Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e203535393936.roa
File:                     3130332e3139372e302e302f32332d3234203d3e203535393936.roa (raw, json)
Hash identifier:          H9hsV7HURx454jiYtrgsOddljfZyc/Z0CdeqlfGOt0c=
Subject key identifier:   12:25:BE:9C:63:EB:6C:C0:84:18:1F:95:43:4F:6B:D3:61:94:10:4F
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       2A411C77DF086F5CCD090F306EA36E629FCFBF26
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e203535393936.roa
Signing time:             Thu 07 May 2026 16:03:42 +0000
ROA not before:           Thu 07 May 2026 15:58:42 +0000
ROA not after:            Thu 06 May 2027 16:03:42 +0000
asID:                     55996
IP address blocks:        103.197.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:41:1c:77:df:08:6f:5c:cd:09:0f:30:6e:a3:6e:62:9f:cf:bf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:58:42 2026 GMT
            Not After : May  6 16:03:42 2027 GMT
        Subject: CN=1225BE9C63EB6CC084181F95434F6BD36194104F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:43:4b:8a:cc:9b:6f:70:f3:e9:84:8f:a5:
                    df:7f:5b:02:1c:e3:82:e6:a4:76:8d:11:f2:2b:e9:
                    69:d2:78:9c:0b:67:b6:a8:d8:1c:14:60:90:c9:9d:
                    02:84:2b:f5:e0:82:52:b2:8f:c0:5a:5b:8e:c1:4d:
                    a2:00:8f:5e:bd:95:22:3e:30:7e:81:32:d5:8f:7a:
                    ec:68:96:2f:b1:74:0c:2b:cb:70:17:6c:d3:b9:0a:
                    87:9a:cd:8c:9d:7c:10:05:71:b5:b0:c0:4d:66:6e:
                    e7:4d:56:95:5e:c7:96:2c:53:a4:de:1f:5c:42:e3:
                    18:34:17:2d:95:96:ce:de:c7:8b:ad:1f:1c:2b:bf:
                    5e:60:ba:91:ad:27:a9:05:ed:fd:ed:4e:63:d1:61:
                    44:f9:51:e6:df:b0:d5:dd:6b:38:6a:27:04:13:53:
                    73:1a:c7:a0:62:ec:13:c6:a8:26:75:ce:63:6d:60:
                    4a:2b:55:09:0b:7c:5d:e7:55:15:35:a1:ab:e8:2b:
                    10:a3:85:de:0b:4b:1f:e7:46:b3:18:cf:7f:04:8a:
                    a1:31:ee:fc:fa:a0:2c:cf:42:53:60:e0:6f:bf:55:
                    d5:78:94:03:4b:f1:43:d0:c4:6b:6c:df:ae:2d:30:
                    0f:21:22:85:1a:36:14:2f:ff:3b:95:8d:68:2b:52:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:BE:9C:63:EB:6C:C0:84:18:1F:95:43:4F:6B:D3:61:94:10:4F
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e203535393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:11:5a:cb:04:64:8d:1c:5c:e1:a9:56:49:be:81:26:a4:
         ba:c6:21:c2:96:4c:1a:d8:71:21:73:3c:f3:25:b1:c2:ee:c8:
         fa:f1:7b:45:94:c4:a4:8a:3a:bf:2b:31:7e:e4:3c:25:12:f8:
         d6:16:b8:c8:01:93:d7:95:61:a5:d6:9e:ee:29:f8:75:ae:bb:
         4a:c4:c7:ac:77:ec:4c:68:b2:9b:40:fa:7f:90:15:0d:aa:dd:
         d0:44:54:1a:cc:13:3c:bf:ce:04:19:bf:4f:de:c3:0c:78:a3:
         01:b2:98:4a:cc:5c:bb:6a:e0:32:98:06:9c:84:75:22:0e:60:
         b9:b6:75:f5:63:d3:74:71:9a:ae:07:7d:86:e7:98:bc:a8:6e:
         72:47:9f:85:82:86:48:d8:7b:a6:2c:00:52:b3:d9:fc:78:f5:
         78:d2:c8:41:99:22:86:0b:71:14:1d:1d:88:59:c8:9d:f9:35:
         ba:20:c3:2f:4c:df:c4:4a:43:de:f1:c8:1f:c7:3f:09:de:73:
         9a:29:0e:c8:6f:63:19:9d:bd:5f:61:21:f6:f7:e9:18:eb:33:
         2b:78:d7:07:f1:80:6c:54:d2:ca:a8:09:8a:74:82:f8:21:58:
         90:94:5d:93:bb:bf:6b:61:be:76:cf:e6:c3:98:cf:07:ae:0f:
         7e:70:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:30 2026 by rpki-client