Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32322d3232203d3e20313337363937.roa
File:                     3130332e382e3232302e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          cD5eAmVzUTYQYj8gKc16CaU0ZOOC/hqulIT7jrZbCHA=
Subject key identifier:   1D:B3:A2:6B:A9:F0:87:3A:DF:9F:33:5B:28:3C:06:61:80:45:51:77
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       767863EC7EFA6C4C71E10A590AF0C89EFE1EB57E
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 02:35:02 +0000
ROA not before:           Thu 14 May 2026 02:30:02 +0000
ROA not after:            Thu 13 May 2027 02:35:02 +0000
asID:                     137697
IP address blocks:        103.8.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:78:63:ec:7e:fa:6c:4c:71:e1:0a:59:0a:f0:c8:9e:fe:1e:b5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 02:30:02 2026 GMT
            Not After : May 13 02:35:02 2027 GMT
        Subject: CN=1DB3A26BA9F0873ADF9F335B283C066180455177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:77:78:ea:00:cb:96:6b:ae:6f:5d:23:96:
                    21:12:2a:ff:33:71:da:a8:de:43:3b:61:04:91:fb:
                    ef:5d:9b:b9:48:b8:38:33:0c:7d:02:62:cc:8a:87:
                    8b:a9:fa:f1:ea:56:b9:0b:aa:05:0a:83:23:e2:a0:
                    2f:69:7a:a1:a1:a7:a6:88:02:6f:58:c8:d8:e9:11:
                    2a:2d:d2:5b:94:cd:1e:93:a3:79:61:9c:81:a6:b4:
                    bd:7f:01:b1:81:0a:71:be:e9:04:0c:7b:9c:fc:07:
                    36:07:0b:ef:dd:18:ca:b5:6b:7b:43:43:c5:56:8d:
                    78:82:c4:4b:c5:a5:21:ad:ed:1b:cb:3c:07:e1:32:
                    5d:17:13:ff:2a:19:a2:85:63:d2:44:83:d2:3f:42:
                    56:36:09:10:9a:89:7e:88:93:7b:68:cb:c6:d5:1a:
                    ac:c4:ed:f3:2e:d4:83:00:e6:31:62:98:ec:91:15:
                    a2:87:37:00:1e:49:1d:d8:71:1f:f0:8a:23:63:89:
                    2e:21:0e:ac:fb:bf:3f:bd:6d:6b:a7:b0:1e:ea:6b:
                    52:f7:1e:30:8a:ff:03:d1:b6:f7:f4:d5:80:47:4e:
                    1f:5f:4e:af:2a:20:ff:bf:1d:57:1f:9b:aa:99:b9:
                    3a:37:45:9f:54:d5:70:d3:f1:27:3c:f9:1a:8d:3d:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B3:A2:6B:A9:F0:87:3A:DF:9F:33:5B:28:3C:06:61:80:45:51:77
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:34:38:ee:ce:24:d3:c6:08:36:ec:f0:4d:db:3a:be:62:61:
         64:88:26:71:32:bc:38:83:86:e6:44:09:30:6c:08:dd:08:d8:
         7e:84:90:d9:32:1c:89:c7:f1:a3:e6:57:a7:be:fc:14:8e:2f:
         2f:02:fc:a1:0d:35:98:a2:63:46:92:e9:68:d6:73:ff:1b:97:
         a2:62:26:96:fa:27:b2:88:2d:68:2e:9b:bd:c1:10:6e:1c:29:
         fe:fa:50:9c:6b:6f:f6:af:ba:8e:87:98:39:60:43:72:b8:24:
         6d:1c:07:80:4d:24:97:27:53:84:0d:e6:37:45:19:ec:c2:3e:
         12:77:b1:dd:23:b3:82:50:8f:7c:94:06:23:b5:cf:38:a2:44:
         4a:76:57:f4:52:36:0c:4f:cd:4e:60:a5:95:d8:01:c4:7c:3b:
         a8:57:a4:20:86:68:8c:c9:5a:e7:0d:f8:8e:19:b5:80:fb:69:
         02:00:9e:dd:51:a1:8a:32:7a:b4:88:39:d9:68:ab:e3:90:cc:
         cc:f1:08:92:3e:75:37:b2:bd:bd:61:99:b1:f4:85:b1:db:03:
         c0:92:8f:d0:0b:30:c9:f5:19:98:8b:ee:4c:bd:d4:52:fb:e4:
         0c:d1:3b:cc:88:29:6b:86:c7:46:10:96:b3:e2:41:92:07:b1:
         99:e4:10:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client