Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e3139382e36302e302f32332d3233203d3e2034383038.roa
File:                     3130332e3139382e36302e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          MBq3OH/vne3tS8JtiUeLcCuvfUCea9w4ciYPqhPXhsQ=
Subject key identifier:   9E:C5:94:27:B3:EB:68:5C:FF:43:29:72:A6:68:EB:88:0A:3D:FE:84
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       55016E651DC1649854AF886124C7D89DA0BBF50D
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e3139382e36302e302f32332d3233203d3e2034383038.roa
Signing time:             Thu 28 May 2026 07:41:22 +0000
ROA not before:           Thu 28 May 2026 07:36:22 +0000
ROA not after:            Thu 27 May 2027 07:41:22 +0000
asID:                     4808
IP address blocks:        103.198.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:01:6e:65:1d:c1:64:98:54:af:88:61:24:c7:d8:9d:a0:bb:f5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: May 28 07:36:22 2026 GMT
            Not After : May 27 07:41:22 2027 GMT
        Subject: CN=9EC59427B3EB685CFF432972A668EB880A3DFE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:d3:ac:09:9e:ec:0a:c6:03:4a:3c:69:74:
                    08:c4:ea:b1:e5:88:ea:d7:ef:57:6f:00:b9:5c:09:
                    cc:5d:14:8b:55:af:9a:5b:2d:07:45:96:45:b0:64:
                    09:f6:e6:5b:1d:74:81:fe:29:66:e8:36:a8:b9:f8:
                    42:21:ba:6e:92:26:9c:74:a8:1a:f3:60:85:66:9c:
                    16:ee:99:dc:2b:de:14:1a:ba:b1:a2:43:a9:67:30:
                    9e:11:d4:22:e0:a3:8d:3b:f4:8d:dc:43:e1:ad:60:
                    83:f7:f3:b0:1b:da:a4:ee:b4:fa:d2:fe:fa:8b:cc:
                    e3:06:be:69:f4:a1:f6:08:be:ca:4d:de:ef:b2:73:
                    79:6e:dd:68:65:e6:f8:e2:df:a8:b5:a4:9f:4a:b6:
                    65:97:0e:e5:ab:0d:44:8a:57:90:60:5b:eb:e3:d3:
                    b2:4c:12:f7:a2:92:0f:93:e0:ec:37:d1:7c:ef:b3:
                    ca:a7:87:25:6a:ec:b4:a7:c3:c4:35:17:3e:b7:87:
                    fe:bd:86:f6:61:37:28:47:ed:4b:d2:ac:df:8d:44:
                    96:6d:63:0a:a5:b4:11:1b:5e:48:11:27:08:6d:dd:
                    18:cd:96:6b:96:23:8c:18:1c:f0:22:07:93:62:5e:
                    36:71:64:7f:a8:f2:84:87:db:5e:96:70:fc:de:b2:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:94:27:B3:EB:68:5C:FF:43:29:72:A6:68:EB:88:0A:3D:FE:84
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e3139382e36302e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:cb:24:2f:11:7b:e4:10:4c:97:32:39:bf:d1:ad:dc:ae:
         10:6b:71:d4:28:66:c5:de:b8:0e:96:f1:1a:26:36:ac:79:2b:
         3b:4e:e1:1d:80:62:fc:57:3d:fe:19:61:bf:93:9f:1b:43:fd:
         19:c8:8d:0e:5c:aa:8e:c1:10:37:ec:1a:c0:59:9d:8d:4e:b3:
         c1:96:e7:d2:e6:eb:09:f5:58:32:89:f1:3e:25:54:97:6e:93:
         10:8e:c9:3a:2b:dc:88:83:1c:83:e7:eb:5e:05:33:69:b5:0e:
         0e:f6:c6:50:dd:55:cf:74:22:4b:ab:7c:a3:f6:ab:8c:af:cb:
         63:8a:bc:cf:96:ea:2f:cb:9f:be:90:5d:18:e8:d7:10:11:d5:
         a5:7d:f4:16:6e:54:e3:9d:d5:ba:26:98:ee:bd:c9:38:45:d8:
         94:c2:51:ce:ad:3d:d1:26:53:b3:13:6a:94:f5:94:ba:c3:6a:
         e3:e2:dd:90:b3:fc:66:be:a0:1d:e3:8f:56:93:eb:d1:c4:43:
         80:89:cc:e8:a2:11:a9:ac:49:19:67:33:54:b2:33:ad:a8:27:
         ff:3b:61:f2:10:1c:57:2a:10:d9:50:cf:0d:86:3a:e1:5e:75:
         80:56:67:92:23:8b:37:43:02:24:cd:92:db:68:93:12:5c:86:
         9b:c6:ce:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:36 2026 by rpki-client