Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136362e302f32342d3234203d3e203536303436.roa
File:                     3130332e36302e3136362e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          Pc8YBuRSHwCT1UPSxDxmO2nusdfyeJysNJVWrzLRPwY=
Subject key identifier:   53:24:0D:D0:D7:97:91:8A:6A:1E:8B:4B:CC:C2:DC:9C:E0:24:05:37
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       45E434492D71E7F4B85F681154C0F426B964627A
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136362e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:46:17 +0000
ROA not before:           Thu 14 May 2026 07:41:17 +0000
ROA not after:            Thu 13 May 2027 07:46:17 +0000
asID:                     56046
IP address blocks:        103.60.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e4:34:49:2d:71:e7:f4:b8:5f:68:11:54:c0:f4:26:b9:64:62:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:41:17 2026 GMT
            Not After : May 13 07:46:17 2027 GMT
        Subject: CN=53240DD0D797918A6A1E8B4BCCC2DC9CE0240537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:1b:ac:5b:49:04:05:fb:6e:59:cb:0f:98:
                    44:f8:f1:48:cb:60:31:26:af:ec:4d:94:3c:4f:a6:
                    94:4f:ca:a8:b8:cc:fa:d3:02:c8:fa:77:0c:07:cb:
                    c9:3e:b7:82:91:9d:05:8c:ec:6f:11:7e:19:57:4d:
                    a4:e8:00:c1:d2:15:52:fb:06:b6:18:ab:f5:35:d7:
                    e9:1d:0d:0e:b7:99:c4:13:bb:b1:11:55:b8:6f:e0:
                    b6:81:15:69:8c:38:dc:29:3b:76:db:28:ee:06:db:
                    53:8e:7e:53:3c:45:9f:40:21:10:c8:5b:54:f5:bb:
                    1c:43:64:8f:17:41:27:f0:f3:ad:48:11:09:50:bf:
                    ab:2c:f5:9a:15:cd:6a:93:fe:30:50:38:fa:08:00:
                    a8:f5:9a:43:80:fb:6a:bb:c1:87:f8:58:37:b0:7b:
                    45:e7:89:0d:35:f7:f0:9a:a0:26:8f:b6:05:a2:c6:
                    97:c1:82:11:3f:1e:98:5b:7e:f3:a4:74:21:01:04:
                    b3:84:11:6c:55:8f:a3:6a:91:99:f4:a7:08:5e:58:
                    e1:c9:09:2c:9e:68:7f:eb:fa:9a:a6:5c:fe:f0:c2:
                    0b:74:00:65:91:b7:bf:7e:f2:e5:04:d3:7a:c7:f5:
                    2f:7d:3f:ae:9f:c9:c5:6a:31:5c:b4:68:0e:c4:80:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:24:0D:D0:D7:97:91:8A:6A:1E:8B:4B:CC:C2:DC:9C:E0:24:05:37
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136362e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:a8:f1:bd:a1:0b:e2:e9:c0:1b:f5:d6:ca:7e:a5:4b:a9:
         09:c1:8b:28:be:e7:cd:7f:f8:fa:3b:02:d6:72:88:78:06:95:
         97:1e:d2:83:7e:18:b9:15:3c:c1:5f:7b:0e:a4:50:35:a9:00:
         86:02:04:fc:89:2f:cf:d1:41:9b:81:3e:2b:57:1b:af:bb:22:
         01:42:a9:ab:96:6f:f6:67:a8:80:27:c6:0e:5b:33:cf:b8:2d:
         b1:b7:5b:75:5c:09:7a:32:79:8b:df:17:ff:a5:7d:fe:d9:a4:
         cb:69:54:08:51:4d:13:b4:ca:fa:be:9b:b6:63:02:c6:51:f2:
         ed:94:59:5f:91:f7:79:7b:a2:61:9c:69:6b:eb:fc:8f:17:8f:
         1a:35:4b:8a:dd:7c:10:ac:c8:c0:e5:e5:e8:1a:03:81:49:b2:
         0f:58:ed:b9:c4:7a:01:d6:7f:9a:0e:87:d4:ed:81:9e:13:39:
         0c:58:93:b7:93:2c:1a:9d:0f:0b:4a:75:e6:1d:0d:8c:7e:af:
         e3:89:7e:6b:1c:2a:78:4c:32:63:9c:69:22:fa:94:e3:61:e7:
         66:13:02:d6:1b:49:30:e6:32:24:27:a9:d5:9a:80:0b:d2:27:
         4f:67:ac:fa:5b:de:cd:b5:1e:e5:75:d7:49:97:21:38:ec:1b:
         70:cc:2f:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:45 2026 by rpki-client