Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e38302e302f32302d3230203d3e203539303337.roa
File:                     3130332e34362e38302e302f32302d3230203d3e203539303337.roa (raw, json)
Hash identifier:          VM9UgyFDP8OacfKzHanvtWsJQyUyLRlw9EFxofOZsdA=
Subject key identifier:   E4:6C:1C:6C:C9:EC:2A:62:F7:1D:A1:B0:31:BD:3F:40:29:32:76:DC
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       6528B5F4BB5102265CC2DB96ECE419BD2D2C728F
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e38302e302f32302d3230203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:56:11 +0000
ROA not before:           Wed 27 May 2026 06:51:11 +0000
ROA not after:            Wed 26 May 2027 06:56:11 +0000
asID:                     59037
IP address blocks:        103.46.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:b5:f4:bb:51:02:26:5c:c2:db:96:ec:e4:19:bd:2d:2c:72:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:51:11 2026 GMT
            Not After : May 26 06:56:11 2027 GMT
        Subject: CN=E46C1C6CC9EC2A62F71DA1B031BD3F40293276DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b9:4e:c1:97:bb:d4:02:f0:00:e9:2b:d8:0e:
                    05:88:76:5e:d1:b8:f1:61:20:45:58:f4:9d:f8:79:
                    70:6b:d8:cb:ec:d4:46:83:d5:73:c8:cd:e5:6c:e5:
                    a0:a6:08:c8:b4:18:fb:c3:24:0c:ea:e4:12:8a:52:
                    87:c0:f9:74:92:00:bf:c9:58:88:48:5a:e4:1e:7d:
                    d6:89:5d:86:8f:06:fb:82:f8:e0:51:17:d1:30:3e:
                    26:c2:59:4b:5d:91:58:08:1a:b3:f9:da:fa:46:54:
                    ad:9c:f6:11:93:5d:0f:d3:bd:a8:56:ee:c0:52:9c:
                    5d:45:2d:97:b1:f4:2e:ed:bd:3a:a4:70:0c:9d:a4:
                    5a:27:ce:0c:0b:d0:d3:fd:e5:76:a4:47:77:7b:7b:
                    e2:08:e7:bc:59:07:c9:b7:92:d0:02:da:d8:36:63:
                    4b:8a:a9:95:12:a3:04:a0:b7:11:1b:f9:73:59:24:
                    48:e2:ed:9b:d3:c9:c5:b5:25:a9:26:06:14:2b:bc:
                    68:fb:60:a4:99:c1:93:a8:44:56:a0:9c:2c:02:fa:
                    a4:f0:15:33:56:0e:ae:f1:db:49:fe:b3:e9:8b:aa:
                    3a:f4:84:46:7f:21:f6:2b:70:0e:5a:6f:cb:dd:6b:
                    50:51:d5:56:bd:44:60:8d:3b:01:9f:a2:0a:4e:4d:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:1C:6C:C9:EC:2A:62:F7:1D:A1:B0:31:BD:3F:40:29:32:76:DC
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e38302e302f32302d3230203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:fb:11:db:b6:21:3f:bf:68:15:d6:ce:44:d4:e4:86:ee:fe:
         ba:90:9a:d9:1b:8e:6b:dc:9e:4e:e4:88:cb:b6:97:4e:4f:0c:
         65:2f:64:c0:48:08:2e:c2:22:6a:7e:7b:fb:3e:52:d8:ec:22:
         08:40:34:88:ec:f8:a8:d3:e8:31:28:f1:87:46:7f:c8:91:65:
         60:ed:18:91:cb:b4:fd:e8:46:11:35:47:f0:8c:ce:b2:02:77:
         28:ce:d4:63:0d:9b:40:96:cb:3f:1b:a1:17:c1:28:68:4e:55:
         1b:e6:98:59:bf:10:8d:28:11:ea:7e:62:e6:31:35:79:04:2c:
         58:42:b9:7b:dd:a3:da:ce:30:84:45:6f:dc:c5:84:a6:7b:bf:
         0d:f1:7d:9a:56:3d:99:2c:58:f7:6c:f1:54:c9:7f:16:55:eb:
         d0:6e:cc:c8:30:89:99:8d:46:ed:6c:01:02:18:a0:13:7e:43:
         4b:4d:ac:e7:99:13:bf:fc:56:7d:f7:0e:32:11:fb:45:ce:c5:
         b1:f3:15:86:49:0e:98:35:5d:63:fe:ac:c6:47:3b:04:00:e2:
         7f:7b:70:91:a1:01:69:f1:af:6d:20:f3:97:49:b1:63:b9:9a:
         b4:e7:e1:f8:0e:f6:92:52:78:fb:f8:3b:e4:7a:98:5d:ac:37:
         ba:cb:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:55 2026 by rpki-client