Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233352e3133382e302f32342d3234203d3e203539303039.roa
File:                     3130332e3233352e3133382e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier:          3Nih7blqGJxGz7pBsrDs+jyiSu0oakSRBBa5VGXoEfM=
Subject key identifier:   D3:50:69:B8:3B:9D:04:A4:ED:67:C5:AD:23:4B:A9:33:6A:D9:BA:A0
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       6BED764F9BD51A03096E68F6CAB3EE91A8E74E46
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233352e3133382e302f32342d3234203d3e203539303039.roa
Signing time:             Thu 02 Jul 2026 01:35:31 +0000
ROA not before:           Thu 02 Jul 2026 01:30:31 +0000
ROA not after:            Thu 01 Jul 2027 01:35:31 +0000
asID:                     59009
IP address blocks:        103.235.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ed:76:4f:9b:d5:1a:03:09:6e:68:f6:ca:b3:ee:91:a8:e7:4e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul  2 01:30:31 2026 GMT
            Not After : Jul  1 01:35:31 2027 GMT
        Subject: CN=D35069B83B9D04A4ED67C5AD234BA9336AD9BAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:a8:b6:2d:31:6b:10:a8:ed:89:30:99:62:
                    25:3d:dc:60:a6:ba:63:1d:2c:e1:b1:05:0f:85:b8:
                    b6:ca:de:ec:e2:0e:50:c8:3f:7a:9f:30:41:3f:72:
                    44:87:c9:89:2a:74:7a:0b:dd:f1:0e:e7:67:3c:b9:
                    9c:8f:4d:9c:c4:0e:f2:b6:8d:b4:d7:2c:0c:d6:da:
                    3a:7a:fb:fe:79:c4:24:a6:6d:9e:f4:01:c8:a9:d2:
                    f2:89:4f:3e:8f:94:85:f3:c5:0f:76:bc:0e:5b:37:
                    5a:41:86:40:20:35:d3:b3:a6:b3:66:20:63:df:84:
                    27:ac:7f:aa:88:16:a9:b1:5e:05:5c:63:f5:12:1a:
                    1c:83:1a:cf:14:87:83:08:0e:11:cf:7d:43:c4:ae:
                    c7:5c:96:68:19:33:f5:16:04:cb:8d:68:be:5c:a5:
                    ea:ad:50:c4:11:e8:f9:22:c5:a8:17:91:8f:5c:e3:
                    f2:11:58:67:bd:95:d2:ad:e9:ab:a3:77:af:b3:60:
                    bf:f5:a5:5b:80:e6:64:9e:f4:06:10:10:71:cc:1e:
                    de:ac:d4:05:8b:11:85:39:23:1a:47:d2:55:ce:14:
                    ca:98:9c:82:38:0b:b2:7d:34:71:62:a2:f8:27:e1:
                    6d:1d:fa:83:52:d1:55:35:e6:4c:9f:b4:bf:d7:1d:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:50:69:B8:3B:9D:04:A4:ED:67:C5:AD:23:4B:A9:33:6A:D9:BA:A0
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233352e3133382e302f32342d3234203d3e203539303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:13:58:44:15:ea:9c:2a:e3:cd:d0:af:58:64:3e:6b:3a:8d:
         47:a7:59:fb:14:2b:f6:4b:8b:0a:f1:f0:49:48:55:d5:d0:83:
         7b:2d:9c:37:d1:61:aa:bd:b6:57:d2:3f:1a:71:b4:c1:e9:2f:
         65:4a:e8:90:05:09:b7:d7:42:b7:e2:04:f1:5c:8d:90:04:38:
         49:e4:ea:13:d9:2e:4c:ae:94:78:5a:59:10:cc:3d:40:2c:af:
         73:5b:b6:b1:82:7b:57:9c:39:14:34:a1:25:8e:47:af:68:77:
         06:7e:13:56:3d:60:71:88:06:ff:c6:35:12:1a:8b:93:fb:7c:
         1d:20:47:59:53:38:49:79:26:20:1d:ff:c3:12:55:5b:a1:18:
         d3:e2:c7:58:09:89:13:ec:6d:3c:d2:c3:cb:63:a4:d5:72:65:
         6a:00:c3:c6:ce:fa:8d:d3:7d:77:bd:97:8d:d5:d1:d5:e9:3f:
         84:e1:e3:1b:e7:75:c2:3d:90:e5:26:a5:54:71:a1:72:e0:06:
         98:4c:d7:94:d6:ea:a8:6c:e9:ce:c8:77:51:64:d2:67:e5:2b:
         85:4d:c4:3e:51:df:fb:5f:bc:04:4e:ab:13:78:1f:9a:1b:f4:
         3e:8d:40:fd:e8:01:0d:b5:b7:d4:27:84:15:cf:0b:39:24:39:
         c0:08:47:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:50 2026 by rpki-client