Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32342d3234203d3e203536303436.roa
File:                     3130332e36302e3136342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          TSAPKw5GOXg93xaX006cwWOy8gr6+rEga2UY17NBLbE=
Subject key identifier:   6E:1E:92:79:61:57:A9:84:99:0E:5D:F2:B7:6B:E8:CF:68:B8:70:ED
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       61703491595CC9B952AA4022D8910F7031F34F62
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:46:17 +0000
ROA not before:           Thu 14 May 2026 07:41:17 +0000
ROA not after:            Thu 13 May 2027 07:46:17 +0000
asID:                     56046
IP address blocks:        103.60.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:70:34:91:59:5c:c9:b9:52:aa:40:22:d8:91:0f:70:31:f3:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:41:17 2026 GMT
            Not After : May 13 07:46:17 2027 GMT
        Subject: CN=6E1E92796157A984990E5DF2B76BE8CF68B870ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:21:f7:65:b9:ce:11:58:f1:8a:e6:00:a1:
                    3a:ce:55:17:04:8d:fc:9b:3b:48:7f:f1:99:db:f5:
                    52:f8:67:8f:f7:97:65:6b:ce:09:15:da:3d:ba:a0:
                    bc:25:d6:15:c4:bb:86:9c:b3:47:ca:07:df:cb:0c:
                    a2:58:2c:d3:6a:23:ce:9d:36:24:41:24:57:4c:7b:
                    a1:0b:58:4c:a7:fa:a6:0a:19:90:74:a1:cb:70:b5:
                    d3:7a:9c:b0:5d:15:4e:47:cd:02:dc:d5:a7:98:81:
                    87:ab:96:4d:c1:6f:61:0f:c6:eb:ad:3e:dc:06:76:
                    9d:94:56:d3:f0:7d:1e:8b:f2:9c:9e:59:29:fe:35:
                    25:6b:3b:fe:a6:dd:37:cb:68:9a:30:7a:8e:49:05:
                    d5:2c:e8:1b:ea:67:1d:4c:fa:b7:fc:fc:a1:25:67:
                    aa:01:6f:3d:d6:f5:f4:57:2c:26:3f:98:87:ec:ee:
                    ee:32:0f:60:6d:d6:40:32:8b:31:c6:8b:8c:3b:5b:
                    76:38:30:0f:fc:4b:d2:d7:09:4d:56:47:be:b1:36:
                    79:64:81:c3:d4:51:45:7e:71:94:ee:5d:7b:ce:92:
                    da:b9:0f:59:f7:cf:2d:10:c0:6f:dd:f8:aa:19:8c:
                    54:ee:4f:95:51:61:ef:73:1b:70:ae:11:78:25:f0:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1E:92:79:61:57:A9:84:99:0E:5D:F2:B7:6B:E8:CF:68:B8:70:ED
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:23:d4:b0:ea:b5:30:4b:e2:ef:4c:b0:c4:68:ee:a6:c8:
         4e:b8:a9:0b:05:3b:51:41:66:8a:9b:a1:f2:76:83:e3:06:9d:
         ee:42:12:7b:05:00:ff:e7:85:cb:44:b4:4d:08:5d:d1:e7:5d:
         4b:b8:fe:7e:a1:f3:7b:17:b6:03:3a:f1:a4:f2:52:91:6a:d1:
         e0:ab:33:4f:13:b5:b8:5a:4f:34:2e:07:46:3d:ce:51:d3:f7:
         c6:8d:91:d5:9f:2a:33:39:77:75:98:2f:ec:1b:2b:ee:64:2d:
         9c:b5:dd:dc:86:ca:ee:19:22:d2:b8:f0:51:05:82:a0:18:76:
         62:1b:34:07:d3:82:b1:ff:9d:aa:f9:ad:c2:e4:1e:8b:f9:82:
         19:72:e2:9f:c7:86:ad:3a:3f:66:fe:3d:29:28:76:5c:d8:22:
         ae:b6:9c:6b:4d:dc:c7:92:29:dc:c7:17:b2:79:c0:bc:fc:8c:
         07:bb:e4:4f:6d:e1:ff:46:29:c0:ff:da:f2:d2:6c:ab:9a:c1:
         ee:c7:d0:9b:2f:56:49:2b:54:cb:a4:94:82:14:53:7c:ab:e5:
         aa:aa:63:aa:be:cb:3a:58:5c:b2:87:c8:81:98:0f:7a:7b:d5:
         28:23:05:ad:e4:16:09:b1:1b:95:66:9a:17:b4:67:63:3a:19:
         d4:31:e2:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:45 2026 by rpki-client