Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136362e302f32332d3233203d3e203536303436.roa
File:                     3130332e36302e3136362e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          zgDduliB2hwfYJYKLFDyRmkqVE/JXQdQk/n/WuVLqaQ=
Subject key identifier:   D5:73:A8:68:2B:A6:34:41:46:86:39:E2:41:67:EA:B0:CB:81:BE:24
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       247258453C66F5B63BA5EDB1AC84F7E643ED2BC7
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136362e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 02:44:46 +0000
ROA not before:           Wed 23 Sep 2026 02:39:46 +0000
ROA not after:            Wed 22 Sep 2027 02:44:46 +0000
asID:                     56046
IP address blocks:        103.60.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 12:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:72:58:45:3c:66:f5:b6:3b:a5:ed:b1:ac:84:f7:e6:43:ed:2b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 02:39:46 2026 GMT
            Not After : Sep 22 02:44:46 2027 GMT
        Subject: CN=D573A8682BA63441468639E24167EAB0CB81BE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:2d:95:fe:48:59:75:b9:5e:4e:45:01:dc:
                    0f:50:bd:d8:55:1b:3a:c1:b7:c0:4d:45:2d:16:9c:
                    86:16:95:48:4f:ab:bc:3d:28:ea:3f:f8:c5:84:f1:
                    12:78:51:15:1d:e4:70:87:52:8d:c5:c1:71:8f:87:
                    cd:5d:40:2e:ba:c0:ea:a3:16:7f:b1:fa:f4:fc:8b:
                    98:46:8c:01:1d:e7:cf:ef:c5:4d:64:e3:03:86:5c:
                    a2:8e:74:4f:f1:b2:83:5b:e9:b8:4e:55:e7:52:5c:
                    e5:0a:8c:40:7e:f6:f8:ce:05:9a:29:4a:d9:7d:9b:
                    eb:5a:59:3a:7f:23:a4:06:a3:ac:d2:05:46:93:fd:
                    e7:d2:e9:63:83:4e:d7:aa:ed:22:32:f6:a3:fe:92:
                    4c:3a:47:b5:68:79:9f:9d:f1:cc:9a:84:7b:fb:ea:
                    41:3d:e2:c2:e9:04:bf:2a:fa:22:f7:8f:17:92:f1:
                    e6:66:3e:02:a5:c6:af:27:b7:60:af:14:ec:30:f6:
                    c7:4b:b0:ed:14:df:25:5d:bb:80:72:b4:57:69:a4:
                    4c:8e:63:e2:81:ae:46:6e:8d:6d:39:17:02:b4:8d:
                    f7:02:a9:5c:63:6a:ea:ec:f8:85:f5:10:47:ea:85:
                    12:31:75:8b:5b:51:7e:da:33:44:2e:cc:3e:cc:42:
                    2d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:73:A8:68:2B:A6:34:41:46:86:39:E2:41:67:EA:B0:CB:81:BE:24
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136362e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:13:d0:bf:91:12:a3:92:34:73:97:0c:e9:8f:39:cd:66:
         33:5f:8a:9e:b4:24:02:c9:8d:ca:90:80:bc:18:d4:87:27:f5:
         b2:00:fa:48:cb:b1:b7:49:8b:10:1b:be:7f:4f:93:6e:1a:7a:
         e5:8e:fd:8a:61:01:ab:28:b4:6d:1e:82:ce:86:58:cb:1e:36:
         53:39:cb:6f:94:e4:d6:03:8c:54:99:92:10:2b:ee:ac:3e:4a:
         97:98:08:61:b7:78:25:0a:6f:fe:d8:89:ad:17:3a:5d:9b:ec:
         40:77:c3:d8:41:a3:49:1f:74:4e:5f:dd:74:e9:66:66:ee:b6:
         db:47:fe:ba:cc:b4:df:ec:4a:98:18:cd:1d:bf:5f:c9:51:c4:
         84:5b:6d:6e:fa:c7:a9:f4:a3:91:a7:99:4b:00:f5:8b:e6:ae:
         4b:1d:c5:62:95:5e:25:7d:00:2d:fc:3f:59:8f:79:20:b2:81:
         e6:c6:7e:ef:6a:19:95:9b:22:42:24:d0:7e:1d:94:d2:b7:41:
         0c:eb:c3:1a:44:78:ec:dd:ef:96:ce:0a:10:8b:10:f5:ab:03:
         bb:b2:4c:8f:0f:67:80:4d:6a:88:25:74:1b:e4:9a:be:19:c7:
         1e:83:09:01:92:61:14:34:be:41:be:b7:3d:51:52:29:d7:51:
         2f:d6:ca:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:31 2026 by rpki-client