Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32342d3234203d3e20313333303333.roa
File:                     3130332e31392e3233322e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier:          sdEyXU8G2Wn05vGNN7pOBxbRB3aF2InGqjrMDQw6Hbs=
Subject key identifier:   60:81:B2:9A:FB:D8:FF:DF:88:4D:7C:0D:20:AF:1E:88:28:84:4B:67
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       03B74FED625B0874F7EBD01551CEF8A4D5FCF9F3
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32342d3234203d3e20313333303333.roa
Signing time:             Thu 23 Apr 2026 01:43:43 +0000
ROA not before:           Thu 23 Apr 2026 01:38:43 +0000
ROA not after:            Thu 22 Apr 2027 01:43:43 +0000
asID:                     133033
IP address blocks:        103.19.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b7:4f:ed:62:5b:08:74:f7:eb:d0:15:51:ce:f8:a4:d5:fc:f9:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr 23 01:38:43 2026 GMT
            Not After : Apr 22 01:43:43 2027 GMT
        Subject: CN=6081B29AFBD8FFDF884D7C0D20AF1E8828844B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:a0:78:56:0d:90:52:83:0e:66:a0:85:46:
                    1f:dd:c7:24:f6:f6:e7:e9:82:df:a2:57:7d:18:a8:
                    92:91:67:06:0b:40:2a:58:c1:a4:d3:39:6c:fc:97:
                    ce:2d:37:71:d4:4a:3a:1c:0a:7a:a8:75:ed:85:62:
                    d3:9b:af:b7:7b:34:4b:34:73:d0:7d:76:d5:20:d8:
                    ef:a9:49:e6:fb:49:e1:95:9e:68:1a:06:a5:0f:81:
                    55:af:53:9d:a3:c1:52:f7:19:67:54:31:64:b9:fa:
                    f7:c2:85:9c:4f:86:b4:c4:8b:2f:8e:71:3f:60:1b:
                    43:b6:45:cb:a2:5c:90:27:56:1c:d7:17:32:00:49:
                    ca:de:7c:16:50:e3:db:7c:d4:43:79:ba:14:c4:e3:
                    63:7a:49:61:51:02:26:26:1e:57:2e:75:99:f5:e7:
                    51:41:5f:1d:19:a6:b8:52:a9:69:32:83:19:33:7f:
                    92:6b:a9:ba:f4:d5:78:69:a0:28:82:46:ba:a1:23:
                    eb:e0:48:99:0b:e3:a6:0c:a3:c3:61:78:83:b3:92:
                    14:a2:8c:5e:02:cc:1b:b4:6b:22:e4:30:71:e0:d8:
                    7a:6c:d8:4b:d0:c3:35:74:fb:11:ab:df:e7:89:c4:
                    43:07:aa:79:4c:4b:7d:d4:af:85:02:33:af:de:df:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:81:B2:9A:FB:D8:FF:DF:88:4D:7C:0D:20:AF:1E:88:28:84:4B:67
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233322e302f32342d3234203d3e20313333303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:27:c3:ad:80:12:b6:e8:d1:6f:39:36:35:a5:c0:32:0a:47:
         12:53:b4:37:cd:2b:50:69:2a:19:49:cb:cd:2e:d2:30:68:29:
         55:a9:0c:75:9c:67:0d:d9:d5:2e:04:11:d7:ab:24:cc:2e:22:
         34:34:a7:0f:e9:f4:c3:ab:49:f8:85:c6:66:e0:e5:b4:7a:37:
         ac:06:95:2b:91:86:db:89:3e:a1:e5:95:3a:4e:eb:3a:d5:bc:
         3f:ca:ae:d4:33:16:a4:4e:66:30:65:75:fb:ed:3a:bd:81:f4:
         cb:b9:f5:ad:9b:99:64:ef:1c:42:06:b6:2d:c8:21:c2:01:00:
         9a:62:55:eb:41:55:eb:af:96:99:4f:4f:18:f5:2e:9d:83:39:
         10:70:af:72:ef:87:43:f4:8a:b8:e5:93:64:68:a7:dc:7e:98:
         bf:ec:ed:e8:2e:93:ea:ac:3d:99:17:bb:14:40:f9:92:ad:62:
         18:f4:a3:35:12:c8:a0:98:1f:9e:4b:21:b6:f9:56:6e:8a:af:
         75:1d:c5:f0:80:ca:10:0b:6c:f6:ba:d7:c1:f1:20:cc:b1:b9:
         3d:e8:e7:be:00:c8:32:1a:09:71:6b:96:6c:48:f1:d4:28:7b:
         10:c5:6d:12:cc:df:c8:5a:26:86:78:51:f5:58:ef:3a:20:00:
         d1:be:e4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:26:57 2026 by rpki-client