Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32332d3233203d3e203536303436.roa
File:                     3130332e3231362e3135322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          AF+wDDQUx4QHe8X7P1O5CmOn9lGG6xb/X2L3ZODtzdM=
Subject key identifier:   7F:D3:A0:82:64:2F:FE:E0:BE:A8:96:69:09:D3:1A:34:13:0F:CF:F2
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       1AB01254E2CAAC893E983B430274AAC0B67A4FC8
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:02:07 +0000
ROA not before:           Wed 23 Sep 2026 07:57:07 +0000
ROA not after:            Wed 22 Sep 2027 08:02:07 +0000
asID:                     56046
IP address blocks:        103.216.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 00:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b0:12:54:e2:ca:ac:89:3e:98:3b:43:02:74:aa:c0:b6:7a:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:57:07 2026 GMT
            Not After : Sep 22 08:02:07 2027 GMT
        Subject: CN=7FD3A082642FFEE0BEA8966909D31A34130FCFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:86:01:9b:26:fa:a5:a2:62:fc:10:80:fc:
                    ae:47:4f:9f:0b:9a:cf:1c:df:21:93:43:f2:09:46:
                    f7:49:b4:25:d8:38:bd:2d:80:44:d1:63:1c:59:a6:
                    94:49:f8:bd:bb:5d:dc:32:0c:db:c9:76:99:29:0a:
                    3f:27:08:2f:28:8b:ca:79:c6:dc:51:61:dd:3c:8d:
                    30:6a:27:92:8a:bc:55:98:ac:04:d5:2b:5a:e5:3c:
                    52:10:aa:90:45:77:cc:fc:03:1b:9b:09:cc:62:c1:
                    d2:bb:80:5c:81:11:e2:e9:01:d7:60:a3:d3:b8:f4:
                    4a:89:c5:be:17:06:9c:a3:af:a6:fa:52:49:fc:29:
                    69:dd:b8:3b:f4:d0:80:9e:99:0e:21:1b:bf:f9:8e:
                    b1:04:1d:69:11:80:85:d7:64:0f:c6:7a:34:c3:d7:
                    bd:be:87:92:3e:26:aa:61:a2:da:2c:cb:58:08:d8:
                    bc:4c:6a:07:29:a4:b9:0c:71:12:46:2b:d6:f6:2a:
                    3c:14:94:48:50:f3:ad:fa:a3:c1:bb:73:e3:48:35:
                    0d:e8:ea:9a:a6:97:03:41:f6:86:f6:8e:09:e3:08:
                    5b:95:23:f1:3f:63:a8:28:2e:9f:13:d8:ef:70:90:
                    f5:3f:f2:aa:0d:67:47:83:fd:d7:d9:eb:da:95:23:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:A0:82:64:2F:FE:E0:BE:A8:96:69:09:D3:1A:34:13:0F:CF:F2
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:12:aa:5a:05:cd:15:92:99:13:18:d5:9f:d4:47:db:5f:64:
         15:0a:6b:ff:a7:ee:00:5f:bb:5f:6f:5a:3d:7d:de:7c:e6:94:
         c7:3c:d7:a2:1f:4e:01:14:b4:4b:60:20:5d:86:60:c9:01:2a:
         72:4e:72:4f:6f:57:54:84:af:08:f1:ae:63:d1:c8:b1:a1:90:
         31:d4:d4:88:49:bc:54:3e:26:43:d7:1c:8a:df:e9:d5:9b:5b:
         f8:7b:d3:ba:cb:77:bc:40:7b:88:3d:0d:58:ae:30:ff:14:93:
         0f:46:e7:1f:6b:f9:df:c7:c3:30:af:9e:d9:ed:ad:6a:7e:48:
         f1:ad:52:c1:0a:ba:f5:99:2e:ce:e3:b1:f0:16:7e:09:fe:86:
         f2:f7:55:d1:a5:37:6c:58:20:c8:eb:1a:5d:b2:1e:83:e5:ea:
         9e:92:71:a9:55:b8:cf:1c:a6:c2:f6:91:5c:25:0a:d4:93:d7:
         71:0d:1a:f7:86:c0:9a:1d:19:52:ec:37:ac:36:10:e4:1d:81:
         d0:c0:79:ce:b1:1b:68:a3:f8:90:12:e5:6a:80:61:4d:71:fd:
         e6:ea:80:55:bc:e3:74:cc:55:91:03:89:f3:a4:17:a3:2c:3d:
         6f:90:1c:e2:de:19:7c:08:3b:9c:c7:39:e7:50:2e:68:51:b0:
         d7:fe:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:11:21 2026 by rpki-client