Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34372e35302e302f32332d3233203d3e2034383038.roa
File:                     3130332e34372e35302e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          5oyY01hEuqvle1ETlN/iZfm3VvugkwkDCcQO5FZtFZk=
Subject key identifier:   FF:B8:69:78:4F:B3:80:54:DB:49:4F:4D:6F:10:50:E7:79:46:1E:D1
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       52573A63DB9C251A116C0008096E1403DCFF14FA
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34372e35302e302f32332d3233203d3e2034383038.roa
Signing time:             Tue 26 May 2026 09:24:01 +0000
ROA not before:           Tue 26 May 2026 09:19:01 +0000
ROA not after:            Tue 25 May 2027 09:24:01 +0000
asID:                     4808
IP address blocks:        103.47.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:3a:63:db:9c:25:1a:11:6c:00:08:09:6e:14:03:dc:ff:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: May 26 09:19:01 2026 GMT
            Not After : May 25 09:24:01 2027 GMT
        Subject: CN=FFB869784FB38054DB494F4D6F1050E779461ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:33:1f:1f:b1:13:a2:b7:7e:51:79:53:12:
                    3a:48:be:eb:a7:5d:5d:5c:99:48:e0:e2:4f:47:1a:
                    64:40:84:8e:1c:54:09:c8:cd:0f:cf:2f:b8:27:67:
                    c3:49:e7:65:6d:3d:a5:0d:9f:85:42:e0:09:59:ca:
                    21:aa:f4:0d:e8:07:47:48:0a:0d:4d:2d:2a:3c:ff:
                    fd:cc:fd:99:cc:eb:e8:60:60:14:12:e7:bd:b5:4e:
                    b3:8c:26:73:2a:84:69:85:04:6f:f5:e5:79:70:c8:
                    a0:ed:7d:19:38:5e:1b:a6:9e:54:78:4f:32:cc:af:
                    84:78:a3:3b:69:0d:80:1d:8a:9d:02:11:b3:33:6e:
                    e4:1a:5e:b7:24:67:c9:35:c6:53:63:f9:5b:cc:28:
                    a0:98:ab:54:66:2a:a0:79:c7:29:d4:b3:39:9a:01:
                    45:3b:99:04:94:c3:72:57:ed:f9:8c:a4:f3:d7:2c:
                    ac:54:b2:dc:32:48:26:59:58:f9:26:27:1a:f0:88:
                    71:fd:2b:e4:e0:c1:f0:68:9b:e1:c6:b2:27:78:d4:
                    b3:56:bd:23:d2:bf:cc:a0:9d:ea:b9:44:0d:28:fd:
                    c8:16:af:d2:ae:a9:fd:07:2e:c6:b8:49:30:9b:53:
                    ad:c9:10:76:6c:46:f5:b3:ba:7a:1f:da:03:58:76:
                    a4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:69:78:4F:B3:80:54:DB:49:4F:4D:6F:10:50:E7:79:46:1E:D1
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e34372e35302e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:c9:76:1d:57:12:83:c4:d1:ab:7d:e6:32:7b:04:82:c0:
         84:22:69:c8:9e:da:da:d1:b9:21:93:8d:6e:51:60:71:69:41:
         f3:67:13:bc:70:2f:cc:cc:d3:ad:61:57:0d:4a:e6:a1:1c:54:
         f9:6f:fb:78:66:50:89:fc:1a:06:0c:c9:77:68:65:25:dc:fc:
         21:e6:0c:7a:e3:e5:57:ff:99:e4:0d:45:e8:89:cd:69:2f:af:
         c7:25:9e:78:cd:03:5c:ae:f1:5c:a7:3a:c6:9f:1a:80:77:55:
         1a:7e:5e:86:da:b9:cf:f9:12:18:c1:ad:f3:a8:98:42:5f:30:
         90:69:98:8c:58:a3:df:8a:3f:a7:dd:e7:e8:3f:23:13:b4:94:
         0d:b3:b8:cb:ac:90:43:b6:06:b3:d6:19:b2:2e:3f:16:67:2b:
         be:94:0f:8f:b0:b4:10:bc:0e:23:69:6f:42:34:44:e4:f3:29:
         73:99:74:32:5a:c4:10:fe:e0:a1:70:b3:43:71:a5:bf:64:8b:
         63:e2:39:44:f3:5c:0f:3b:4b:05:57:b9:be:27:3b:29:d0:06:
         27:21:56:d7:1b:1e:4c:65:c1:cb:b9:78:de:4d:4e:e6:b6:b4:
         37:cf:b8:d5:73:a9:65:29:a7:a9:67:d9:68:1d:a6:32:18:37:
         83:5b:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:20 2026 by rpki-client