Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136372e302f32342d3234203d3e203536303436.roa
File:                     3130332e36302e3136372e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          nUTzsIvRxSTwFCYIi5JMTGJhxPjCifShcM+g8+stkIs=
Subject key identifier:   0F:55:01:FB:E7:0B:2F:F7:23:5C:A1:BD:D7:EF:D8:F2:EC:E8:AB:7A
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       22F55569BBA99C115B79D6F2AA20693A241878EC
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136372e302f32342d3234203d3e203536303436.roa
Signing time:             Thu 14 May 2026 07:46:17 +0000
ROA not before:           Thu 14 May 2026 07:41:17 +0000
ROA not after:            Thu 13 May 2027 07:46:17 +0000
asID:                     56046
IP address blocks:        103.60.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f5:55:69:bb:a9:9c:11:5b:79:d6:f2:aa:20:69:3a:24:18:78:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:41:17 2026 GMT
            Not After : May 13 07:46:17 2027 GMT
        Subject: CN=0F5501FBE70B2FF7235CA1BDD7EFD8F2ECE8AB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:13:66:d1:53:48:a2:da:05:46:b4:2d:23:
                    6b:a2:b7:74:da:40:1d:45:8e:f9:b1:cf:03:d7:b9:
                    99:b5:3f:84:72:b8:c8:f4:50:f2:3a:d6:2f:71:fd:
                    55:57:fa:a9:33:8f:e1:15:4b:0d:9f:6d:08:7f:9a:
                    5a:50:f9:ea:e5:70:b0:6f:3e:c9:0c:bf:c2:ae:c4:
                    63:21:5b:8e:37:bb:3e:62:47:4c:7c:20:71:b8:07:
                    8c:41:05:3e:40:44:4f:41:cc:5b:57:41:2f:a7:23:
                    39:04:70:4b:39:2b:49:bf:cf:d6:ab:47:71:94:82:
                    ea:27:7c:5e:f3:b9:e7:de:ea:d0:b3:bb:8a:1d:ea:
                    bd:d2:66:99:f4:31:5d:1b:ec:4a:f4:4c:4b:46:ea:
                    15:ce:46:db:62:8a:0c:ac:31:06:62:4b:53:7b:61:
                    cf:41:b5:a0:26:94:2a:9a:ca:4d:d9:50:c6:c9:20:
                    d9:e6:e5:19:74:87:26:36:27:e8:69:53:7d:db:f9:
                    e6:2e:89:29:9e:27:3b:26:dc:f7:bb:6b:60:ce:5c:
                    b3:20:9e:ee:be:b4:62:91:5c:09:ef:1f:fd:66:bf:
                    0e:42:4e:b2:38:38:67:46:1f:46:f0:32:aa:78:37:
                    26:f2:4f:af:38:e1:71:b5:5f:fa:36:44:c8:9b:0f:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:55:01:FB:E7:0B:2F:F7:23:5C:A1:BD:D7:EF:D8:F2:EC:E8:AB:7A
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136372e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:da:2d:a7:b5:45:33:63:8d:65:d3:37:d2:fa:dd:67:2b:59:
         bd:bc:f7:ef:c7:ee:0d:14:6a:bf:f8:f8:5e:02:0d:3c:76:9a:
         e0:e2:14:b5:77:04:0f:6f:37:16:19:35:1a:71:70:67:b6:a3:
         a1:69:34:1b:16:9e:a0:c2:78:cb:8b:b0:3d:58:4d:03:62:6e:
         05:9e:21:71:62:eb:2c:71:d7:7e:00:af:67:1d:82:b0:2f:b4:
         e5:0b:57:b2:c5:da:69:f8:b9:a6:2a:b4:a7:a2:c8:85:93:75:
         4d:59:5c:a7:00:d1:39:ee:63:12:ed:be:35:8a:8a:d6:9b:ca:
         e0:0e:80:16:2a:e3:97:10:17:7d:cc:10:7f:a1:aa:df:9b:f4:
         0a:f4:fd:aa:69:d6:6c:54:93:5a:cb:e2:c7:0e:44:cd:1f:8e:
         a3:71:cc:fb:b4:9c:a9:d7:ee:d4:8b:45:50:ed:c4:06:4d:b0:
         ca:49:ba:7c:d4:aa:ac:0d:88:a1:07:f2:fc:86:97:50:53:6a:
         53:00:97:1f:48:f3:7d:e7:a6:85:d7:00:4f:fe:d2:f7:fe:39:
         f6:d9:61:68:cc:fc:1b:2f:83:05:e2:c5:c6:1a:4f:53:fa:42:
         49:2f:55:19:d6:db:0e:01:ca:49:05:74:8d:11:62:a7:18:e9:
         eb:0a:a2:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:46 2026 by rpki-client