Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313337363937.roa
File:                     3130332e36302e3136342e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          tQjkzD0PBycHeeOC9Fp6ROKafea0Mmfj4hfm3s3n6No=
Subject key identifier:   63:6F:91:5C:33:9C:97:27:C0:86:86:0F:E7:C1:66:35:6D:B5:8F:50
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       6697314893C48A29CA0C29F63580246E411E4D1F
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 07:27:37 +0000
ROA not before:           Thu 14 May 2026 07:22:37 +0000
ROA not after:            Thu 13 May 2027 07:27:37 +0000
asID:                     137697
IP address blocks:        103.60.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:31:48:93:c4:8a:29:ca:0c:29:f6:35:80:24:6e:41:1e:4d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:22:37 2026 GMT
            Not After : May 13 07:27:37 2027 GMT
        Subject: CN=636F915C339C9727C086860FE7C166356DB58F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:62:af:d1:e2:86:07:07:e4:ec:73:7b:12:
                    35:3e:1f:6c:83:80:45:87:7c:d0:5f:51:d4:2d:ce:
                    76:39:82:60:6d:28:20:d9:21:8d:78:5b:79:26:ea:
                    51:74:ec:bf:9c:dc:bc:ac:fa:19:5f:4b:fb:f8:c9:
                    63:0a:cf:5a:ad:a8:55:c8:8c:f0:25:ab:8d:7c:6c:
                    bd:46:bf:57:1c:60:a1:73:43:0a:f0:fb:98:47:8a:
                    6e:7c:da:ae:06:eb:b9:46:8a:7d:eb:52:57:c0:00:
                    3b:40:ad:46:5a:d1:5e:e6:0e:10:95:38:1f:52:63:
                    75:09:16:0a:f4:64:55:a1:2e:e7:1d:b2:d4:30:fa:
                    78:a1:e7:8f:d8:5c:16:03:43:32:1d:70:ef:89:d8:
                    69:8a:1e:74:9f:c0:ff:45:6d:e6:e9:4d:22:00:bb:
                    bc:f3:6c:0d:d8:d2:9e:36:31:55:ab:39:bf:cc:2e:
                    db:3a:78:f5:48:65:be:b1:21:ba:9e:16:cc:a5:a3:
                    9f:ef:48:85:f8:ae:78:2e:06:34:e0:1b:d9:c5:89:
                    b7:15:d8:45:1d:56:52:89:b5:62:3b:51:d0:de:48:
                    7f:f8:0e:42:b3:d9:58:bd:02:68:e1:f4:cc:a2:b4:
                    37:1f:00:5f:dd:96:2b:04:98:8e:60:6d:58:a5:9f:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6F:91:5C:33:9C:97:27:C0:86:86:0F:E7:C1:66:35:6D:B5:8F:50
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:13:66:19:3e:5a:7f:b8:70:e0:3a:fd:b5:54:39:9c:40:11:
         b4:40:e2:7a:5f:be:45:96:f8:3c:2e:f8:67:be:bd:bc:f6:48:
         cd:ee:a8:dc:14:ff:db:0e:47:89:87:73:4d:1b:a9:c8:20:d6:
         87:7b:b9:78:40:7f:54:2e:b2:d0:3f:a7:15:e0:56:7d:14:d4:
         58:65:69:d0:a2:1c:71:f6:2b:a3:52:36:84:2e:08:f3:88:f2:
         7c:02:27:df:87:f4:51:2e:03:de:d1:8a:dd:22:4d:b1:d7:4f:
         2e:6d:b3:43:e1:d5:ac:2c:3e:88:5f:31:b2:8a:6d:69:32:d8:
         a9:f1:e7:73:47:af:ed:1a:76:d5:3f:a5:61:ac:da:3b:99:03:
         b9:47:5a:30:47:16:c2:40:2a:d0:a9:19:77:18:b4:45:34:2f:
         66:e1:74:56:d0:e2:31:35:86:29:2a:e7:22:85:23:57:8a:c0:
         8b:55:29:ce:6e:40:74:ce:a7:fe:cb:cb:ba:1e:d9:df:23:9f:
         95:fc:e9:ea:37:d7:27:21:71:e5:82:49:e1:82:89:4b:0f:cd:
         a3:e8:cd:b1:53:77:9a:f5:df:c5:69:34:f0:93:24:5c:0a:c2:
         06:e6:be:9d:7b:3b:85:c7:41:18:03:9a:1d:fa:2c:b3:38:c5:
         55:47:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client