Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233352e302f32342d3234203d3e203536303436.roa
File:                     3130332e31392e3233352e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          1XlCYIKEOCQUpJyrSjzMNaEMEARwakeqoQ7aHI635Vk=
Subject key identifier:   DB:8A:B0:D4:95:69:16:FE:EB:13:25:0B:93:55:42:DB:26:C0:B7:3E
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       4ADD54DBE0900FB40B7D21F7011C64BE5E731ADE
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233352e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 18 Sep 2026 01:26:54 +0000
ROA not before:           Fri 18 Sep 2026 01:21:54 +0000
ROA not after:            Fri 17 Sep 2027 01:26:54 +0000
asID:                     56046
IP address blocks:        103.19.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dd:54:db:e0:90:0f:b4:0b:7d:21:f7:01:1c:64:be:5e:73:1a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 18 01:21:54 2026 GMT
            Not After : Sep 17 01:26:54 2027 GMT
        Subject: CN=DB8AB0D4956916FEEB13250B935542DB26C0B73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:5e:a8:fb:c0:93:f7:15:1c:f5:00:89:02:
                    e8:ed:7a:e4:b5:a3:ee:68:89:e1:fc:c7:8e:e3:3d:
                    a3:43:d1:1f:8b:20:e0:92:12:f8:73:71:38:91:07:
                    5c:98:23:f5:b3:41:17:f9:16:46:fd:8e:86:15:28:
                    a1:0c:a6:5b:c1:b0:ca:b9:19:46:17:6b:54:82:ce:
                    87:32:f3:6a:52:ad:e0:68:09:9a:bc:83:b4:b2:0e:
                    78:aa:3f:31:3f:bb:50:58:d4:91:aa:17:e1:13:b3:
                    ee:4b:99:4c:21:9d:ed:2c:8e:c5:f6:8e:61:4c:56:
                    b2:fe:5b:4f:26:15:44:ae:10:61:3a:e8:c8:67:38:
                    dc:19:8c:07:3d:ea:56:e6:75:43:eb:56:c3:7c:5b:
                    34:f9:db:26:c4:b6:72:48:2e:d3:bd:f7:c1:33:87:
                    64:e1:49:21:33:5d:1e:0d:fd:df:6f:a8:db:32:0c:
                    1d:aa:ae:b6:e7:48:48:b6:c5:27:54:e1:9f:87:45:
                    e1:db:9c:b4:29:ed:04:d8:0f:be:0b:58:63:2c:ef:
                    09:0a:3e:eb:fe:37:6f:1c:c5:ad:e7:72:dc:52:cd:
                    25:35:10:c3:67:9c:29:6f:41:21:2d:6f:ce:42:47:
                    e1:6c:8c:30:9a:fb:8e:50:22:f5:60:0d:39:8e:e2:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:B0:D4:95:69:16:FE:EB:13:25:0B:93:55:42:DB:26:C0:B7:3E
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233352e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:59:a0:2a:9b:ff:b6:a5:6d:8e:6f:25:85:19:8b:39:dd:
         31:ee:86:67:27:b1:a0:47:cb:ac:dc:26:f0:36:9b:86:ee:bf:
         c2:2c:bb:e2:e3:ac:c9:8d:a2:41:a5:d0:9a:69:ed:72:14:fc:
         a5:83:23:ee:c4:11:ab:5e:9c:49:66:7e:39:c1:8c:1b:80:e0:
         9a:15:a2:d2:eb:ee:8c:e8:59:c6:d0:06:25:82:98:32:53:c0:
         f1:f2:5a:45:42:fa:84:62:ce:e8:50:12:c6:2a:84:23:ed:82:
         ec:0a:e5:d0:4f:18:8d:72:a7:dc:5e:a9:83:2f:a6:ff:04:7f:
         be:2e:07:8a:dd:4a:d8:3c:2f:83:21:9d:fb:52:00:9e:9a:cb:
         29:86:ef:42:ed:58:bd:04:5c:58:a6:c1:4c:3f:02:38:2c:1a:
         5e:dd:a5:56:b8:c4:d0:01:ea:75:fd:a2:86:0d:46:d7:0d:35:
         76:a3:0d:fb:1f:1b:11:1d:1b:15:11:94:4a:94:de:15:60:bf:
         15:a1:ed:60:41:06:b2:1b:8d:56:92:b3:01:9b:38:0a:47:67:
         38:e3:4d:1b:77:18:bb:eb:42:87:b1:f0:a6:50:a7:12:b6:ba:
         22:7e:30:4f:71:d8:74:89:eb:f6:53:9b:f3:ec:0c:27:52:b6:
         13:31:b2:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:56:35 2026 by rpki-client