Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e39362e302f31392d3139203d3e203539303337.roa
File:                     3130332e34362e39362e302f31392d3139203d3e203539303337.roa (raw, json)
Hash identifier:          4ho5GfdYPdk7Q9EI+slTRKjHENffO7eayNCTJEvE6Iw=
Subject key identifier:   87:F9:A9:CE:DD:27:FF:88:F7:ED:4D:3D:D1:07:3B:BF:0B:29:EA:D0
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       7211B08312AA517D863EC3C7B48E3C95CB48D5CE
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e39362e302f31392d3139203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:56:11 +0000
ROA not before:           Wed 27 May 2026 06:51:11 +0000
ROA not after:            Wed 26 May 2027 06:56:11 +0000
asID:                     59037
IP address blocks:        103.46.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:11:b0:83:12:aa:51:7d:86:3e:c3:c7:b4:8e:3c:95:cb:48:d5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:51:11 2026 GMT
            Not After : May 26 06:56:11 2027 GMT
        Subject: CN=87F9A9CEDD27FF88F7ED4D3DD1073BBF0B29EAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:17:6b:9e:99:1a:c5:9f:30:9a:be:75:ce:
                    a9:ff:62:90:34:2c:be:62:2f:06:1b:6a:eb:5e:64:
                    25:65:ed:e0:4b:4a:d3:41:40:75:ac:d0:cb:77:eb:
                    17:ec:20:b9:b1:5a:7d:8d:3e:27:03:b7:b7:f0:d7:
                    9a:98:dd:a7:a6:94:95:5e:b4:7a:92:42:68:db:b4:
                    68:2f:91:7e:41:13:1d:4e:eb:27:2d:0e:bb:40:8c:
                    e8:72:b8:0a:a1:38:af:b8:c8:10:e7:e8:02:60:6b:
                    68:f4:c3:55:7d:f5:16:9c:b1:e5:15:02:53:45:2c:
                    22:94:08:b3:39:70:7d:38:d5:ff:f7:56:9c:08:43:
                    44:0d:a6:5c:21:b8:e1:73:a2:65:ea:8e:a2:23:de:
                    33:74:78:df:81:b1:f4:30:e5:05:a0:41:6b:14:c9:
                    1a:99:71:ea:82:d8:ed:b1:35:c7:39:a0:dd:41:33:
                    57:4b:f1:12:a9:05:55:8e:f0:14:ed:41:e5:db:f0:
                    e2:ab:53:db:5a:48:6f:09:9a:9d:27:96:0a:46:57:
                    39:aa:ec:a0:de:3b:6f:62:f5:34:46:c6:bb:23:d8:
                    9e:6f:ab:21:e6:a2:aa:d2:b2:ec:94:11:05:0a:63:
                    76:96:9f:c5:75:38:a0:ba:b5:19:ae:fe:ec:20:03:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:A9:CE:DD:27:FF:88:F7:ED:4D:3D:D1:07:3B:BF:0B:29:EA:D0
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34362e39362e302f31392d3139203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:0b:ae:f4:c1:d1:ab:44:5d:6a:ea:f8:20:be:36:37:5e:5c:
         42:83:ff:5f:ac:14:76:cf:ee:86:e2:00:56:85:13:50:26:9c:
         02:ee:66:c6:70:a3:e4:e6:fe:b7:26:75:07:90:88:ea:00:50:
         e6:1a:56:5d:66:03:e3:bf:e4:7d:be:28:ee:16:a9:a7:0b:10:
         e4:71:36:c6:74:76:75:e3:a9:20:6b:84:f3:2a:43:72:eb:e4:
         ae:63:52:d4:65:6a:c8:a8:8d:59:ae:6f:73:9b:05:b0:56:09:
         90:4f:d9:8d:f5:5a:22:f9:4d:9f:98:00:4d:d0:24:35:f7:93:
         76:f1:a1:52:f3:92:a9:0f:bb:48:92:7b:96:49:3f:ef:b9:8d:
         ec:9e:a6:93:68:44:0d:e6:91:4e:42:83:6b:69:34:84:16:97:
         97:42:25:77:9f:2e:11:30:e3:fc:08:da:b1:97:bd:63:b4:f0:
         44:47:78:41:7e:53:4e:a1:aa:b6:86:84:ee:57:cc:bc:2a:9a:
         48:f3:7a:79:2e:85:b4:da:19:51:ae:49:fe:63:84:79:06:0e:
         39:e2:47:bd:69:63:20:70:90:2d:b0:4f:d1:38:f4:25:0f:c3:
         f2:57:b0:10:12:71:8a:1a:bf:8c:57:b1:ca:7e:76:17:13:4a:
         e7:68:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:49 2026 by rpki-client