Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS1054.roa
File:                     AS1054.roa (raw, json)
Hash identifier:          tU54vBuCqy69IKbJMx+Y5NUUdj79n2zrjagMlS8xkis=
Subject key identifier:   01:BC:26:38:49:FC:0F:AF:7A:A7:03:08:A0:2A:25:89:48:00:C5:9E
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       496520CD20EAB2B974826AEA6EB0E7251AEB9D0B
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS1054.roa
Signing time:             Tue 19 May 2026 02:36:41 +0000
ROA not before:           Tue 19 May 2026 02:31:41 +0000
ROA not after:            Tue 18 May 2027 02:36:41 +0000
asID:                     1054
IP address blocks:        103.132.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:65:20:cd:20:ea:b2:b9:74:82:6a:ea:6e:b0:e7:25:1a:eb:9d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: May 19 02:31:41 2026 GMT
            Not After : May 18 02:36:41 2027 GMT
        Subject: CN=01BC263849FC0FAF7AA70308A02A25894800C59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:33:50:0e:d1:65:aa:9f:13:ed:ec:56:2b:
                    75:fe:25:67:3e:b5:60:c2:4a:f6:13:ce:9a:ca:68:
                    1d:5f:c8:00:fd:7f:8b:f8:8c:79:86:9c:2d:11:72:
                    ba:a5:72:be:9f:b3:d1:46:47:9b:9c:5c:47:86:24:
                    84:73:26:3c:bb:61:f6:24:3a:dd:26:72:7c:a7:cb:
                    c7:53:27:bd:f3:ea:8b:54:23:2e:d3:25:50:4d:a1:
                    52:8e:7c:5e:c2:ae:61:c4:79:42:ff:f9:2a:5d:c7:
                    77:b8:f2:90:48:ec:7d:44:e2:4d:19:9e:d5:5b:78:
                    3c:12:22:54:f0:c5:61:e3:68:99:0e:35:95:5b:b1:
                    e5:67:14:67:47:0d:36:e3:c3:a1:ba:68:18:f3:41:
                    ab:62:6b:d9:e8:39:04:f5:6a:10:ff:c5:1b:0b:52:
                    55:54:cd:c0:4a:a7:d8:a4:a5:60:c8:f0:62:9e:e7:
                    b5:14:86:14:a1:84:14:f7:e4:c0:4e:cd:86:79:b4:
                    9a:f6:e8:5e:5f:a8:1a:e2:51:2c:de:46:40:57:05:
                    d1:ad:61:bf:a8:9d:b4:b6:0b:91:2c:c7:44:22:e8:
                    93:d0:75:05:d2:4e:e7:03:6c:5d:fa:e9:92:8b:45:
                    de:3b:53:b3:20:8f:b6:23:f0:d2:2c:40:18:93:d5:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BC:26:38:49:FC:0F:AF:7A:A7:03:08:A0:2A:25:89:48:00:C5:9E
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS1054.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:a8:0c:f5:61:bb:b7:21:4b:66:74:31:1d:2b:32:3f:bf:6b:
         39:48:e2:25:b0:6b:3f:5f:f5:22:31:96:3f:6a:b0:f0:89:52:
         49:13:0a:fa:d2:b6:84:eb:b6:c5:39:e5:6d:26:15:6b:84:f5:
         65:54:1e:5d:cd:40:14:60:da:80:5a:28:47:10:cb:0e:6c:05:
         86:fa:09:29:64:f6:dd:9a:20:92:37:0a:2f:3b:75:80:99:d3:
         aa:53:c3:b6:87:63:69:4b:c9:ca:de:2c:14:a2:56:54:23:61:
         9c:af:c9:29:64:de:9a:7d:f6:65:99:d7:02:35:ec:35:fe:8c:
         43:d5:eb:9c:18:e4:9c:f0:84:31:af:49:84:2e:b8:81:b1:42:
         bd:ec:00:e0:13:5a:15:b8:2f:ee:90:15:03:1f:3e:1b:b2:88:
         ce:af:a2:38:e3:82:80:51:3e:9c:11:68:01:e9:ed:0e:3f:b0:
         a9:d0:f2:bd:66:d6:60:b4:a5:04:00:6b:55:32:67:d3:6a:68:
         de:6b:0f:56:e1:05:86:46:32:3b:e6:57:b4:ce:cd:4e:20:98:
         00:9d:57:c0:bb:bf:ee:57:33:88:a6:b6:fc:d2:6e:b3:cc:31:
         7d:04:b8:35:32:cd:8d:0f:1d:94:e0:12:ee:be:45:53:d3:43:
         90:8a:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:37 2026 by rpki-client