Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135342e302f32332d3233203d3e203536303436.roa
File:                     3130332e3231362e3135342e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          +cfIC5r2oXK7sssw/ixjvo2jhYa2Plf8rMu+VcWmHSs=
Subject key identifier:   7D:DF:9D:22:7B:4A:EA:6F:B3:FF:E9:DD:FD:A9:2F:BF:6F:44:19:D9
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       427B0E373FF21A79245636714F8545699C0510DD
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135342e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:02:07 +0000
ROA not before:           Wed 23 Sep 2026 07:57:07 +0000
ROA not after:            Wed 22 Sep 2027 08:02:07 +0000
asID:                     56046
IP address blocks:        103.216.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7b:0e:37:3f:f2:1a:79:24:56:36:71:4f:85:45:69:9c:05:10:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:57:07 2026 GMT
            Not After : Sep 22 08:02:07 2027 GMT
        Subject: CN=7DDF9D227B4AEA6FB3FFE9DDFDA92FBF6F4419D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:98:b3:6b:6e:a9:2f:f9:29:94:77:0f:0b:
                    02:cc:83:8d:28:48:89:fc:a9:c7:a3:54:3f:7f:ca:
                    f8:16:83:23:e2:a0:77:ba:6b:4d:31:8f:d5:05:81:
                    8d:ad:e5:b0:71:54:7e:df:d3:1b:86:68:1c:35:0a:
                    92:30:de:2e:3b:6e:31:68:e7:57:fc:e7:8e:d0:b2:
                    d7:2c:42:cb:9a:10:19:2a:0b:4e:40:d6:f6:d7:1b:
                    5a:e0:53:d5:eb:80:b9:b3:c2:d0:f9:4b:35:38:e4:
                    25:84:6e:75:f1:d0:04:f6:37:1b:ac:2c:f1:15:27:
                    5e:52:09:95:24:93:83:05:52:db:b4:61:ff:9f:19:
                    63:04:96:56:a4:16:dc:ac:96:44:a2:ff:20:7c:13:
                    2d:7c:44:07:f4:ea:cc:83:a6:1b:01:5e:93:1c:42:
                    96:c9:8e:12:68:3f:4c:f4:c8:25:ae:f8:49:0a:56:
                    6f:69:a3:c7:d5:c7:68:a3:d0:9c:5b:e8:ba:43:b9:
                    c3:99:db:32:61:03:47:44:de:4f:0d:e8:81:ab:eb:
                    cd:7c:be:2f:8e:49:ec:f3:84:63:83:f0:28:b1:e2:
                    0c:ea:ec:f9:76:98:63:46:4d:43:05:6c:c7:35:9f:
                    f9:9a:a3:9b:67:30:73:9a:35:83:5a:f2:53:9c:06:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DF:9D:22:7B:4A:EA:6F:B3:FF:E9:DD:FD:A9:2F:BF:6F:44:19:D9
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135342e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:7c:e8:3a:7c:22:a7:60:0f:d5:34:d0:5d:b7:c3:80:2f:9b:
         3c:6e:21:74:97:27:51:6e:c4:6d:3d:cd:e5:f8:0c:83:6f:3c:
         f3:b5:26:f0:fe:a4:94:e4:ad:3c:b2:25:ce:35:0e:d3:4e:09:
         0f:ed:a8:fc:68:7c:be:6d:27:2d:c3:f0:84:68:bc:26:13:5c:
         92:22:f9:61:54:c9:a5:54:59:8d:fa:63:9c:b6:64:41:f3:72:
         06:fa:35:c2:da:27:04:cd:a4:aa:92:64:0e:00:70:6a:bc:16:
         39:e9:62:1a:cd:c8:e1:28:2d:e9:2d:d6:ba:b0:40:3d:4f:ed:
         79:e6:0f:ed:44:54:88:e7:d6:11:5a:d5:7f:56:7b:b2:e1:09:
         67:22:cc:7d:5b:9c:87:d1:52:01:b4:54:dc:1b:1f:d8:c8:63:
         94:ff:80:71:a1:f8:3f:61:8e:b9:ee:dc:c0:27:2d:b1:be:9d:
         82:b8:c3:27:b8:ab:5a:a5:09:31:45:e0:76:58:df:69:1d:48:
         8d:8a:1d:e3:45:6d:f6:bd:b5:c5:0e:22:01:ea:df:25:12:d4:
         07:f9:53:e4:41:57:1b:34:f7:bc:c6:9b:8c:62:48:a5:5b:a6:
         b2:32:a0:0b:11:59:4d:70:d8:4e:95:0a:8c:d7:8c:e6:46:e2:
         0c:15:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:22:31 2026 by rpki-client