Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa
File:                     3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (raw, json)
Hash identifier:          F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=
Subject key identifier:   47:1C:50:45:97:BC:BF:CD:75:24:A3:BC:52:D6:00:5E:FA:F4:C7:C1
Certificate issuer:       /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
Certificate serial:       3C1F7DCC181085CBAE5ACD1EDDEA0FFA2702F4C1
Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa
Signing time:             Thu 21 May 2026 02:44:39 +0000
ROA not before:           Thu 21 May 2026 02:39:39 +0000
ROA not after:            Thu 20 May 2027 02:44:39 +0000
asID:                     59016
IP address blocks:        103.237.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1f:7d:cc:18:10:85:cb:ae:5a:cd:1e:dd:ea:0f:fa:27:02:f4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3
        Validity
            Not Before: May 21 02:39:39 2026 GMT
            Not After : May 20 02:44:39 2027 GMT
        Subject: CN=471C504597BCBFCD7524A3BC52D6005EFAF4C7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:e9:b7:b6:a9:82:c5:4f:6a:06:f7:19:c4:
                    03:0a:89:19:0e:6a:99:62:9b:8f:01:00:76:d3:54:
                    d7:13:af:d7:76:29:50:22:a5:05:45:97:5a:e9:0f:
                    00:a9:45:d4:c8:39:3f:bd:7c:20:dd:be:77:eb:2e:
                    00:6b:1b:e6:fc:1a:96:1b:43:15:92:4f:49:48:3c:
                    bc:30:92:c5:ff:b4:4b:74:08:bc:ae:54:27:de:d0:
                    35:6d:43:5b:ca:3d:25:8e:02:06:cf:47:d5:98:c3:
                    bd:4a:f8:c1:5f:36:f6:bf:a8:0a:d3:19:28:df:23:
                    dd:68:61:0c:1a:69:a4:f9:12:95:3e:3f:8d:7d:a8:
                    5f:6a:a9:13:b3:f2:11:42:48:79:da:a7:07:b7:69:
                    d2:dc:59:d4:d8:d3:c2:0d:07:c4:63:9d:e4:1a:2e:
                    24:18:0f:8b:9c:01:38:06:c6:ea:96:ca:bd:a7:04:
                    40:bb:1e:02:e8:ab:4d:40:d3:54:64:3b:c4:b0:70:
                    94:3b:1d:90:03:a5:0f:c3:d7:dd:58:eb:ba:65:43:
                    35:e3:93:52:62:30:8a:1a:ae:93:d2:98:e4:e2:c7:
                    2c:a5:db:0b:9d:c5:16:63:5f:96:c6:09:eb:4f:94:
                    ab:63:ea:3e:09:15:8c:0a:a3:a4:0b:0e:c3:c3:bf:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:50:45:97:BC:BF:CD:75:24:A3:BC:52:D6:00:5E:FA:F4:C7:C1
            X509v3 Authority Key Identifier:
                keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:a2:0c:a7:19:7e:3f:b5:dc:04:9d:22:fe:cb:09:a4:79:
         72:71:bc:e2:f7:10:cf:e6:6c:a3:0f:bd:20:22:02:e3:ab:7d:
         10:f9:ca:c1:ea:51:56:c1:63:23:98:5b:69:e9:ab:ce:6e:aa:
         b3:33:26:e0:02:cf:a8:31:a0:59:71:a7:ba:32:a3:6f:3a:8d:
         e4:d2:ac:9a:88:28:69:3c:2d:94:4a:cb:39:47:1f:53:92:52:
         c6:d1:5a:64:3d:5b:76:85:5e:d0:24:82:57:37:86:c5:b6:a6:
         05:35:42:f0:50:66:4d:b3:7f:ce:39:d8:50:40:bb:06:5c:a6:
         f9:84:6d:6c:43:89:19:43:34:1a:29:96:23:6a:76:ee:71:53:
         72:ad:57:f7:b4:8c:e4:83:76:95:51:e6:60:30:e4:84:52:e9:
         e6:43:1b:86:df:18:3a:bb:d2:22:fa:27:80:9b:fb:b1:77:63:
         08:52:95:6c:6a:97:d9:2a:6e:d8:52:83:76:19:0e:ba:69:74:
         29:e8:0e:f9:79:73:16:55:d7:0b:dc:f4:de:c2:7c:40:54:9c:
         00:65:b9:32:aa:4b:2f:87:c4:08:5b:e2:da:04:fb:54:e2:47:
         1c:f1:e1:73:a7:c3:ca:cb:ec:24:fc:06:ac:21:da:b8:ab:f8:
         49:7a:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:14 2026 by rpki-client