Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34302e3137342e302f32332d3234203d3e203535393936.roa
File:                     3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (raw, json)
Hash identifier:          J1BtbywEK2jVbGM+X/gcyGPdNErL2cdbOfI+KpNvCc4=
Subject key identifier:   E1:2C:2F:3E:BC:8F:E8:DB:F7:92:CE:66:EE:21:D8:DE:48:8F:67:6A
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       479851B6F640BF4374FDBE9BF81F9AAB94662D53
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34302e3137342e302f32332d3234203d3e203535393936.roa
Signing time:             Thu 07 May 2026 16:06:42 +0000
ROA not before:           Thu 07 May 2026 16:01:42 +0000
ROA not after:            Thu 06 May 2027 16:06:42 +0000
asID:                     55996
IP address blocks:        103.40.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:51:b6:f6:40:bf:43:74:fd:be:9b:f8:1f:9a:ab:94:66:2d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 16:01:42 2026 GMT
            Not After : May  6 16:06:42 2027 GMT
        Subject: CN=E12C2F3EBC8FE8DBF792CE66EE21D8DE488F676A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:8c:f7:7e:11:6b:74:ec:3c:36:7c:3b:cd:
                    37:ec:0a:be:a9:b2:a9:e0:b8:a3:2f:d9:56:7e:93:
                    63:2f:2d:e6:10:6a:18:e2:07:c3:79:e3:fa:6b:a3:
                    33:3e:f5:0c:aa:bc:d0:ed:6a:3a:41:bb:e0:11:ca:
                    c1:0b:51:96:ce:1f:7c:d3:a9:2b:07:cb:7f:4a:04:
                    41:d4:39:3d:ee:7b:4b:fe:75:30:cd:06:bd:63:4b:
                    42:47:e8:09:5b:61:21:d8:dd:13:c4:4f:4b:6e:bd:
                    ca:3b:46:5d:3f:98:0c:a5:84:8f:b1:96:98:15:31:
                    e9:44:f1:8d:9b:4c:6f:8d:28:dd:05:28:86:66:fc:
                    f3:4f:df:b1:28:47:da:25:b2:7b:db:cf:d2:2b:08:
                    5f:4f:ac:b2:f3:c1:3c:ca:b2:ee:6c:64:84:52:b0:
                    7b:3a:f9:45:e0:2e:2d:5c:91:a3:9e:8f:01:89:c8:
                    e5:6c:a4:3d:fa:e3:68:4e:d6:34:34:21:b6:55:b9:
                    37:0f:d6:ee:82:7f:54:42:f8:a7:5b:98:0a:ad:af:
                    ab:a2:d4:19:52:04:b8:d1:a2:32:d5:cd:4a:79:f0:
                    fc:59:f4:d0:97:a4:28:91:c7:1f:fb:dd:ec:94:0c:
                    8d:4e:14:c0:13:e7:29:ea:4a:bb:a0:a1:4f:da:92:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2C:2F:3E:BC:8F:E8:DB:F7:92:CE:66:EE:21:D8:DE:48:8F:67:6A
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34302e3137342e302f32332d3234203d3e203535393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:81:d5:44:7d:14:7f:7b:72:da:5e:96:2b:8d:ac:ce:8c:85:
         f9:e1:f3:6f:b0:03:1c:80:e7:54:d2:ec:33:d1:82:9b:1e:f4:
         7f:37:a1:61:61:c9:be:32:46:d0:97:1d:d7:84:50:e9:20:94:
         8f:7c:f2:53:37:f5:51:53:02:b0:d0:0b:82:3e:1c:53:56:95:
         b0:ad:82:08:25:96:9b:41:90:a6:c3:ea:a0:75:10:6e:ae:c0:
         74:62:2c:51:2c:dd:cc:f3:7c:02:b9:04:45:f9:91:9b:15:07:
         8e:8c:45:bb:98:1e:90:08:48:4f:e8:02:34:f0:d0:99:f3:38:
         b9:99:2e:f5:93:d4:93:28:c4:37:ef:3b:53:e0:bf:f2:10:45:
         55:52:5f:b2:6f:fa:c3:40:9d:31:7a:9c:0d:6b:a2:0c:d7:5c:
         a1:60:33:8a:8d:e7:87:95:03:40:02:b2:3c:fc:3b:a6:4e:d9:
         9e:16:82:76:34:df:7e:7e:de:03:6c:70:cc:54:1b:f7:d1:2a:
         ad:7f:d3:79:2a:76:ab:f4:7d:81:08:d0:9c:5e:fd:aa:1d:1e:
         f7:fd:ce:c3:eb:43:ee:e1:3e:91:05:f3:32:b8:57:64:d0:3f:
         b4:bf:3a:aa:c5:a4:56:a4:fc:8a:81:6c:9a:38:04:ae:8a:08:
         0c:26:44:22
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUR5hRtvZAv0N0/b6b+B+aq5RmLVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA1MDcxNjAxNDJaFw0yNzA1MDYxNjA2NDJaMDMxMTAvBgNV
BAMTKEUxMkMyRjNFQkM4RkU4REJGNzkyQ0U2NkVFMjFEOERFNDg4RjY3NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrIz3fhFrdOw8Nnw7zTfsCr6p
sqnguKMv2VZ+k2MvLeYQahjiB8N54/prozM+9QyqvNDtajpBu+ARysELUZbOH3zT
qSsHy39KBEHUOT3ue0v+dTDNBr1jS0JH6AlbYSHY3RPET0tuvco7Rl0/mAylhI+x
lpgVMelE8Y2bTG+NKN0FKIZm/PNP37EoR9olsnvbz9IrCF9PrLLzwTzKsu5sZIRS
sHs6+UXgLi1ckaOejwGJyOVspD3642hO1jQ0IbZVuTcP1u6Cf1RC+KdbmAqtr6ui
1BlSBLjRojLVzUp58PxZ9NCXpCiRxx/73eyUDI1OFMAT5ynqSrugoU/akvQRAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU4SwvPryP6Nv3ks5m7iHY3kiPZ2owHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzMxMzAzMzJlMzQz
MDJlMzEzNzM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWcorjANBgkqhkiG9w0BAQsFAAOCAQEAU4HVRH0Uf3ty2l6WK42szoyF
+eHzb7ADHIDnVNLsM9GCmx70fzehYWHJvjJG0Jcd14RQ6SCUj3zyUzf1UVMCsNAL
gj4cU1aVsK2CCCWWm0GQpsPqoHUQbq7AdGIsUSzdzPN8ArkERfmRmxUHjoxFu5ge
kAhIT+gCNPDQmfM4uZku9ZPUkyjEN+87U+C/8hBFVVJfsm/6w0CdMXqcDWuiDNdc
oWAzio3nh5UDQAKyPPw7pk7ZnhaCdjTffn7eA2xwzFQb99EqrX/TeSp2q/R9gQjQ
nF79qh0e9/3Ow+tD7uE+kQXzMrhXZNA/tL86qsWkVqT8ioFsmjgErooIDCZEIg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:11 2026 by rpki-client