Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32332d3233203d3e203536303436.roa
File:                     3130332e35332e3132342e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          0I2jWyiX7ghoHPIeQsy5hr+9QcO8xyj85dQOJy5V27s=
Subject key identifier:   F4:13:1E:32:02:9E:2A:11:80:A2:B8:EF:32:31:89:BA:C3:28:0B:3B
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       351DDD48837AC46118F2111843306EDFD1930837
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:01:25 +0000
ROA not before:           Wed 23 Sep 2026 07:56:25 +0000
ROA not after:            Wed 22 Sep 2027 08:01:25 +0000
asID:                     56046
IP address blocks:        103.53.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:dd:48:83:7a:c4:61:18:f2:11:18:43:30:6e:df:d1:93:08:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:56:25 2026 GMT
            Not After : Sep 22 08:01:25 2027 GMT
        Subject: CN=F4131E32029E2A1180A2B8EF323189BAC3280B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:c9:a4:cf:1b:b9:b8:8a:6b:ea:6d:87:53:
                    0c:c4:0d:c7:1b:0b:c7:36:f1:cb:34:dd:2d:45:bc:
                    22:f1:3d:bf:21:d0:fc:8c:ca:ca:55:ef:c9:99:1c:
                    e2:13:8d:71:37:56:9e:41:36:93:66:f5:79:b9:f8:
                    44:78:b7:7b:6a:79:bf:2a:32:15:26:19:98:be:6b:
                    fa:b6:d3:d1:d3:c0:c4:32:88:cd:dc:ca:7f:19:1a:
                    bd:21:32:97:b9:47:51:b8:59:8f:21:68:55:d5:5f:
                    71:e9:14:50:7f:a6:5d:57:8f:5d:09:f9:44:70:65:
                    ea:bd:e3:d2:08:47:8a:d7:75:c6:6e:0e:5c:21:6f:
                    6f:38:53:91:d3:fb:2e:6c:cc:62:64:8b:de:d0:32:
                    12:60:29:82:6a:89:b3:96:86:85:ac:ab:5a:d9:88:
                    7e:31:3d:3c:4f:22:06:bc:64:ed:fa:64:60:ba:91:
                    4b:74:f2:3d:9a:36:e8:3b:85:21:42:59:d2:cc:93:
                    dc:07:26:2d:91:2f:ee:85:3f:91:56:6d:7e:68:d6:
                    e7:6a:a7:c4:d4:21:58:18:78:07:c3:44:80:eb:53:
                    75:d5:b1:23:c9:bd:e0:f0:3e:15:07:98:e9:db:b9:
                    71:f0:f7:a0:1c:78:0e:6a:be:49:dc:97:e3:81:89:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:1E:32:02:9E:2A:11:80:A2:B8:EF:32:31:89:BA:C3:28:0B:3B
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132342e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:d7:3f:72:8d:5d:93:fb:04:ee:ad:f7:18:df:9d:84:f0:39:
         83:a1:b4:35:ce:f5:f0:b8:ee:a3:fb:3b:ea:50:6d:76:64:d4:
         e1:f7:95:60:97:cb:2a:a2:da:08:6c:0a:00:ba:9b:59:94:67:
         25:a3:f5:75:ae:cd:aa:b4:82:ec:88:6d:0b:b6:00:d4:a8:c0:
         76:b6:7b:fa:ac:42:0c:03:87:91:7f:82:0e:e3:13:c7:5c:0b:
         94:d6:c2:d7:22:60:ca:34:cd:03:f5:8c:21:71:71:51:0b:b2:
         83:44:24:38:56:ff:3e:1d:11:fb:ee:22:b4:a7:97:fa:a6:e7:
         83:e3:6b:a0:e3:f9:82:b4:ab:65:f6:1e:1b:ee:29:88:7d:aa:
         75:94:e1:97:e5:c3:34:31:36:0c:c8:93:10:0d:56:a0:85:8f:
         ae:a9:43:85:1b:f5:68:56:0b:37:26:a7:cd:1e:e7:f3:f0:b6:
         b6:3d:69:cf:d0:03:d1:c5:46:33:a9:f2:81:72:a6:ef:44:67:
         2f:6b:2a:f0:bd:4e:8a:b9:92:b3:c8:72:6f:96:51:1d:f6:10:
         8e:85:7b:b1:aa:e3:ae:9a:5a:eb:57:c2:37:08:a2:84:b6:98:
         01:6b:fa:ab:85:00:79:ce:9a:b5:06:82:2a:27:e5:a9:97:92:
         04:ac:53:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:32 2026 by rpki-client