Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32342d3234203d3e203536303436.roa
File:                     3130332e3231362e3135322e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          2Br+WW5Gy0JUjx0acR52EIVjaWtB8hF2jG0SxF0nBqs=
Subject key identifier:   9B:72:BF:19:21:9D:E6:28:9D:95:09:2D:8A:5A:BD:10:1D:21:E8:EE
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       146B0D92A41DE2705BB303C99493DDF5D5E54948
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 12 May 2026 05:14:16 +0000
ROA not before:           Tue 12 May 2026 05:09:16 +0000
ROA not after:            Tue 11 May 2027 05:14:16 +0000
asID:                     56046
IP address blocks:        103.216.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6b:0d:92:a4:1d:e2:70:5b:b3:03:c9:94:93:dd:f5:d5:e5:49:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 05:09:16 2026 GMT
            Not After : May 11 05:14:16 2027 GMT
        Subject: CN=9B72BF19219DE6289D95092D8A5ABD101D21E8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:05:fe:8d:b0:c1:fc:ee:e0:57:47:d8:03:
                    e9:2b:3d:6d:06:5e:09:94:a8:28:34:cb:38:9c:e1:
                    50:f8:ec:32:d6:d8:d4:99:05:5e:b0:73:9c:0c:45:
                    1e:ca:b0:bf:d3:b4:e6:7a:02:4d:bc:2d:ba:7e:b3:
                    d2:5f:f8:0b:d6:fd:b5:d4:6b:fd:8e:c4:bf:cf:44:
                    09:d2:15:19:e2:69:8a:8c:a6:88:55:e3:bf:84:cd:
                    60:54:19:a5:b2:db:ae:19:2a:1e:22:d1:af:ed:69:
                    d1:96:b2:e3:2b:f2:13:73:34:1f:cc:d7:ae:ce:1c:
                    dc:bd:32:c2:9d:bb:1b:55:cf:f1:5e:b2:bc:de:58:
                    d9:21:0f:2b:d8:92:96:2a:08:2f:5c:82:51:aa:b9:
                    98:de:b4:37:db:b3:78:8e:f3:c6:62:56:b8:37:77:
                    8d:cc:45:1f:bc:d5:d9:2e:0e:72:83:fa:b0:ea:e4:
                    af:72:c9:e8:7a:d4:44:a0:83:12:de:c4:c9:14:f0:
                    bc:cb:1a:2b:f7:9b:5d:8a:a6:e2:62:98:07:7b:12:
                    6a:43:29:b8:a9:6f:5a:38:73:e2:54:9f:ef:f8:bb:
                    67:0c:64:51:47:2e:02:bc:92:34:68:db:01:5f:58:
                    8d:e1:67:7c:6a:d0:e3:bb:51:28:21:c1:e0:f5:86:
                    fc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:BF:19:21:9D:E6:28:9D:95:09:2D:8A:5A:BD:10:1D:21:E8:EE
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135322e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:48:37:bf:8a:c3:62:d7:8f:7d:94:68:eb:05:52:e7:31:
         7f:4b:9a:35:82:38:87:1a:27:50:ec:b3:09:d5:4d:ef:f6:7f:
         d4:7a:8e:bb:e2:05:fb:b2:6f:ed:d6:95:4f:9a:1a:f7:12:6f:
         de:2a:94:d2:a3:1c:b5:e6:e2:ec:97:a7:1c:02:0a:e6:a3:c1:
         33:9b:18:38:df:b1:09:65:76:7e:87:2a:87:a9:b6:88:d3:25:
         0c:5b:8e:ff:fb:07:28:0b:54:ac:45:9f:2f:ff:77:32:db:3c:
         35:e3:4f:de:24:24:67:f3:2a:90:d0:7e:b8:80:64:21:ad:dc:
         5d:8e:65:8a:02:bd:d5:40:3a:56:0b:ba:29:94:90:6c:49:96:
         f5:67:84:a1:50:55:0f:b2:a8:59:42:e1:7e:95:69:0b:db:d9:
         e5:84:40:45:60:e4:16:0f:68:29:e2:a5:19:d0:66:1b:63:ba:
         40:a9:c6:a1:66:12:e0:0f:fd:18:cf:98:7d:7a:33:fa:bd:b6:
         45:90:10:91:c0:a8:36:33:bc:a1:ec:5e:dc:65:1a:18:66:be:
         5c:db:a1:0b:53:47:ab:91:69:0c:e5:6d:43:18:71:df:bc:89:
         f0:20:ec:e0:8b:f5:22:e7:88:7f:e9:76:cd:c0:bf:d6:f4:62:
         92:d1:82:57
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUFGsNkqQd4nBbswPJlJPd9dXlSUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA1MTIwNTA5MTZaFw0yNzA1MTEwNTE0MTZaMDMxMTAvBgNV
BAMTKDlCNzJCRjE5MjE5REU2Mjg5RDk1MDkyRDhBNUFCRDEwMUQyMUU4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2gX+jbDB/O7gV0fYA+krPW0G
XgmUqCg0yzic4VD47DLW2NSZBV6wc5wMRR7KsL/TtOZ6Ak28Lbp+s9Jf+AvW/bXU
a/2OxL/PRAnSFRniaYqMpohV47+EzWBUGaWy264ZKh4i0a/tadGWsuMr8hNzNB/M
167OHNy9MsKduxtVz/FesrzeWNkhDyvYkpYqCC9cglGquZjetDfbs3iO88ZiVrg3
d43MRR+81dkuDnKD+rDq5K9yyeh61ESggxLexMkU8LzLGiv3m12KpuJimAd7EmpD
Kbipb1o4c+JUn+/4u2cMZFFHLgK8kjRo2wFfWI3hZ3xq0OO7USghweD1hvwFAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUm3K/GSGd5iidlQktilq9EB0h6O4wHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC8zMTMwMzMyZTMy
MzEzNjJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfYmDANBgkqhkiG9w0BAQsFAAOCAQEAnI1IN7+Kw2LXj32UaOsF
Uucxf0uaNYI4hxonUOyzCdVN7/Z/1HqOu+IF+7Jv7daVT5oa9xJv3iqU0qMctebi
7JenHAIK5qPBM5sYON+xCWV2focqh6m2iNMlDFuO//sHKAtUrEWfL/93Mts8NeNP
3iQkZ/MqkNB+uIBkIa3cXY5ligK91UA6Vgu6KZSQbEmW9WeEoVBVD7KoWULhfpVp
C9vZ5YRARWDkFg9oKeKlGdBmG2O6QKnGoWYS4A/9GM+YfXoz+r22RZAQkcCoNjO8
oexe3GUaGGa+XNuhC1NHq5FpDOVtQxhx37yJ8CDs4Iv1IueIf+l2zcC/1vRiktGC
Vw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:42:04 2026 by rpki-client