Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32342d3234203d3e203632343638.roa
File:                     3130332e35332e3132362e302f32342d3234203d3e203632343638.roa (raw, json)
Hash identifier:          jTuen7BNfzSL5+IVHNYbkFIdPzP4eQ96RC+ggzVmR8g=
Subject key identifier:   03:B5:FE:13:B1:68:34:2A:48:39:B7:74:7B:A5:09:29:C1:E2:35:DD
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       397E24201A3A154E150446E3E6BEE66F61CF1A47
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32342d3234203d3e203632343638.roa
Signing time:             Tue 28 Apr 2026 03:58:42 +0000
ROA not before:           Tue 28 Apr 2026 03:53:42 +0000
ROA not after:            Tue 27 Apr 2027 03:58:42 +0000
asID:                     62468
IP address blocks:        103.53.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7e:24:20:1a:3a:15:4e:15:04:46:e3:e6:be:e6:6f:61:cf:1a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr 28 03:53:42 2026 GMT
            Not After : Apr 27 03:58:42 2027 GMT
        Subject: CN=03B5FE13B168342A4839B7747BA50929C1E235DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:2f:80:17:c9:87:c9:55:48:05:6c:eb:48:
                    b1:c4:8d:ab:2b:0c:b6:2e:02:4e:20:04:06:71:74:
                    55:c7:ea:b9:44:d2:a7:17:a8:e1:de:21:27:ab:08:
                    6c:a1:57:df:0f:5b:5b:34:e1:2d:99:92:d9:8b:8e:
                    b0:ad:3f:2d:29:9a:bb:b6:1d:3d:d3:f9:87:c6:32:
                    3a:98:00:2d:45:7e:b1:23:cd:09:47:74:f2:51:6e:
                    02:e0:3f:fd:ad:79:82:9d:a8:fc:e7:80:45:19:c1:
                    75:61:d0:11:d2:14:d8:8f:97:84:ab:04:bb:2d:9e:
                    33:77:4f:fa:ce:74:09:7e:79:73:2b:71:38:f8:03:
                    b2:b7:72:39:99:76:7f:8a:5f:f9:bc:b4:74:4c:44:
                    d4:a2:ff:c1:9f:30:1b:29:1e:72:7b:42:c1:54:7b:
                    45:f7:36:42:df:17:d2:4e:0d:1c:74:1c:45:87:69:
                    5a:65:eb:b5:c2:f0:2b:1c:81:5e:40:df:a7:79:38:
                    38:aa:54:99:59:9f:a3:73:54:1d:7e:bf:9d:88:a0:
                    94:cb:26:e7:67:34:d1:3d:a5:57:e5:52:90:43:6d:
                    d7:e3:e1:f2:9d:a3:4a:54:32:06:b6:97:28:29:cd:
                    8b:13:52:f9:75:80:02:25:8a:30:ea:95:02:e9:1d:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:FE:13:B1:68:34:2A:48:39:B7:74:7B:A5:09:29:C1:E2:35:DD
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e35332e3132362e302f32342d3234203d3e203632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:9c:71:6d:b1:89:a8:a2:a7:d9:38:0c:21:7a:f7:cf:8c:
         93:09:34:9b:f9:5f:d4:76:74:e9:ff:35:3b:96:1d:f1:a9:56:
         ea:99:7e:e0:a0:10:92:ea:1f:61:3d:94:a1:50:2b:70:27:5d:
         48:ea:a1:32:4a:12:c7:f6:ce:f8:c9:38:9f:37:c9:4e:8c:40:
         6d:10:16:5b:6e:81:a9:f3:92:84:c9:ea:aa:68:be:6c:c4:bd:
         92:21:af:97:6f:a7:89:84:18:b6:ef:a7:44:1c:db:92:6d:4c:
         72:dd:42:57:73:0e:7a:63:d0:8f:c7:ee:df:ec:50:09:9b:26:
         03:b3:af:4a:ec:0f:e1:4d:71:55:14:52:26:ba:13:c1:fb:2e:
         83:23:d2:41:34:9d:8e:17:98:85:87:bd:8f:e5:e4:5a:c3:b6:
         19:68:a2:2f:39:af:59:50:12:91:d8:b8:6f:5a:65:97:df:e0:
         73:1b:7b:bd:0f:30:fb:8e:66:1b:85:a3:32:4d:c5:07:f9:c4:
         b9:af:6f:3a:34:2a:bc:30:aa:c3:83:cd:5f:6c:08:83:7c:85:
         6e:b4:24:05:92:6d:c2:4a:9a:d2:45:a4:f0:14:04:06:bf:a8:
         ac:23:ca:02:82:07:c9:da:98:57:ed:f3:4c:ff:2f:c5:0d:97:
         22:cf:b7:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:10 2026 by rpki-client