Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e3132382e302f32312d3231203d3e203539303337.roa
File:                     3130332e34362e3132382e302f32312d3231203d3e203539303337.roa (raw, json)
Hash identifier:          gUAtSKWCG2dmoSdNr2GAVffzXAEmzrCj2y4haWCVI/Y=
Subject key identifier:   DA:73:66:40:FC:E7:99:57:73:D7:9A:49:A1:BB:5D:AB:37:44:60:89
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       773EDDC6D6582549DD42FF1E3FF0BBFF3F230ABA
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e3132382e302f32312d3231203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:39:06 +0000
ROA not before:           Wed 27 May 2026 06:34:06 +0000
ROA not after:            Wed 26 May 2027 06:39:06 +0000
asID:                     59037
IP address blocks:        103.46.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3e:dd:c6:d6:58:25:49:dd:42:ff:1e:3f:f0:bb:ff:3f:23:0a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:34:06 2026 GMT
            Not After : May 26 06:39:06 2027 GMT
        Subject: CN=DA736640FCE7995773D79A49A1BB5DAB37446089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:60:06:7b:bf:0a:58:f5:a9:d4:d1:bc:65:06:
                    bc:61:d4:d1:80:5a:2d:da:b6:1f:ed:81:cb:5f:db:
                    7c:95:c9:df:d4:66:9b:72:b9:f3:51:7b:1e:cf:3a:
                    79:38:db:c6:1e:c9:05:32:ee:20:fd:d4:f0:23:76:
                    f7:2a:a9:af:ff:fd:e7:98:41:a9:d0:7c:5b:8a:06:
                    c8:f1:b0:e2:35:73:1c:08:30:cb:66:60:83:50:76:
                    fa:1a:e7:4c:e0:34:70:d8:74:9d:05:e9:22:3d:d3:
                    83:a8:09:28:cd:df:81:69:b8:54:8a:ca:f0:96:0a:
                    fe:f6:b6:8d:2d:31:6b:53:2c:ef:74:40:35:aa:e3:
                    6f:c9:c1:76:b8:e9:74:2e:4b:44:39:88:5d:c5:94:
                    3f:64:ca:6e:ef:26:00:bc:9d:bf:54:45:1f:7a:22:
                    a2:5a:3a:3c:05:71:35:a4:ad:35:f9:14:a9:a5:7a:
                    e0:07:d3:78:51:d6:72:a2:1c:a3:16:28:87:d7:9f:
                    01:c2:b3:e9:d3:17:9d:2d:77:cd:b8:79:a3:0b:b0:
                    ea:9f:40:75:c9:1e:76:2c:5e:93:1a:eb:2a:82:f1:
                    91:9f:0b:4b:2d:5c:34:31:4e:ae:3f:40:c9:e5:18:
                    ac:f0:c6:77:6b:05:eb:44:34:f4:17:d1:34:c0:cc:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:73:66:40:FC:E7:99:57:73:D7:9A:49:A1:BB:5D:AB:37:44:60:89
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e3132382e302f32312d3231203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:20:d4:31:27:24:9f:56:db:32:3d:5b:9d:2d:da:50:44:cb:
         c3:5e:02:9e:6f:a3:98:6a:41:fa:f6:47:32:5b:4f:99:4b:4e:
         18:28:db:b3:e7:10:b5:24:c8:9b:51:4f:8d:ad:92:59:a1:68:
         bc:05:72:75:11:22:7c:69:a0:ad:bb:72:83:2f:a0:f7:95:b4:
         37:b6:89:36:1f:32:85:a2:18:b5:be:a9:a0:77:ff:da:9f:3e:
         c0:1b:f6:5a:af:3e:bc:0f:d8:c1:7f:f6:4b:e0:eb:2f:f4:e6:
         04:32:0c:89:b4:a5:59:0f:b1:5d:c7:8c:d5:8e:8a:1b:8c:58:
         aa:f9:88:9f:f6:c6:77:c4:1f:dd:80:1b:51:f9:02:99:35:89:
         5b:eb:30:e2:9d:d0:10:e8:e1:3f:1f:d8:b3:9d:c9:91:61:7a:
         d8:a8:f7:b5:78:eb:4d:e1:94:2b:bc:dd:ae:0c:6e:fc:1e:99:
         1b:32:c7:df:f7:c6:31:a7:51:0f:24:02:4a:54:9c:b5:34:58:
         fd:09:9f:0d:1e:9d:79:2b:f8:d1:80:96:21:2f:0a:91:a1:48:
         ff:fc:eb:91:7d:8f:e5:a8:4a:ee:a2:b5:d2:8d:45:59:64:38:
         2d:c4:bb:f6:92:e3:1d:8b:9a:e5:fc:39:f6:8a:b3:29:0d:8e:
         c2:e1:d5:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:51 2026 by rpki-client