Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa
File:                     3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=
Subject key identifier:   B5:6C:8A:AE:8C:9D:5D:EF:DF:7A:AF:47:CC:0E:9F:A1:C9:33:C6:CC
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       6CA48735D4C5477FD2906E5F1C82A07576DC100C
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa
Signing time:             Tue 21 Apr 2026 02:56:53 +0000
ROA not before:           Tue 21 Apr 2026 02:51:53 +0000
ROA not after:            Tue 20 Apr 2027 02:56:53 +0000
asID:                     4811
IP address blocks:        103.234.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a4:87:35:d4:c5:47:7f:d2:90:6e:5f:1c:82:a0:75:76:dc:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Apr 21 02:51:53 2026 GMT
            Not After : Apr 20 02:56:53 2027 GMT
        Subject: CN=B56C8AAE8C9D5DEFDF7AAF47CC0E9FA1C933C6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:7a:ad:64:ae:f5:9d:c4:ac:e2:f9:d1:65:
                    eb:a3:99:4a:1b:44:44:d2:48:04:b1:18:42:b0:22:
                    27:f0:8e:45:e2:c4:ad:67:98:36:e9:88:90:18:e7:
                    c2:65:3b:00:ed:2d:17:a5:9d:7d:9b:7f:df:e0:41:
                    8a:a1:e5:50:48:c3:6e:5f:b5:17:f8:d2:bb:47:d1:
                    f3:0f:39:af:a1:db:af:a1:08:56:a3:11:a7:fd:d8:
                    e2:6a:c7:e3:81:65:90:33:3d:36:88:bb:8e:1e:18:
                    bf:e1:bc:d4:e5:b7:84:89:79:9e:06:15:12:84:24:
                    a5:be:68:ef:dd:bf:3a:99:33:76:4d:89:27:e5:f1:
                    71:a1:90:77:f7:bd:fc:8b:d8:97:b1:d3:ad:89:f1:
                    cf:75:a4:5a:dd:f1:c5:35:a3:8b:70:f1:28:be:38:
                    66:33:69:ce:d1:47:0f:2a:36:f3:1c:0b:0e:80:96:
                    0c:a1:97:bb:39:d5:83:ad:b6:36:9c:e4:e8:4a:d7:
                    05:db:ca:5d:eb:b8:eb:b7:40:c1:03:14:da:ad:c3:
                    f6:0b:f1:ed:3f:27:96:97:f4:6b:f5:da:c1:64:4b:
                    b0:53:81:d7:a5:03:87:0b:b8:2f:1e:29:70:de:10:
                    85:a0:5e:4f:d2:fa:0c:fd:ac:3b:c4:68:be:d1:c0:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6C:8A:AE:8C:9D:5D:EF:DF:7A:AF:47:CC:0E:9F:A1:C9:33:C6:CC
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:9a:bc:be:7c:6e:b7:f6:e5:27:af:4c:79:85:70:7a:d3:
         42:90:e5:d0:58:82:81:a5:99:ba:d0:1b:5a:9c:ee:62:bc:89:
         fb:95:12:9c:4d:65:e1:07:45:77:0a:e8:6f:8a:9a:64:bb:3a:
         7f:2f:53:7b:29:9b:5b:da:cb:1a:25:76:8c:bb:9d:7a:1f:9a:
         ae:02:fb:08:9e:16:d9:b6:d6:66:fb:4a:ad:28:57:c7:0f:c7:
         36:fa:b6:b2:a7:30:91:6c:9f:b1:83:2e:9f:53:e3:6d:2a:78:
         e8:68:37:b8:5b:2e:b9:56:a4:6c:a2:35:ec:b6:26:51:b9:f1:
         72:21:e8:cb:84:de:0a:55:b0:56:90:a3:be:ee:97:0c:e9:bf:
         dd:3a:c5:1d:fe:4d:cf:3e:d4:ab:45:3b:01:e1:8c:a3:08:6a:
         f1:8b:34:c4:93:b9:39:82:ba:36:f6:a3:08:fe:b7:32:32:1b:
         85:1f:60:dd:5f:a0:6f:42:22:e5:57:15:16:af:e6:0a:5b:d9:
         41:3f:ab:71:df:ad:a0:61:5a:cb:78:f8:f5:4f:e8:38:59:9b:
         6d:62:85:f4:29:88:06:00:c1:9e:b9:65:46:ba:eb:04:3d:79:
         45:d7:ec:fa:6a:e4:91:4a:9d:a0:92:af:16:cb:8c:88:be:f9:
         6b:8e:3c:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:04 2026 by rpki-client