Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32332d3233203d3e203536303436.roa
File:                     3130332e31392e3233322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          DL2uPmFBxcT41iRqE52ZNOPLqNuLpUzMOPJ+L/6j6+8=
Subject key identifier:   A5:00:53:AE:F2:F3:74:77:55:A3:A1:C3:5D:5E:8D:75:9F:55:D5:DB
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       47F18E957F01F212AACF34CAFB5D0625782CF4E4
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 02:47:00 +0000
ROA not before:           Wed 23 Sep 2026 02:42:00 +0000
ROA not after:            Wed 22 Sep 2027 02:47:00 +0000
asID:                     56046
IP address blocks:        103.19.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f1:8e:95:7f:01:f2:12:aa:cf:34:ca:fb:5d:06:25:78:2c:f4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 02:42:00 2026 GMT
            Not After : Sep 22 02:47:00 2027 GMT
        Subject: CN=A50053AEF2F3747755A3A1C35D5E8D759F55D5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:82:fd:b7:8c:8b:fc:84:44:4f:02:df:2a:
                    73:65:72:7f:f6:6d:d0:00:8a:04:69:51:30:a4:1d:
                    e6:d6:bf:9f:76:52:a8:79:8c:b2:80:8f:2f:7b:ff:
                    94:af:63:45:6e:f3:bc:a6:a2:73:42:1e:ee:e4:09:
                    6c:72:ec:a2:27:3c:14:72:da:92:23:31:8d:e9:4e:
                    0e:02:03:47:c5:8d:c8:80:b8:40:0b:89:34:8d:0c:
                    7a:d5:f1:0a:92:5f:0b:f8:60:69:67:2d:0e:ad:e8:
                    2a:f5:16:93:54:72:e2:4c:e0:67:1f:bb:fb:87:a7:
                    9b:f5:6d:00:bb:18:25:cc:47:cd:f4:83:7d:55:de:
                    6a:bc:68:09:8e:17:df:ff:92:ca:fb:0a:1c:c8:50:
                    b2:31:1a:c8:68:5e:ab:80:7e:c1:e7:b4:ca:fb:5e:
                    a2:ec:46:ed:69:3a:01:18:17:03:c8:d4:50:63:b7:
                    19:b5:e3:7e:a4:22:99:48:93:17:83:8d:0e:5f:15:
                    14:50:af:36:e0:8c:ba:13:6e:6f:95:be:ce:a0:8f:
                    b7:8c:fc:56:f8:27:5d:ae:e3:2e:81:8b:a2:d0:92:
                    e8:53:8e:40:2e:9f:35:92:c6:cc:0a:fc:e7:08:f9:
                    8a:3e:1d:77:40:19:f9:99:e6:d8:9c:eb:0b:5d:26:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:53:AE:F2:F3:74:77:55:A3:A1:C3:5D:5E:8D:75:9F:55:D5:DB
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:2b:b3:c5:5a:7d:7c:f1:9f:32:7a:35:cf:fd:54:0f:13:
         1e:b7:32:6e:57:b6:63:84:c9:0c:5f:4a:49:35:e8:80:59:43:
         15:10:38:73:30:54:e2:be:38:0b:bc:38:f1:52:fe:53:3e:fc:
         aa:dd:d0:1b:ef:1c:8d:f9:84:d5:54:d7:c7:4f:24:5c:43:4a:
         8c:14:f2:70:fa:1a:4a:30:2a:36:64:5e:65:1e:23:c0:f2:a1:
         e4:0d:2b:e9:2b:cb:e4:20:1c:8e:af:27:f3:a9:57:fb:16:ed:
         4f:84:b0:54:40:11:7f:68:a3:1e:52:ad:f6:ef:b2:d8:2d:5a:
         d9:ca:fe:3c:64:67:77:a4:6b:3d:1e:0e:92:ce:32:ff:d0:9b:
         6e:d7:ea:1d:9b:ad:63:1f:23:32:69:d1:79:f0:53:a4:c4:ba:
         03:84:ba:d2:98:25:e8:48:9d:f4:41:9c:75:de:44:dc:70:96:
         92:15:91:a0:2c:15:91:96:01:04:8a:d3:8e:58:06:b6:47:de:
         ab:a6:9d:ad:1d:60:bd:ff:4e:82:9b:1b:0f:5c:04:7d:b8:32:
         39:01:d4:b2:bb:50:4b:06:99:5a:78:0a:a6:28:d2:7f:50:b4:
         cf:34:51:49:36:b2:a2:b1:58:ab:7d:bf:6e:63:39:92:61:fd:
         51:2e:12:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:01:06 2026 by rpki-client