Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa
File:                     3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa (raw, json)
Hash identifier:          eSm1UdO5PtQ/vQu/MKbdkI4asZOZkYzdH5F1CgWhvzk=
Subject key identifier:   2C:0B:DA:AD:CF:5C:E7:E5:1E:50:FC:E6:1C:0D:94:F5:7A:A1:56:2E
Certificate issuer:       /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial:       31EF9BDCF0C4F070BC8CE9109535158AC9664404
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa
Signing time:             Thu 09 Apr 2026 05:22:29 +0000
ROA not before:           Thu 09 Apr 2026 05:17:29 +0000
ROA not after:            Thu 08 Apr 2027 05:22:29 +0000
asID:                     151253
IP address blocks:        103.59.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ef:9b:dc:f0:c4:f0:70:bc:8c:e9:10:95:35:15:8a:c9:66:44:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
        Validity
            Not Before: Apr  9 05:17:29 2026 GMT
            Not After : Apr  8 05:22:29 2027 GMT
        Subject: CN=2C0BDAADCF5CE7E51E50FCE61C0D94F57AA1562E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9b:0a:f8:ac:e0:d6:9a:c7:a9:71:0c:77:70:
                    f6:1c:28:17:39:f9:50:03:5d:a2:a6:2c:4d:4b:09:
                    6e:9f:e6:4b:f1:f4:b7:30:07:3f:2d:4f:f0:03:e1:
                    9d:c2:90:d4:3a:8e:58:1f:0b:84:60:5f:88:0b:90:
                    c4:19:f1:96:2c:8b:06:5c:a3:06:f7:db:21:f5:54:
                    69:61:43:dc:f7:16:98:9d:b1:90:6b:a3:2b:fe:5c:
                    41:8d:4e:ef:e7:a9:6f:f1:69:30:c3:78:5d:1b:27:
                    27:d0:22:6d:28:a8:11:e1:06:40:fe:08:27:b5:09:
                    be:13:c3:8c:ff:82:9c:30:16:37:2f:72:22:44:91:
                    b1:bf:58:a2:9d:f6:5d:b0:d5:20:ef:ef:ca:63:19:
                    89:b2:5f:f5:55:18:96:00:6a:20:53:41:40:83:1c:
                    58:33:f9:15:cb:53:73:d6:c4:88:54:cc:96:39:39:
                    64:25:da:cc:4c:d8:fc:16:40:6e:e0:4c:79:e7:a6:
                    1e:18:4b:17:90:df:e6:50:9b:4c:53:b9:b5:4a:09:
                    74:9b:37:74:48:8e:f2:54:15:cb:2c:8b:4e:09:ec:
                    22:df:55:fb:83:86:9d:5e:e3:0e:eb:30:f9:5b:58:
                    8f:75:28:b1:dd:5c:e3:39:cb:ed:de:90:ec:d7:de:
                    25:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0B:DA:AD:CF:5C:E7:E5:1E:50:FC:E6:1C:0D:94:F5:7A:A1:56:2E
            X509v3 Authority Key Identifier:
                keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/3130332e35392e3134392e302f32342d3234203d3e20313531323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c9:2e:60:84:a7:27:4c:78:1b:6e:46:6d:96:99:71:5a:c1:
         76:d1:f8:00:fe:72:a2:8c:f0:9f:b7:c1:23:a1:c7:1d:11:f4:
         60:a4:60:fd:39:4d:42:e9:be:16:06:c4:9b:82:c9:1a:af:91:
         9b:ff:ed:36:1e:e8:d2:eb:45:74:a3:09:ed:96:f9:0e:09:b8:
         cb:61:32:63:46:55:50:2f:40:d0:f7:d0:e9:ba:56:df:9f:bc:
         dd:ff:d9:60:08:ce:28:44:94:30:77:5b:00:52:56:3e:1a:35:
         ca:60:21:9d:f6:8c:83:d6:8b:5f:9a:7f:f2:49:b1:7f:9e:dc:
         bb:30:cd:6d:f0:69:e0:ab:b6:18:15:6e:a6:5b:5b:fe:36:c8:
         25:92:eb:ee:28:a2:14:a8:b6:92:bc:10:29:61:b6:41:1e:dd:
         08:bd:a6:ab:e6:7e:84:6b:9a:0e:9f:33:8c:d2:10:30:12:aa:
         f2:73:79:ea:ba:8a:21:13:7f:89:c5:5b:e3:90:f6:ec:8f:be:
         73:48:6f:74:30:56:07:1f:0c:b8:f9:df:81:dd:7d:4f:1c:d7:
         94:db:2f:18:35:75:19:31:bf:a2:99:08:f7:e0:63:5a:03:2b:
         96:59:36:61:38:72:ec:92:da:7a:0e:59:5e:b3:61:4f:f3:6e:
         4a:67:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:33 2026 by rpki-client