:f3:68:9d:e4:4e:c0:f1:ec:e2:
                    66:47:3c:3f:6e:d3:17:36:9a:74:b8:8a:71:bb:a6:
                    82:d2:46:e4:35:d2:0c:87:9a:99:06:de:f8:b0:88:
                    8a:fe:88:25:f6:65:ba:f0:94:c9:2a:6f:a7:3c:fb:
                    54:2d:e6:cb:82:62:8a:ca:19:04:c8:aa:5f:43:bb:
                    76:67:b5:96:ba:2a:8f:9d:76:39:77:60:40:e1:e9:
                    c4:e9:41:fb:13:13:6f:e2:d1:06:09:4d:11:65:a8:
                    64:f7:5a:6f:68:42:0e:30:44:a0:d2:89:9d:c8:29:
                    ed:f8:e3:59:2a:8c:ba:5f:be:ed:45:5d:d0:ed:71:
                    3e:f7:6c:bb:1f:a5:0e:f9:ca:ba:a9:52:4c:04:de:
                    d9:a5:34:d4:07:87:f9:50:14:33:ff:83:b1:a7:f5:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:FD:A7:25:71:A1:BB:EC:1D:67:9E:A2:C5:8A:F5:5F:BD:EF:71
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132372e302f32342d3234203d3e203633363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:02:77:b1:c4:14:96:c3:30:c1:08:55:25:6d:a9:30:04:
         d9:b4:d1:3e:68:9f:41:bb:07:8a:e4:59:d8:a0:3e:d4:1d:6b:
         75:b7:16:00:a3:ac:c6:d8:46:92:6f:66:d2:87:59:c2:22:2a:
         3f:80:ca:47:2a:23:90:a4:dc:8b:7d:da:66:cd:26:17:8c:05:
         88:e0:ab:02:f0:d1:df:6c:b8:b7:66:10:03:9e:ce:b1:83:6f:
         2a:82:ee:63:dd:e0:df:c8:a9:4a:d2:88:54:7f:15:8a:c1:02:
         b9:a0:54:a7:7c:07:1e:16:77:65:76:d7:e3:15:3c:93:3c:e3:
         e2:93:a6:b3:c9:86:7d:3c:86:3e:4b:c8:b3:76:4c:9f:3c:5c:
         39:fa:1c:79:58:06:a1:9f:88:64:42:60:44:cc:e2:a8:db:ad:
         e0:21:b1:0a:14:93:c7:35:c2:68:10:1c:19:cf:d7:ff:cb:d2:
         7a:46:a1:33:3d:e3:ca:39:2d:7c:d6:c0:8c:79:fd:ac:e6:a3:
         57:5a:65:8f:11:95:da:69:51:0a:46:12:cb:88:cd:95:60:dd:
         1a:1a:bc:3d:8f:1c:60:b2:8e:47:55:cf:d6:1f:aa:c9:bb:77:
         f8:49:5c:59:b0:76:bc:2c:c2:95:48:a2:d2:d8:f2:b3:d8:c0:
         10:2f:4b:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:18 2026 by rpki-client