Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa
File:                     3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (raw, json)
Hash identifier:          VdI8Hd96kkKdMIdSMU6NKFtjxr9wbzZqclzh8Sq5uiQ=
Subject key identifier:   9D:FC:6A:9B:F1:0F:0C:50:AB:04:E6:99:34:00:E2:CC:88:26:F4:53
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       57A65B163BB895984E59C7B602C79B4F7998A8B2
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa
Signing time:             Wed 23 Sep 2026 02:45:11 +0000
ROA not before:           Wed 23 Sep 2026 02:40:11 +0000
ROA not after:            Wed 22 Sep 2027 02:45:11 +0000
asID:                     133033
IP address blocks:        103.60.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a6:5b:16:3b:b8:95:98:4e:59:c7:b6:02:c7:9b:4f:79:98:a8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 02:40:11 2026 GMT
            Not After : Sep 22 02:45:11 2027 GMT
        Subject: CN=9DFC6A9BF10F0C50AB04E6993400E2CC8826F453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f1:66:81:8c:10:af:19:e9:04:5d:b8:a4:84:
                    fb:ce:d6:7e:eb:d2:9d:d1:db:b4:96:f2:d6:e1:3b:
                    0f:78:bb:3b:84:ad:dc:6a:48:a9:2f:bb:b9:25:88:
                    c3:9b:45:da:98:46:51:ae:b5:24:6a:09:bf:fc:0c:
                    7d:58:25:8c:49:db:38:2d:26:84:a7:e5:26:90:f1:
                    39:1d:94:9b:6f:cd:29:8d:07:9e:d4:b5:22:f2:7c:
                    0e:0f:59:57:77:05:e0:b4:6a:57:7d:f1:c1:85:2b:
                    6b:6a:d6:e7:73:b1:38:30:c6:c4:8d:57:3a:55:25:
                    a3:ad:39:91:d1:26:13:2c:2c:66:4d:05:9b:12:12:
                    58:fc:b5:c9:01:c9:5b:d9:2f:23:9a:6c:40:e3:14:
                    84:f0:a4:c1:5f:22:2e:3e:ed:42:0b:a1:2c:7b:60:
                    8e:59:93:f9:76:8a:b0:be:1e:1b:d7:f3:66:1e:7c:
                    24:5d:ea:5a:26:b4:2b:58:e5:50:83:ee:f5:a2:2b:
                    85:f5:25:f8:7c:1b:1a:56:64:5d:bf:c2:5a:06:6a:
                    64:e4:be:be:c6:45:c1:76:b4:22:ba:cc:c9:4f:7f:
                    55:2d:19:e4:ee:8f:ac:77:24:02:e5:ac:95:91:86:
                    be:3b:0a:3d:58:24:7d:a6:7e:ee:df:1f:fb:99:ef:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FC:6A:9B:F1:0F:0C:50:AB:04:E6:99:34:00:E2:CC:88:26:F4:53
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:d1:f5:9d:3a:92:94:48:fe:bc:a1:81:a7:d6:27:7d:83:
         1d:43:ca:ec:48:89:a3:3c:5c:c1:eb:ec:ef:2f:94:9e:69:13:
         77:e1:48:af:a3:4f:f7:d3:e8:93:94:5b:15:e2:a9:4e:06:fd:
         79:dc:a5:4e:5d:62:9e:33:aa:d5:15:76:6d:df:1f:3b:34:c4:
         2c:cd:4c:5a:86:ff:59:dc:f0:5d:da:c6:ae:50:74:23:0d:7a:
         5d:c7:6c:6f:10:37:c4:58:03:19:c4:15:43:72:ee:aa:f6:ac:
         e7:30:6f:97:41:43:f6:6c:df:50:87:09:9f:74:b5:e1:6a:73:
         d7:09:90:26:54:41:4c:b9:a9:4d:2a:a2:54:dd:aa:05:37:7e:
         8d:87:99:71:ef:41:a5:c6:19:5d:e6:f6:f9:2e:50:75:2e:82:
         91:35:5d:88:13:35:c2:7a:f8:d2:79:94:e0:26:ee:78:40:fc:
         d8:bf:1f:13:33:95:94:51:8a:f0:86:b4:bc:8f:9f:b9:39:1c:
         3e:67:67:c9:51:1d:14:03:42:78:2d:25:12:1d:24:43:47:9c:
         e6:15:cc:6a:4a:69:65:b5:57:50:d2:ee:87:8f:6c:a8:f4:93:
         c1:b7:11:5a:87:62:a3:27:c0:0e:53:58:52:d3:ae:32:d8:c4:
         5a:59:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:48:57 2026 by rpki-client