Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa
File:                     3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa (raw, json)
Hash identifier:          nLGhDHJd/7rK44szUZ5Kzu32mo/lJeTWCIKFN5gT67c=
Subject key identifier:   1B:D8:31:E0:42:EE:A6:09:80:95:4D:31:C0:0F:E9:81:44:99:CF:0F
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       19EBFD00CD60464A2897F8E655ACC0DAA81BA84A
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa
Signing time:             Mon 11 May 2026 02:50:14 +0000
ROA not before:           Mon 11 May 2026 02:45:14 +0000
ROA not after:            Mon 10 May 2027 02:50:14 +0000
asID:                     58854
IP address blocks:        103.236.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:eb:fd:00:cd:60:46:4a:28:97:f8:e6:55:ac:c0:da:a8:1b:a8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 11 02:45:14 2026 GMT
            Not After : May 10 02:50:14 2027 GMT
        Subject: CN=1BD831E042EEA60980954D31C00FE9814499CF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:59:18:1a:52:df:e4:db:6c:f2:07:c2:85:
                    cb:01:b0:fe:d5:dd:43:37:96:23:ce:22:e3:7b:0b:
                    73:78:6d:ac:1d:c6:18:1f:2f:5e:77:1a:f9:ac:24:
                    3d:be:94:76:30:12:32:15:1d:3b:6c:3b:ad:a6:b5:
                    82:8a:61:8f:8d:32:d8:ff:52:c8:24:21:53:29:ca:
                    b3:e9:9e:35:1e:3f:96:26:5d:c1:65:b2:3e:b4:39:
                    b5:33:e7:d7:29:bc:73:1d:f4:68:f7:48:bb:d7:8b:
                    7c:b5:47:d6:c4:3b:7e:23:a1:6e:fa:43:a2:22:2d:
                    c1:eb:46:01:42:ae:76:3a:36:79:d4:f3:6c:b9:f9:
                    5e:8c:9e:76:37:0c:34:2d:79:0f:1d:9b:8d:ed:8f:
                    d5:c4:8e:ed:c0:50:51:e2:41:cb:a6:18:eb:4c:1f:
                    4b:7e:e6:8e:7d:53:3d:9f:d6:d5:cd:b3:3c:42:0e:
                    8f:e1:f8:18:f4:a0:82:cc:c1:ae:b6:48:25:68:1a:
                    72:93:7c:0e:82:a1:0d:b7:cc:2d:a8:18:47:df:33:
                    2a:f0:02:61:62:03:00:5f:e7:e1:02:31:e2:09:c4:
                    30:fb:2c:8c:94:df:aa:88:cf:68:6a:67:8a:ac:92:
                    03:da:d2:4b:e5:48:d3:48:02:99:48:93:90:75:16:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D8:31:E0:42:EE:A6:09:80:95:4D:31:C0:0F:E9:81:44:99:CF:0F
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e3233362e3235322e302f32322d3232203d3e203538383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:c4:fc:e8:c5:db:48:39:57:09:a8:4a:42:74:e5:10:91:
         cd:55:4d:04:c1:9f:62:e2:e2:9a:09:5a:41:07:90:9d:fb:86:
         e5:eb:5d:8d:0d:6e:e6:b0:b4:97:3e:fe:44:2a:06:f9:08:68:
         d6:0c:1f:32:09:cd:50:7f:33:e5:1a:da:88:42:11:da:a1:d3:
         66:0c:3e:c5:c5:9b:7a:38:08:18:a8:77:7d:30:69:f4:e9:09:
         d6:d0:f9:07:7f:9b:f5:fe:9e:e9:49:66:aa:94:bd:88:e3:31:
         4d:78:f2:6e:47:ae:54:55:9e:f4:6b:49:87:da:ac:8c:f5:8c:
         e0:b3:ab:16:8a:b8:2a:68:35:79:39:0a:28:a1:c8:88:6e:b8:
         e9:28:7a:d5:95:96:e0:c5:05:7d:4c:0b:99:0a:f6:20:99:26:
         e7:83:10:2a:21:42:f1:40:bf:0c:b2:da:22:ac:a1:f9:5b:0a:
         a9:5a:bb:34:fe:c9:4a:f8:4f:b0:0e:d0:12:c4:32:bc:af:a2:
         dc:2f:47:bc:90:9b:d0:c6:d7:ba:92:e0:0e:9a:d8:59:2b:6a:
         84:4b:57:87:ac:da:1a:30:1f:eb:a6:0a:71:7e:1c:1a:2c:3b:
         44:ad:1b:8f:00:69:60:55:c0:f6:95:57:7a:26:34:1a:e6:c1:
         0d:6d:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:14 2026 by rpki-client