Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32332d3233203d3e203536303436.roa
File:                     3130332e35332e3132362e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          VjvNTzvvNqmWM/DILM+dEge/ZbyuU6oC7QCr4+5XLso=
Subject key identifier:   8C:5D:40:27:8D:E9:06:FB:C8:FE:78:1B:56:69:92:B6:19:0F:3D:BA
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       13008373B4FF2A92D5C39B19EFA2EBF77A05C617
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:01:25 +0000
ROA not before:           Wed 23 Sep 2026 07:56:25 +0000
ROA not after:            Wed 22 Sep 2027 08:01:25 +0000
asID:                     56046
IP address blocks:        103.53.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:83:73:b4:ff:2a:92:d5:c3:9b:19:ef:a2:eb:f7:7a:05:c6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:56:25 2026 GMT
            Not After : Sep 22 08:01:25 2027 GMT
        Subject: CN=8C5D40278DE906FBC8FE781B566992B6190F3DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:a7:7e:e4:09:7d:91:ce:c8:57:95:1b:d4:
                    b7:0c:38:61:1c:aa:09:a2:eb:71:14:3e:f3:34:f5:
                    04:7d:ba:d9:61:b9:2d:1f:6b:62:13:bd:9b:36:84:
                    da:35:be:8d:b1:67:84:a9:36:34:24:42:00:16:78:
                    5b:e3:f5:c5:f1:29:4d:49:05:7f:9f:92:a6:1a:46:
                    57:1b:90:e5:a0:1c:dd:59:54:65:31:f9:f9:fa:55:
                    1c:08:2b:dc:80:ed:b9:84:00:1e:56:13:21:de:53:
                    30:1e:c3:ad:b7:bf:0d:f5:ee:72:40:40:4c:a1:3d:
                    81:40:33:1f:db:e7:2d:26:a9:75:9b:9f:b0:71:4a:
                    01:1c:84:9c:04:6f:cb:59:7a:9c:bc:df:ca:af:44:
                    36:c3:50:cd:f3:a3:13:79:77:08:3f:36:4d:9d:26:
                    82:0b:51:37:07:6d:96:f9:de:97:b8:31:4d:7d:37:
                    e9:95:9d:d8:98:48:f3:0c:e6:81:7e:fc:07:eb:31:
                    21:30:78:6d:c0:e5:a2:a7:1c:f2:78:2c:7b:6b:5f:
                    50:d4:59:fd:5e:89:70:e3:b6:0b:60:1f:ac:ff:25:
                    be:6d:0a:a1:66:5e:08:f0:5a:c8:3c:8e:07:8b:99:
                    a7:2a:5e:a1:2f:dd:b3:66:c4:6a:3f:4c:0b:ec:fb:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5D:40:27:8D:E9:06:FB:C8:FE:78:1B:56:69:92:B6:19:0F:3D:BA
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:e2:bf:46:9d:77:e1:4e:ea:59:18:1e:84:97:4c:9e:20:b5:
         77:fe:62:d0:ab:15:bd:05:20:06:82:9e:6c:a0:4b:d6:07:58:
         4a:3f:14:05:21:d8:06:bd:d4:66:0c:b2:97:ca:0c:9e:4f:8e:
         84:48:88:56:16:9d:23:a0:51:a3:89:ff:43:eb:57:83:d8:90:
         5c:71:40:bf:f9:76:e8:b0:a7:6e:ed:fb:87:65:f0:c9:6a:b7:
         38:06:51:09:6b:4c:4e:a5:30:5a:dc:73:dd:9e:c8:c1:43:40:
         a3:77:c4:61:22:bb:9c:a2:d1:85:ab:95:69:6a:55:0d:59:b0:
         37:7a:b6:b7:7a:e7:45:6a:a4:99:4f:d7:1f:3b:8c:60:5f:9f:
         4d:2a:5c:7a:13:8a:b6:15:e4:62:f4:4e:1e:da:43:5b:85:04:
         a1:a8:93:cf:55:ba:ff:ad:5d:1f:b4:15:38:44:31:04:04:7d:
         aa:d3:c7:e8:d9:7b:f0:f5:ab:cc:46:58:37:da:97:3f:49:8b:
         ce:a0:59:f6:38:a3:bc:3b:b7:f5:b9:62:bb:97:48:90:93:b8:
         c7:dd:ae:98:d7:90:39:02:1b:c0:74:02:be:ec:b0:37:a7:24:
         6a:69:e0:ef:ef:3b:6b:db:e6:63:c8:0f:1a:b7:29:49:52:fa:
         dd:3f:c5:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:48 2026 by rpki-client