Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32342d3234203d3e20313333303333.roa
File:                     3130332e35332e3132362e302f32342d3234203d3e20313333303333.roa (raw, json)
Hash identifier:          tIkqfZWJF7b/FedzMWgJGLED4oBaeFyzJ7+DejXH9nM=
Subject key identifier:   B8:29:E4:2B:7D:63:5C:BF:DA:42:09:C0:0C:20:18:27:5E:52:66:FC
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       4D43CDAED4C175E6D4CAFD8E1AEB72F4F41D0421
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32342d3234203d3e20313333303333.roa
Signing time:             Tue 28 Apr 2026 03:58:42 +0000
ROA not before:           Tue 28 Apr 2026 03:53:42 +0000
ROA not after:            Tue 27 Apr 2027 03:58:42 +0000
asID:                     133033
IP address blocks:        103.53.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:43:cd:ae:d4:c1:75:e6:d4:ca:fd:8e:1a:eb:72:f4:f4:1d:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr 28 03:53:42 2026 GMT
            Not After : Apr 27 03:58:42 2027 GMT
        Subject: CN=B829E42B7D635CBFDA4209C00C2018275E5266FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f5:04:2e:e1:06:4e:4b:cb:88:33:9d:c2:d2:
                    98:dc:09:a1:c7:14:3a:1c:f6:fd:46:4b:b6:f1:c9:
                    ab:c3:33:49:a0:49:da:54:bc:5b:99:74:e6:25:b6:
                    e1:de:00:81:bc:14:f4:77:34:36:a4:98:16:44:32:
                    ad:55:2f:e1:53:e1:92:dc:0b:fc:d0:d1:66:14:94:
                    ea:7b:e9:78:d1:78:20:8a:c1:70:c1:03:b5:a1:e8:
                    3c:40:25:cc:ad:a4:af:d7:2f:8d:76:c4:1f:5b:b6:
                    a1:8a:97:72:42:7a:c7:58:f7:5a:a3:e8:da:2a:57:
                    4b:56:ba:cc:e1:f7:ff:6c:87:b8:88:80:2e:ad:70:
                    c4:d4:f9:3b:24:d0:07:64:dc:a4:5d:6b:60:9c:b3:
                    e6:25:fd:c2:c3:87:47:ef:58:27:26:96:7d:c2:e8:
                    d6:67:50:65:f9:8f:c2:0e:50:b3:e9:52:72:bf:b5:
                    29:21:24:f7:dc:f2:6f:b7:79:94:79:f3:78:f8:77:
                    e1:b5:07:c4:f8:1a:49:8a:8c:c1:3d:e7:77:93:7d:
                    21:22:7e:39:5b:a3:ff:e2:c6:b0:55:b4:9d:9f:6f:
                    86:aa:ed:da:3c:73:5a:4c:25:2a:9f:5c:7a:58:1d:
                    df:59:90:2f:fa:07:c6:68:e9:d4:81:26:b1:86:1f:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:29:E4:2B:7D:63:5C:BF:DA:42:09:C0:0C:20:18:27:5E:52:66:FC
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32342d3234203d3e20313333303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:1f:0d:3c:7f:13:6a:e1:c9:13:98:47:b5:52:fb:1f:26:ff:
         04:d2:7f:15:38:d5:da:90:2e:45:f9:cb:04:45:03:a2:e3:1a:
         c2:6a:52:0c:8c:43:8d:70:d0:2e:39:68:b5:a4:4e:dc:57:5c:
         53:f0:34:c4:df:aa:04:57:12:e8:36:6d:ee:15:06:72:48:41:
         8b:56:fd:44:72:5b:67:60:b5:2f:03:65:80:41:60:d4:b3:07:
         39:b0:53:83:c1:3c:89:7f:b3:63:53:33:ce:7f:57:3f:9c:b5:
         1c:df:a7:25:d6:df:bc:3e:7f:a9:93:96:35:db:b8:80:b9:c7:
         b6:38:36:a6:ce:a2:c9:61:f0:99:ec:43:46:b9:ee:ed:29:df:
         8a:de:7c:7a:36:cb:80:02:30:ed:4e:79:fe:f5:60:4b:bb:a3:
         5a:29:dc:f8:5c:1b:6d:99:4f:29:6d:01:c3:53:61:f5:2e:63:
         15:f3:85:57:1a:96:17:58:aa:ac:0c:20:56:20:27:2d:04:b9:
         47:60:82:a3:30:55:bc:e0:d9:c9:36:0d:6a:be:85:b9:fc:a9:
         04:92:3c:f3:3e:ac:f5:24:d9:56:90:e0:0b:f1:cc:a7:40:26:
         06:d6:e7:1f:df:19:e9:90:25:94:5f:ec:96:e4:0e:81:6a:94:
         5d:d5:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:07 2026 by rpki-client