Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e33322e302f31392d3139203d3e203539303337.roa
File:                     3130332e34362e33322e302f31392d3139203d3e203539303337.roa (raw, json)
Hash identifier:          NcQzYetXCMxeJYxBzuzgBArjI8Q+AwsvzNwE+2b9lw0=
Subject key identifier:   7F:2D:A3:29:BF:7B:C5:8D:32:D8:FB:A5:6D:1A:5E:27:CF:F4:B7:D3
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       54DABCF6463D9C00B8552F5F9ABC63EBDC17E9BF
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e33322e302f31392d3139203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:39:05 +0000
ROA not before:           Wed 27 May 2026 06:34:05 +0000
ROA not after:            Wed 26 May 2027 06:39:05 +0000
asID:                     59037
IP address blocks:        103.46.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:da:bc:f6:46:3d:9c:00:b8:55:2f:5f:9a:bc:63:eb:dc:17:e9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:34:05 2026 GMT
            Not After : May 26 06:39:05 2027 GMT
        Subject: CN=7F2DA329BF7BC58D32D8FBA56D1A5E27CFF4B7D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:a8:d2:ad:8b:b5:84:15:fc:3d:ce:7d:b6:
                    c7:bf:48:63:0c:da:0f:cd:db:d0:c6:28:19:74:58:
                    99:aa:8f:92:a2:69:af:2f:61:e1:83:4e:41:a7:88:
                    43:71:26:a4:5a:a1:67:a0:10:65:95:96:24:c3:10:
                    2b:ec:b6:1e:5b:dc:3d:53:1d:6c:94:63:6c:4e:bb:
                    83:34:8d:fb:1b:24:cc:e6:9a:cb:df:90:77:cf:62:
                    1e:67:35:44:86:70:b0:b0:58:af:3f:62:f5:28:69:
                    27:bb:a1:1d:07:15:77:c2:66:f2:fc:9b:ac:96:fe:
                    77:67:ad:a5:53:67:cd:49:9e:53:7e:59:40:f4:ba:
                    c5:58:17:d8:67:5f:65:bc:9b:e5:6c:56:4f:94:a7:
                    bf:d0:d0:92:0d:b0:d6:97:5a:50:ec:cd:62:c8:ea:
                    8a:f7:73:ac:cd:eb:b6:72:f1:88:46:19:16:79:6c:
                    2c:af:66:3e:7b:68:df:73:1e:3f:23:3d:af:24:8b:
                    a4:53:0c:e1:10:64:2d:0f:50:06:d1:be:d5:d3:e8:
                    f0:57:5d:37:3e:b3:d0:9d:b0:9c:40:63:bd:36:fe:
                    9e:da:10:06:68:84:6c:92:36:30:87:ee:35:e9:ea:
                    b8:4f:d7:4b:f3:0d:70:28:f9:70:cc:98:08:7a:bd:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:A3:29:BF:7B:C5:8D:32:D8:FB:A5:6D:1A:5E:27:CF:F4:B7:D3
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e33322e302f31392d3139203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c0:12:64:0a:64:f4:19:81:48:d2:28:98:d4:28:f6:9b:0e:8e:
         ac:c3:17:0e:07:8b:08:ec:b5:ec:1e:66:fb:19:9d:97:00:e3:
         01:de:35:c0:46:2c:b8:8e:27:27:71:ea:48:32:db:94:39:8a:
         d4:e1:5c:41:f5:13:4a:1f:04:29:c5:b7:05:db:58:b9:8a:07:
         2c:0e:97:d7:ef:27:f7:23:57:ee:55:07:43:36:c2:53:3a:ff:
         dc:c8:8a:7b:23:e8:4d:b6:96:9e:51:1b:3b:18:98:35:f7:53:
         05:e5:cf:74:40:e9:b0:8f:43:f2:77:f4:93:50:45:3b:af:ed:
         3d:00:72:fd:bc:1d:f8:d8:b9:3d:1b:61:ad:af:2b:25:1f:b9:
         dc:2f:f4:a3:78:fc:2d:97:fa:5f:bc:f6:c7:be:89:5e:5a:fd:
         21:6f:10:5f:58:d5:f5:b0:a6:8b:a8:2c:32:60:ff:fa:30:5b:
         74:fa:bb:ba:77:03:75:97:0d:fd:48:0a:ca:42:b4:65:57:c5:
         ea:59:45:2b:05:c0:cb:12:5c:5f:79:d1:21:d7:3e:3f:49:59:
         17:1e:34:04:b3:67:d7:96:5a:14:e6:68:9e:d6:14:2e:c8:bd:
         5a:05:a8:15:5f:6b:cb:14:09:2c:9c:b1:9f:16:b1:9c:c2:1a:
         b3:32:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:52:16 2026 by rpki-client