Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e36382e302f32342d3234203d3e203539303337.roa
File:                     3130332e34362e36382e302f32342d3234203d3e203539303337.roa (raw, json)
Hash identifier:          hWv/xnaXctv4tbQZt1+mHXpK7XR8uORN9eAUseujZyA=
Subject key identifier:   83:48:61:35:67:84:42:BA:40:D4:22:D6:F8:1B:37:23:CB:F1:00:83
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       15E166EEF4B023F7D84F2612D1B6AAA1C6D54A34
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e36382e302f32342d3234203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:56:10 +0000
ROA not before:           Wed 27 May 2026 06:51:10 +0000
ROA not after:            Wed 26 May 2027 06:56:10 +0000
asID:                     59037
IP address blocks:        103.46.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e1:66:ee:f4:b0:23:f7:d8:4f:26:12:d1:b6:aa:a1:c6:d5:4a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:51:10 2026 GMT
            Not After : May 26 06:56:10 2027 GMT
        Subject: CN=83486135678442BA40D422D6F81B3723CBF10083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:fc:07:3c:7d:58:b2:5d:57:e6:81:75:b8:
                    b0:38:44:11:8a:4d:8b:2c:b3:03:3f:84:1e:22:01:
                    90:1e:7d:59:b7:c8:ea:98:50:c3:ed:3d:1a:f4:90:
                    a7:26:1c:30:3e:8a:53:76:20:69:03:3c:0b:5e:a3:
                    ad:fe:34:6e:bd:8f:e1:61:8f:49:cf:75:4a:d3:6b:
                    72:e9:88:f5:c7:f8:71:85:12:0f:f9:eb:f7:92:4e:
                    3f:14:1a:be:43:e0:a9:7e:79:eb:1f:e9:52:f6:4e:
                    0e:0b:d1:70:fd:ad:fd:5b:45:ae:94:68:24:43:be:
                    c2:78:77:d1:eb:3d:6d:0f:7d:6f:3f:98:bd:93:49:
                    80:93:29:83:5b:ee:0a:73:dc:f0:62:f2:82:35:d8:
                    a2:4b:9d:c7:fb:57:9c:e9:b4:16:57:24:50:67:07:
                    b4:81:a8:75:e2:53:72:88:74:1a:33:b4:3f:7f:1f:
                    44:1e:a7:4d:79:88:58:fe:a5:6d:82:ed:e0:f7:41:
                    55:43:a8:bd:78:8b:6f:9c:03:fd:44:ab:ac:14:ea:
                    5a:f7:e3:df:30:48:80:a2:4b:19:0d:68:ee:85:b1:
                    9a:59:b1:46:42:10:82:9d:9b:91:b6:32:c3:57:2c:
                    39:e5:f3:01:65:d3:f2:08:8d:bf:76:a6:af:f5:c9:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:61:35:67:84:42:BA:40:D4:22:D6:F8:1B:37:23:CB:F1:00:83
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e36382e302f32342d3234203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:29:32:64:78:eb:0b:e5:c1:29:68:9b:b0:ec:f2:e9:76:3f:
         3f:bd:1c:b7:6e:1c:b0:69:d7:a6:07:9c:e3:55:ab:fa:b4:d7:
         c9:2a:60:13:f4:05:34:71:da:15:11:e8:5c:6a:5e:c2:f4:db:
         ba:cd:9a:3a:79:2b:13:65:31:16:15:30:4f:e0:9d:5a:97:7c:
         02:e1:e0:b6:d7:cb:d4:cf:55:46:9a:d1:cf:34:b1:ab:12:2a:
         68:d8:00:59:53:91:00:38:2f:60:88:22:b6:df:eb:9a:26:fb:
         d5:00:96:22:4e:20:ab:07:db:a8:1c:9a:08:8a:84:65:09:e9:
         92:31:28:6b:a4:6b:36:92:de:43:b4:47:f4:fe:d4:cb:e6:2d:
         a4:3a:84:30:16:09:d3:dc:19:f3:4f:94:42:73:89:06:01:95:
         1f:3d:12:4e:b4:60:d5:2b:fb:34:8a:a3:d3:80:d6:25:88:33:
         5a:fd:73:ad:aa:b1:0e:7c:c8:6a:2d:d2:f2:4e:9f:1e:03:6e:
         bf:43:0f:78:94:1e:eb:a5:5d:bd:30:be:ae:72:1f:b2:c8:fc:
         89:b5:ef:06:4c:83:c1:39:50:04:25:8f:2f:78:14:b2:ea:83:
         51:d0:3c:63:19:17:04:08:c1:7d:3e:4c:96:c6:01:e7:5d:e6:
         31:09:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:48 2026 by rpki-client