Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135352e302f32342d3234203d3e203536303436.roa
File:                     3130332e3231362e3135352e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          HnuQAiBR/FThrjIyHuLQEorE7BrwpsRN5p2wMigRrog=
Subject key identifier:   BD:16:9F:61:FB:8C:0C:FB:0B:B1:E4:96:AD:68:B6:59:43:1C:D3:D3
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       6D9BF6D5B309D1D0E8A68E00FBCDADAF2EEFE4A3
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135352e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 12 May 2026 05:14:16 +0000
ROA not before:           Tue 12 May 2026 05:09:16 +0000
ROA not after:            Tue 11 May 2027 05:14:16 +0000
asID:                     56046
IP address blocks:        103.216.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9b:f6:d5:b3:09:d1:d0:e8:a6:8e:00:fb:cd:ad:af:2e:ef:e4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 05:09:16 2026 GMT
            Not After : May 11 05:14:16 2027 GMT
        Subject: CN=BD169F61FB8C0CFB0BB1E496AD68B659431CD3D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:b7:f6:71:f9:32:04:36:53:a7:26:08:64:
                    40:83:61:f0:e5:93:dd:fa:45:bb:7a:4b:c9:e0:2e:
                    4b:7d:01:5b:bb:fe:ee:60:ba:ed:75:12:6e:87:d6:
                    36:fe:ad:a4:06:14:dd:e6:5e:67:8c:a5:e4:ec:2b:
                    a2:bf:70:1e:15:ca:26:18:92:c2:f7:3f:d6:6b:3d:
                    eb:02:2d:b1:ba:c2:5f:cc:16:b3:dc:a4:8a:3a:3e:
                    2d:e8:a1:e7:9d:9a:16:d4:3f:1b:42:39:a0:19:0c:
                    b1:21:47:d0:9e:f3:d5:47:e6:6e:95:87:14:5a:ba:
                    bb:65:20:23:8a:d3:2a:23:b2:86:14:7c:9b:ea:85:
                    4f:2b:a3:ae:a5:b0:67:72:ab:41:11:f0:dd:dd:47:
                    40:c3:8f:29:4c:5f:a4:0c:d1:7d:fd:5f:a6:11:c1:
                    12:19:5e:8f:ee:21:98:03:18:7f:ef:ea:d4:69:db:
                    3f:05:77:22:4c:d5:0d:6b:3c:cc:c4:19:a9:22:b8:
                    89:96:e9:7f:e7:98:0c:42:32:11:ee:16:3e:62:da:
                    5d:49:f7:cc:3b:8f:43:99:07:1b:7e:c6:a1:48:b4:
                    88:5c:73:23:f6:86:c9:88:11:6a:38:33:32:63:01:
                    7d:fd:51:c2:2c:7e:9c:bf:dc:ff:16:d7:8c:9e:f6:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:9F:61:FB:8C:0C:FB:0B:B1:E4:96:AD:68:B6:59:43:1C:D3:D3
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e3231362e3135352e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:40:f8:cd:7d:7f:d1:a6:53:de:43:da:75:0d:8b:42:98:
         99:a2:b6:38:5c:01:ed:5e:82:4d:f1:73:bd:4c:ca:7b:87:bb:
         8a:a5:bf:01:d6:6f:25:fe:4d:2c:1b:4f:a5:68:7f:25:dd:56:
         c1:69:26:3c:f2:ef:35:7d:7b:11:f4:17:f8:40:4e:4b:8b:b8:
         53:37:f6:b8:41:5d:cb:56:76:66:4e:93:c8:df:94:cd:3c:94:
         bf:4e:78:5f:76:2c:59:03:30:71:38:17:c2:e3:55:a7:45:78:
         19:69:38:42:33:46:b2:e9:ff:a6:f4:12:1e:56:1b:27:91:f8:
         17:d6:60:5a:4e:aa:84:0d:6a:44:79:c9:84:a2:82:f9:e6:2a:
         40:f6:b6:ee:26:bc:9d:1e:f9:fd:5e:a6:41:cc:30:eb:67:d2:
         74:a4:80:f6:c3:13:61:3a:f4:21:75:45:66:96:fa:c8:33:45:
         f6:a8:fc:00:c2:61:36:12:60:a4:4e:60:d4:f0:83:11:8d:25:
         6f:76:1a:c7:72:20:19:20:bb:86:ff:27:ea:2f:77:9e:54:ea:
         b7:d0:61:2f:e2:17:74:dd:0c:db:0d:ca:e6:af:2b:47:5a:98:
         9a:7e:2c:b0:2a:27:e5:bd:85:2d:55:c4:66:5a:5a:18:49:26:
         f8:68:f6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:00 2026 by rpki-client