Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa
File:                     3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (raw, json)
Hash identifier:          F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=
Subject key identifier:   D9:D1:AF:32:B2:FB:5D:53:EA:01:D2:D4:9B:2F:BD:C4:50:DF:7D:1F
Certificate issuer:       /CN=70B456FF624C0476CE9E190A89C23B97291210A4
Certificate serial:       5D99DA070C2E84C3792F6BA002A41FF7970A4F32
Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa
Signing time:             Fri 29 May 2026 03:37:25 +0000
ROA not before:           Fri 29 May 2026 03:32:25 +0000
ROA not after:            Fri 28 May 2027 03:37:25 +0000
asID:                     138195
IP address blocks:        103.138.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:99:da:07:0c:2e:84:c3:79:2f:6b:a0:02:a4:1f:f7:97:0a:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4
        Validity
            Not Before: May 29 03:32:25 2026 GMT
            Not After : May 28 03:37:25 2027 GMT
        Subject: CN=D9D1AF32B2FB5D53EA01D2D49B2FBDC450DF7D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:12:cc:35:20:2d:e7:33:5d:7f:b3:fb:c1:
                    53:17:0a:88:94:c8:ff:65:35:ab:90:0c:d5:4c:1f:
                    fa:7e:64:fe:16:f6:9f:98:79:87:ab:c5:59:dc:3b:
                    cf:3c:1a:d6:8e:df:ad:9f:ca:23:14:f2:5f:bf:6b:
                    a2:19:e8:bc:6d:5b:88:d7:cb:6d:e5:9f:18:d3:63:
                    1d:0d:11:74:a6:91:e0:b4:bf:49:96:5c:57:8f:4e:
                    7e:b4:ff:d9:c6:92:90:ed:5a:f0:6f:a5:44:9a:62:
                    55:98:14:12:7b:9f:f1:e5:aa:45:96:70:08:5d:2d:
                    80:3f:c8:a3:28:24:e7:72:a2:cd:18:dd:50:dc:52:
                    a4:3e:f9:6f:23:4e:f4:b1:6a:bd:c8:75:a0:c9:62:
                    a3:9a:ca:04:df:b9:c0:89:c4:a5:1c:83:71:96:ac:
                    e3:40:63:a6:da:48:8c:24:bc:bc:e7:2d:3a:0f:ab:
                    48:02:62:94:70:fd:f1:c6:16:86:d5:23:b5:e3:a5:
                    04:a5:5e:29:2e:b1:13:f6:2d:a3:25:64:9b:39:6b:
                    b5:4b:e5:cc:9b:d0:bb:b9:be:7f:81:37:c8:c7:dd:
                    22:c4:39:46:c8:9d:a7:bc:9e:7f:73:b3:5c:77:e6:
                    47:a6:ba:42:96:1a:dc:12:0d:26:26:1d:da:d7:48:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:AF:32:B2:FB:5D:53:EA:01:D2:D4:9B:2F:BD:C4:50:DF:7D:1F
            X509v3 Authority Key Identifier:
                keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:e0:17:8e:59:5d:c2:b9:da:9f:94:c7:19:e9:40:37:4c:
         cc:ae:d4:dd:c8:87:75:ad:69:0b:8e:20:fd:3c:20:4a:04:9b:
         8d:c6:60:57:af:b1:76:35:de:7d:98:99:37:f9:75:a4:7e:d3:
         7e:a1:97:b6:ea:94:54:c8:25:d7:69:9f:63:a1:c6:01:d3:37:
         f6:7f:c3:f9:66:b5:0b:bb:9a:0a:4e:9f:5e:e6:b4:2f:fc:2e:
         ea:04:90:73:9d:14:44:b1:49:fa:33:2d:03:9b:75:cf:31:78:
         36:05:45:c8:a5:26:22:f1:4d:83:d0:f5:9e:d5:08:c1:cd:39:
         44:52:b5:81:fe:15:da:64:52:16:29:7e:b3:11:2e:85:d0:84:
         0b:70:f1:0d:29:d0:0d:a1:96:be:50:0b:49:d0:e3:8c:dc:18:
         ca:cd:d3:a3:b0:72:29:2b:f5:06:f8:7b:63:80:39:b6:09:80:
         5e:21:97:02:bb:ea:ba:28:36:e6:3f:0f:92:19:bd:4f:37:ec:
         bf:e8:df:5a:53:fd:a6:2c:d9:8c:bd:a5:9e:7b:65:82:4f:17:
         f5:3f:a4:e4:75:2c:8a:fe:60:1c:ac:e4:f5:9b:37:87:7f:5c:
         8d:86:63:db:29:bc:aa:1b:67:b5:b3:1f:c0:23:de:42:02:1f:
         22:e7:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:55:22 2026 by rpki-client