Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32342d3234203d3e203633363538.roa
File:                     3130332e382e3232302e302f32342d3234203d3e203633363538.roa (raw, json)
Hash identifier:          wclR9vXausBlQ5O8guJdvgA4wf7dE6JzxFV8sKHTCZw=
Subject key identifier:   A6:17:7C:92:AD:33:26:1D:3A:85:58:14:77:6C:2D:81:9F:14:A0:FC
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       16B120C11803E06CF6514C57AB84EBB9B13CC687
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32342d3234203d3e203633363538.roa
Signing time:             Tue 29 Sep 2026 02:59:06 +0000
ROA not before:           Tue 29 Sep 2026 02:54:06 +0000
ROA not after:            Tue 28 Sep 2027 02:59:06 +0000
asID:                     63658
IP address blocks:        103.8.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 17:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b1:20:c1:18:03:e0:6c:f6:51:4c:57:ab:84:eb:b9:b1:3c:c6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 29 02:54:06 2026 GMT
            Not After : Sep 28 02:59:06 2027 GMT
        Subject: CN=A6177C92AD33261D3A855814776C2D819F14A0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:92:6f:9d:0e:dc:d2:18:14:74:1b:0b:b4:
                    33:c5:9d:e4:89:cd:cd:50:e4:17:14:ab:08:0d:4c:
                    4a:21:46:43:9f:4e:14:c9:2d:41:52:99:1d:b8:eb:
                    92:d5:48:fe:b5:cf:7a:5f:95:51:ed:bb:e7:9c:c3:
                    0f:de:db:9c:7d:c0:43:df:6d:12:f2:3a:74:1c:5e:
                    38:88:8d:a5:cb:ff:3c:56:20:5e:60:d0:b0:d5:32:
                    98:9d:a3:05:e1:6b:59:52:c7:da:5b:db:fe:f6:11:
                    05:e9:32:6b:bd:ed:e1:63:42:9f:1d:62:ff:a2:df:
                    2d:cc:b7:9d:39:4e:12:3e:a7:7f:d6:6f:cc:e3:0e:
                    1a:c2:23:ef:93:16:77:81:db:49:32:8b:09:f3:a5:
                    5d:4b:c4:61:45:b5:3e:b8:a9:1c:a3:2e:cd:57:fc:
                    f9:ba:72:51:ae:79:6b:54:80:37:3e:60:9c:7f:f9:
                    8e:51:16:9f:c2:b1:dc:0e:4d:87:6c:eb:ac:c3:30:
                    57:8d:b2:16:8f:6b:0d:14:f5:67:75:49:a1:7f:98:
                    e3:42:40:00:21:63:6d:d9:3b:6a:94:31:1e:e6:36:
                    d2:1a:44:af:3b:c2:01:db:2b:08:12:f9:2b:c8:94:
                    7e:d4:2d:03:17:21:be:39:4e:a6:e4:af:da:99:00:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:17:7C:92:AD:33:26:1D:3A:85:58:14:77:6C:2D:81:9F:14:A0:FC
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32342d3234203d3e203633363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:02:d8:ec:89:2d:83:cc:24:cb:13:d4:78:76:a8:5c:31:59:
         9f:8b:a1:bc:07:87:74:0e:3f:01:fd:37:0c:24:65:b1:bf:ad:
         49:3e:29:46:c7:55:2f:18:63:d7:99:c0:b6:fa:92:87:33:19:
         82:54:93:4e:ff:af:84:7f:ae:b1:33:14:4f:ed:90:df:09:d6:
         cc:08:9c:0a:b9:9b:d3:1d:3a:40:cd:06:88:82:18:df:81:6a:
         be:00:f5:78:60:71:91:13:12:66:59:02:a9:c8:8d:ab:5b:9c:
         b8:59:13:fb:09:34:12:69:46:fa:8a:fd:1f:8e:f6:6b:af:46:
         c1:39:4c:e1:7b:56:54:ab:62:a1:bf:59:e2:b3:ea:7f:ce:c3:
         7d:a0:f3:a1:b2:0d:22:ac:b3:c5:f5:f1:54:72:31:44:ad:84:
         df:32:53:f0:47:2d:f7:fa:a5:f1:55:c8:a7:e9:1e:25:73:62:
         40:6b:a3:cf:7d:08:62:c8:d7:ee:0b:22:f6:ae:88:0a:9a:da:
         c8:84:61:06:b6:00:58:b8:b4:ed:65:fb:0b:d9:8f:64:88:56:
         b4:6f:d4:3e:17:30:f4:50:02:1d:d9:9d:97:cb:12:3c:bf:f6:
         3b:5e:25:27:bc:98:4d:5b:e1:e6:6e:0e:d2:56:a4:8d:f2:e8:
         a1:4b:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:08 2026 by rpki-client