Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136352e302f32342d3234203d3e203536303436.roa
File:                     3130332e36302e3136352e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          ogCAsDbCMr1pk5HFRsARUy5LG/ET+iQ6tCRTmUuZvc0=
Subject key identifier:   5E:3D:D7:8E:3C:B5:78:4C:7B:D3:A2:2B:36:14:05:43:F1:D0:A3:CC
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       4D00FF0D1E63750A1A3797F77E8D08173443932E
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136352e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:46:17 +0000
ROA not before:           Thu 14 May 2026 07:41:17 +0000
ROA not after:            Thu 13 May 2027 07:46:17 +0000
asID:                     56046
IP address blocks:        103.60.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:00:ff:0d:1e:63:75:0a:1a:37:97:f7:7e:8d:08:17:34:43:93:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:41:17 2026 GMT
            Not After : May 13 07:46:17 2027 GMT
        Subject: CN=5E3DD78E3CB5784C7BD3A22B36140543F1D0A3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:e1:32:f4:8f:30:e0:a3:07:84:3e:31:b2:
                    0c:aa:5f:2e:6a:3c:e1:da:8f:67:bf:4f:d2:c1:ad:
                    b3:4b:d2:55:08:3d:45:ae:31:ab:63:29:7f:22:50:
                    bf:ae:08:84:25:83:a9:99:03:dd:7d:77:7e:92:fd:
                    f6:28:c8:4a:c0:85:42:99:90:25:76:a0:0f:1e:d7:
                    90:c1:7f:da:ec:b3:a6:e5:4e:53:e0:a9:98:da:f7:
                    5f:e8:a7:78:76:fb:a0:5b:3c:43:10:36:d2:4c:26:
                    31:ce:20:99:d8:07:8b:81:b1:b6:34:f6:91:25:25:
                    d0:04:61:2a:fa:53:03:03:26:2f:51:26:6a:38:d4:
                    1e:21:ad:8a:3f:06:40:8f:44:07:5c:8c:be:9b:16:
                    14:e0:55:bf:f6:26:44:13:43:fd:bc:ff:a0:47:10:
                    58:db:d7:6e:bb:fd:51:d5:da:f2:64:e0:be:19:d7:
                    fb:f3:3f:c5:75:ba:a4:27:29:a4:a4:cb:2c:66:88:
                    67:6f:45:39:7d:34:57:4c:f9:88:28:31:93:f0:6a:
                    3c:94:af:6e:91:54:ac:dd:82:2a:f8:f6:dc:01:08:
                    ed:c0:b4:45:a6:08:ed:9e:91:e9:3f:f8:60:a7:20:
                    cc:07:cf:7e:a6:23:dc:b3:ff:36:3a:99:8c:fb:6b:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:D7:8E:3C:B5:78:4C:7B:D3:A2:2B:36:14:05:43:F1:D0:A3:CC
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136352e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:80:60:4e:55:cd:6d:f6:0a:d0:ec:99:00:26:87:44:cf:11:
         a5:eb:ba:f6:89:c0:41:75:f9:be:7d:93:8f:16:0b:4f:dd:d0:
         57:84:66:d2:a8:a2:9b:58:ce:fa:6c:54:9d:35:a8:b6:d1:7a:
         d5:25:3e:2a:bf:22:71:82:e9:6d:11:ab:df:c7:63:fa:9c:05:
         56:eb:6c:4e:a1:62:a6:18:d4:32:d7:97:65:ac:0d:42:cc:1f:
         60:17:c1:0c:b4:13:c6:ee:28:85:31:d7:f8:d2:47:fb:15:87:
         24:ef:0f:5f:08:6a:b2:62:2b:53:dd:fb:29:7a:10:6e:7f:24:
         84:ad:02:71:29:a4:a9:2c:79:00:f9:03:21:16:0d:43:ee:7d:
         00:91:d9:30:44:e6:c2:84:30:b3:ea:f1:48:7c:c9:98:d9:9d:
         27:36:87:2b:a8:6b:12:4e:19:9f:0c:60:8b:01:f4:4d:fd:7f:
         63:b3:0f:61:24:b1:ed:fb:58:46:37:90:83:ff:8f:06:a5:5f:
         56:50:02:a2:4f:5e:f9:b8:ae:47:4f:2b:cf:72:38:a2:91:71:
         a3:e2:41:24:32:70:07:ac:3b:63:97:cd:5a:3a:77:2a:15:5f:
         4e:97:42:2f:d9:08:32:2f:74:9e:d9:d2:0a:ec:2e:99:c1:c5:
         7d:85:b4:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:46 2026 by rpki-client