Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/3130332e3131332e362e302f32332d3233203d3e203539303734.roa
File:                     3130332e3131332e362e302f32332d3233203d3e203539303734.roa (raw, json)
Hash identifier:          KUsSAkShXoN2ZS8RDBR5OOTRYENeDdoP3xwlA+umfuc=
Subject key identifier:   9C:8B:CD:11:6F:AD:7D:05:D3:36:21:94:2B:EE:53:4D:85:08:A4:B5
Certificate issuer:       /CN=185BC8F795FC60E163D641A01BAA510BF953C375
Certificate serial:       593459CFB3BD0068DC32A9C622ED870DF2DCAE4B
Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/3130332e3131332e362e302f32332d3233203d3e203539303734.roa
Signing time:             Tue 08 Sep 2026 04:05:24 +0000
ROA not before:           Tue 08 Sep 2026 04:00:24 +0000
ROA not after:            Tue 07 Sep 2027 04:05:24 +0000
asID:                     59074
IP address blocks:        103.113.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 12:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:34:59:cf:b3:bd:00:68:dc:32:a9:c6:22:ed:87:0d:f2:dc:ae:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375
        Validity
            Not Before: Sep  8 04:00:24 2026 GMT
            Not After : Sep  7 04:05:24 2027 GMT
        Subject: CN=9C8BCD116FAD7D05D33621942BEE534D8508A4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:43:8c:56:3f:fb:c7:98:be:a3:69:6a:c0:
                    fe:17:3d:23:fc:2a:72:bd:a6:ec:53:13:62:b9:7d:
                    35:09:d5:8f:94:f9:66:e8:0d:2d:9b:b7:8d:4a:6f:
                    09:7d:41:d4:70:92:80:60:10:bc:60:e3:03:b2:da:
                    f8:53:87:57:61:be:dc:d9:ab:4e:5b:32:a8:af:ab:
                    87:6c:8f:c7:9f:47:4d:49:e0:80:f6:96:e8:ad:67:
                    2a:80:f5:0a:c8:60:57:d0:ff:7c:9b:ac:07:56:a3:
                    b9:ef:f8:6f:5f:1f:0e:a3:10:cc:f8:b3:1d:60:55:
                    ac:81:19:f4:44:e0:29:c3:31:23:b0:0e:98:c4:48:
                    cf:9a:43:d9:ba:30:cb:ed:06:25:29:58:cc:8b:fa:
                    48:e3:f0:14:73:28:5b:21:4f:17:fb:5d:6d:54:4d:
                    39:be:9e:e8:f6:9b:36:b4:c7:9f:9a:71:e8:44:63:
                    78:bf:d8:47:a2:c5:d6:a2:6a:9b:25:f2:3a:56:11:
                    d3:63:42:04:9a:39:ea:c3:ef:12:10:37:e6:17:e3:
                    60:2e:80:5a:48:d4:b3:42:a3:80:62:95:d4:9d:65:
                    09:92:61:7c:30:7e:45:eb:5d:70:ee:ed:c6:81:cf:
                    16:d0:eb:ea:63:3a:6d:77:b2:d5:07:f1:79:8c:71:
                    a0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8B:CD:11:6F:AD:7D:05:D3:36:21:94:2B:EE:53:4D:85:08:A4:B5
            X509v3 Authority Key Identifier:
                keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/3130332e3131332e362e302f32332d3233203d3e203539303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:83:c8:6d:a6:e4:4b:59:ec:0b:97:15:63:1f:c2:00:8e:6a:
         b3:44:9e:54:e8:38:1a:96:f3:e9:8b:48:fa:7d:b7:7a:57:67:
         15:b9:ee:c9:24:b1:96:95:50:13:d6:32:71:b0:08:8c:c6:ed:
         3f:e9:30:b2:15:10:38:e7:d5:87:36:6d:75:0c:59:e7:d1:67:
         d9:bd:53:69:a3:85:24:4f:9a:08:6e:14:e3:ee:11:d8:96:ff:
         8f:32:0c:c4:cd:0b:77:d0:85:c1:a8:de:ef:3c:72:1e:c7:03:
         d9:4c:d6:61:5d:6c:13:40:6c:8c:ff:df:d4:98:83:af:c2:ad:
         59:23:2f:45:be:d9:70:5d:02:ba:3d:fd:88:a7:b7:c2:52:6a:
         12:4c:1f:8a:8c:5e:ac:35:f2:52:05:85:21:58:ec:41:f9:d4:
         44:56:15:5d:a9:2b:a2:09:ae:a5:7e:c4:90:5b:8c:ae:e3:f5:
         78:f9:ef:42:1b:18:cc:fd:a4:33:35:c9:cc:c2:74:6e:13:a2:
         e4:89:48:be:a6:eb:f0:5d:d0:43:64:9a:05:ff:c3:8a:a5:5c:
         8b:ad:67:03:d9:01:53:6e:79:d0:87:da:31:7d:1f:07:a0:65:
         ab:95:d6:35:4b:5a:a0:a7:27:d0:1d:fa:54:c2:aa:2a:ad:49:
         75:a4:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:46:38 2026 by rpki-client