Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233342e302f32332d3233203d3e203536303436.roa
File:                     3130332e31392e3233342e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          kSWE4PuTvivix74x8spNSgq8F3KokAWi2G+Zcv3nnao=
Subject key identifier:   5D:95:18:20:66:08:16:4D:30:C4:73:63:6C:4B:B9:7A:97:16:2E:7F
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       2BA0CD2595966D7E1B77B2875EC5F170A9CA904B
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233342e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 02:47:00 +0000
ROA not before:           Wed 23 Sep 2026 02:42:00 +0000
ROA not after:            Wed 22 Sep 2027 02:47:00 +0000
asID:                     56046
IP address blocks:        103.19.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 00:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:cd:25:95:96:6d:7e:1b:77:b2:87:5e:c5:f1:70:a9:ca:90:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 02:42:00 2026 GMT
            Not After : Sep 22 02:47:00 2027 GMT
        Subject: CN=5D9518206608164D30C473636C4BB97A97162E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:28:90:8c:33:2e:58:86:bd:f9:cc:11:dd:
                    63:8d:cb:ae:60:4d:16:ae:5f:d9:af:17:52:41:4f:
                    6f:37:72:bc:0f:a2:22:39:f1:03:a5:a6:ab:53:46:
                    6c:55:92:b8:df:19:52:2f:3b:9c:5f:12:f5:3e:a2:
                    73:cd:9e:6d:b6:fc:5a:72:3b:d6:86:8d:92:7a:3a:
                    64:8e:70:13:41:7e:c0:ea:0c:5a:32:5b:79:0f:ed:
                    a8:08:22:be:84:37:b2:6e:3d:2c:eb:e3:ed:d1:43:
                    d1:20:41:b8:0d:8c:60:8f:60:02:e6:bf:0f:3f:37:
                    79:b8:e8:58:db:b6:3d:29:90:65:cb:3c:4c:89:2b:
                    49:c9:48:25:6d:d0:3e:53:91:42:68:81:9f:91:38:
                    53:96:32:aa:59:08:93:a5:29:b1:36:b7:9e:38:da:
                    dc:47:34:cf:1d:ae:91:19:29:6c:0a:2d:55:cd:52:
                    13:05:db:88:a3:2d:bc:5f:c0:a6:20:f1:21:94:55:
                    5c:f2:1b:7b:d1:99:9c:c2:85:ee:6c:7e:38:96:cc:
                    ee:03:9a:3c:0b:6a:e7:c9:ef:90:03:c9:1c:af:85:
                    e5:1b:b9:0c:20:c9:59:21:8e:fb:3c:4e:71:6b:2c:
                    8c:f0:d2:bc:f3:a7:b9:3c:76:3a:6c:7e:e3:57:ca:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:95:18:20:66:08:16:4D:30:C4:73:63:6C:4B:B9:7A:97:16:2E:7F
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233342e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:a9:03:c8:37:1c:9f:59:95:b0:6d:94:e6:af:40:e1:2f:
         b7:5b:db:0e:5e:45:54:2e:31:4e:f2:e8:57:04:8b:1f:80:5c:
         81:c1:46:05:0a:ef:14:fc:5b:32:ba:6e:4c:d4:01:b3:b4:98:
         3a:85:d8:14:c2:cc:5b:b7:3a:a3:45:c4:4d:9e:43:a1:84:89:
         7d:15:27:61:8b:83:e7:e6:62:d2:ad:82:24:46:80:16:db:0b:
         52:f8:76:ae:79:2b:38:90:6e:79:0b:49:95:51:f4:36:81:d1:
         76:03:cf:a0:7c:f7:7a:7c:c2:7d:ef:f3:ba:a8:9a:3d:62:47:
         eb:a6:ca:a0:34:ea:40:1b:64:a6:36:dd:3c:3b:3c:54:03:89:
         62:43:9f:ca:c9:71:42:41:8a:e2:85:33:9d:d6:ef:f8:72:19:
         68:30:88:9d:d5:4e:c1:f5:60:b0:9b:c4:0a:2f:df:08:72:f2:
         4c:ad:a7:50:e0:05:43:82:b1:a3:8c:28:c4:13:05:21:92:c1:
         2f:84:e4:27:56:d5:cf:49:e7:32:cd:c7:01:67:cc:77:59:ce:
         70:9e:ab:46:bd:b5:ce:ad:bb:e7:1b:d5:73:69:29:04:bf:98:
         ab:34:0b:51:9e:d8:75:97:9b:17:83:5a:52:85:bd:1d:8e:b4:
         cd:ac:a0:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:32 2026 by rpki-client