Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33372e3137322e302f32322d3232203d3e2034383437.roa
File:                     3130332e33372e3137322e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          ZLSAj91TCNLWpmJqAuFupd75mGM7DIEK9ACn9QOoMRU=
Subject key identifier:   EF:1A:27:BE:EB:A0:E9:E6:EB:44:AB:02:94:9B:43:F7:6C:DC:D5:FC
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       539A7537BE12835ED3B60742E46F2A8655A930BD
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33372e3137322e302f32322d3232203d3e2034383437.roa
Signing time:             Thu 28 May 2026 07:42:47 +0000
ROA not before:           Thu 28 May 2026 07:37:47 +0000
ROA not after:            Thu 27 May 2027 07:42:47 +0000
asID:                     4847
IP address blocks:        103.37.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:75:37:be:12:83:5e:d3:b6:07:42:e4:6f:2a:86:55:a9:30:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: May 28 07:37:47 2026 GMT
            Not After : May 27 07:42:47 2027 GMT
        Subject: CN=EF1A27BEEBA0E9E6EB44AB02949B43F76CDCD5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:b3:40:5c:5f:81:2d:d8:43:3f:c3:ca:bf:
                    a5:d2:6e:58:fa:b4:a9:26:99:cd:d8:c5:4b:c6:3b:
                    38:59:9f:7d:24:17:37:f6:2a:06:fb:8f:61:bd:cd:
                    83:9f:97:e0:a1:69:5c:3f:cb:1c:e6:05:81:63:91:
                    8c:67:fb:d8:f5:d7:8c:1f:25:84:60:cf:cf:f4:ee:
                    5d:60:74:89:22:da:95:60:be:37:b0:33:f7:56:6c:
                    b1:88:e3:8e:36:18:7c:7c:93:a9:bc:56:81:c2:c3:
                    70:f6:68:ef:78:62:d7:2f:73:86:32:30:d3:e1:14:
                    55:39:7b:18:a9:89:ac:c1:c3:3b:7b:9d:f5:d6:b8:
                    78:cb:7f:45:29:cd:3e:37:00:22:e2:4b:c4:2d:7c:
                    2d:01:d5:e0:6e:65:a1:f6:b5:71:f9:58:7b:f6:cd:
                    72:e9:fb:e7:aa:59:1b:22:97:f0:c3:aa:bf:18:61:
                    0c:d1:84:05:4e:6a:02:e1:b6:77:d8:02:67:66:b7:
                    0c:94:44:d8:bc:96:0a:74:83:03:f1:6f:f7:f6:7a:
                    a6:5e:0b:a1:2a:22:61:03:f5:17:d3:04:d1:b6:55:
                    16:15:bc:a4:77:6e:a9:90:f6:e0:36:49:d5:9f:fe:
                    07:7f:f0:34:49:2b:4f:60:bd:af:89:9b:6b:82:40:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1A:27:BE:EB:A0:E9:E6:EB:44:AB:02:94:9B:43:F7:6C:DC:D5:FC
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33372e3137322e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:56:a3:ed:48:1f:07:01:85:b1:82:fd:f8:d7:6e:c1:cb:c0:
         39:d4:bb:a2:72:cf:01:c3:27:bb:b2:5c:45:36:89:d6:1c:a4:
         8b:69:c3:c4:31:eb:e1:bb:c4:e5:e1:8e:00:70:62:2f:3a:d7:
         8a:35:82:9e:2b:89:ce:af:9c:f0:6f:be:c4:e0:8d:71:d7:94:
         a8:c5:35:16:db:8e:52:a9:1b:89:3a:36:91:27:f7:06:ab:7d:
         d1:9d:29:9d:95:91:4e:95:be:be:b0:0f:23:56:ba:64:1a:f2:
         57:18:fa:86:13:45:87:c0:d8:21:8c:b3:e6:b1:7d:ea:85:11:
         bd:73:66:7a:b5:a5:4d:74:b2:2f:b7:2c:c1:14:00:36:ef:d4:
         72:49:d5:47:f9:7d:81:c7:35:fb:7e:4a:d5:14:c4:37:cf:bf:
         59:94:80:42:01:98:15:f7:11:51:06:ff:b6:51:ee:ed:90:e2:
         94:5f:86:09:b7:7c:0b:d8:f0:48:ea:8a:60:92:ce:ea:61:d5:
         84:fd:2d:aa:44:30:5d:e7:93:a3:17:37:08:c4:bc:d6:b1:ce:
         70:45:1c:0a:88:69:68:7e:64:96:a9:ea:bb:83:70:ea:c2:7c:
         fb:46:c0:42:e1:0b:43:fd:e0:4a:70:f5:50:d7:37:41:95:04:
         49:f6:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:51:23 2026 by rpki-client