Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32332d3233203d3e203536303436.roa
File:                     3130332e382e3232302e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          6S/zLgHG+aOqcCswiCZPstCp+NwksMSpvfv252Nau7U=
Subject key identifier:   9B:62:F8:F9:3B:05:B6:CC:B1:7D:E0:C8:4C:F8:65:47:5F:4B:09:F1
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       091D2774F05A4745FC9630090AEEB3A58F7F1357
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:00:06 +0000
ROA not before:           Wed 23 Sep 2026 07:55:06 +0000
ROA not after:            Wed 22 Sep 2027 08:00:06 +0000
asID:                     56046
IP address blocks:        103.8.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1d:27:74:f0:5a:47:45:fc:96:30:09:0a:ee:b3:a5:8f:7f:13:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:55:06 2026 GMT
            Not After : Sep 22 08:00:06 2027 GMT
        Subject: CN=9B62F8F93B05B6CCB17DE0C84CF865475F4B09F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:1c:c1:38:af:04:2d:54:89:70:1c:95:5a:
                    ba:ae:e0:ed:ec:87:4a:56:e1:ed:aa:e6:7a:97:d5:
                    fc:93:7d:6c:05:3e:e3:98:ca:d4:c1:22:a9:8c:3b:
                    2e:95:c1:54:bd:93:b8:db:5c:f5:d6:05:80:92:c6:
                    61:f4:57:64:b3:c5:12:14:62:23:db:72:cc:2e:22:
                    c4:47:00:d5:db:50:fc:2a:01:9d:bb:1e:10:d3:20:
                    e7:7e:45:28:9c:a7:f0:dd:83:e9:d3:61:14:68:30:
                    e6:9e:c1:3c:85:11:fb:f2:22:75:62:ec:b5:ec:0d:
                    4b:3f:37:9e:da:13:49:98:c4:ac:c2:70:b1:a2:c4:
                    4b:ba:50:a4:56:5c:24:35:06:8b:f2:06:e4:a6:bf:
                    4c:ed:8d:84:9b:63:46:ca:56:03:6a:e8:c5:19:1b:
                    91:e5:32:0a:09:af:db:c3:27:ad:de:92:6b:91:55:
                    f1:7c:77:68:8d:a3:40:ee:47:18:52:68:4e:d6:6a:
                    29:ac:00:ea:9e:95:70:b3:08:ae:5f:e4:dd:7b:93:
                    26:1d:ec:fc:80:de:44:ff:46:8b:e6:b5:92:2e:3e:
                    21:1e:0e:fd:5b:7b:0f:69:d9:01:55:e3:92:5e:36:
                    0c:d4:07:8b:ba:1d:62:47:ed:43:93:46:fb:f4:75:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:F8:F9:3B:05:B6:CC:B1:7D:E0:C8:4C:F8:65:47:5F:4B:09:F1
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232302e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:a0:b2:e3:35:97:bf:79:77:c5:21:8a:a3:15:06:dc:a2:
         87:c6:09:9d:2e:8c:6a:59:df:e8:01:b6:47:30:66:8b:86:9d:
         9b:e8:d3:70:a1:36:0c:cb:f7:8a:c8:5f:31:c1:8f:2e:01:6c:
         de:75:b6:9d:3f:8c:b6:a8:47:66:05:d9:e1:0c:48:fb:5d:bb:
         90:75:71:f8:4b:fb:70:8f:b7:a4:77:be:30:97:cc:66:39:47:
         f0:92:80:d2:b6:c5:ff:e3:9b:ab:06:df:92:9f:80:07:3e:ba:
         52:88:30:15:3d:f9:58:4a:0a:ef:18:05:d3:be:74:a6:2b:9d:
         6b:75:72:1d:bf:03:57:c5:83:e4:e1:7c:44:0f:7e:63:a5:39:
         a4:14:40:bf:d5:8e:ab:c2:7c:02:ea:6d:4e:12:d6:36:97:ba:
         87:6f:23:84:4b:0e:27:1e:38:1f:2e:9a:99:05:19:68:5e:06:
         c4:14:1a:2c:7d:a1:a1:8d:64:9c:d2:be:f8:f7:6c:b3:53:7e:
         2b:8f:fc:79:40:c6:0e:80:72:2a:0c:bb:7a:e1:7d:56:8d:6b:
         d3:da:91:8f:94:1e:be:ef:66:cd:a6:0b:ef:1f:24:f4:0c:a0:
         32:86:ee:67:e1:46:d5:af:cd:f5:1c:3d:50:f2:7c:b6:a4:21:
         88:bc:ef:39
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUCR0ndPBaR0X8ljAJCu6zpY9/E1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA5MjMwNzU1MDZaFw0yNzA5MjIwODAwMDZaMDMxMTAvBgNV
BAMTKDlCNjJGOEY5M0IwNUI2Q0NCMTdERTBDODRDRjg2NTQ3NUY0QjA5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpRzBOK8ELVSJcByVWrqu4O3s
h0pW4e2q5nqX1fyTfWwFPuOYytTBIqmMOy6VwVS9k7jbXPXWBYCSxmH0V2SzxRIU
YiPbcswuIsRHANXbUPwqAZ27HhDTIOd+RSicp/Ddg+nTYRRoMOaewTyFEfvyInVi
7LXsDUs/N57aE0mYxKzCcLGixEu6UKRWXCQ1BovyBuSmv0ztjYSbY0bKVgNq6MUZ
G5HlMgoJr9vDJ63ekmuRVfF8d2iNo0DuRxhSaE7WaimsAOqelXCzCK5f5N17kyYd
7PyA3kT/RovmtZIuPiEeDv1bew9p2QFV45JeNgzUB4u6HWJH7UOTRvv0dcxvAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUm2L4+TsFtsyxfeDITPhlR19LCfEwHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzEzMDMzMmUzODJl
MzIzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWcI3DANBgkqhkiG9w0BAQsFAAOCAQEACL+gsuM1l795d8UhiqMVBtyih8YJ
nS6Malnf6AG2RzBmi4adm+jTcKE2DMv3ishfMcGPLgFs3nW2nT+MtqhHZgXZ4QxI
+127kHVx+Ev7cI+3pHe+MJfMZjlH8JKA0rbF/+Obqwbfkp+ABz66UogwFT35WEoK
7xgF0750piuda3VyHb8DV8WD5OF8RA9+Y6U5pBRAv9WOq8J8AuptThLWNpe6h28j
hEsOJx44Hy6amQUZaF4GxBQaLH2hoY1knNK++Pdss1N+K4/8eUDGDoByKgy7euF9
Vo1r09qRj5Qevu9mzaYL7x8k9AygMobuZ+FG1a/N9Rw9UPJ8tqQhiLzvOQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:03 2026 by rpki-client