Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232322e302f32332d3233203d3e203536303436.roa
File:                     3130332e382e3232322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          kitaROJiT9KrAC9dzTqkESgYG1IopAaFV2UHg3Man/o=
Subject key identifier:   E5:AF:03:7A:39:9C:45:4A:97:C7:6E:58:3B:7F:96:59:DA:81:DB:F2
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       2644C2EF3948A2CEE0501CF5D91E769F68BCC6F0
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232322e302f32332d3233203d3e203536303436.roa
Signing time:             Wed 23 Sep 2026 08:00:06 +0000
ROA not before:           Wed 23 Sep 2026 07:55:06 +0000
ROA not after:            Wed 22 Sep 2027 08:00:06 +0000
asID:                     56046
IP address blocks:        103.8.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:c2:ef:39:48:a2:ce:e0:50:1c:f5:d9:1e:76:9f:68:bc:c6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 23 07:55:06 2026 GMT
            Not After : Sep 22 08:00:06 2027 GMT
        Subject: CN=E5AF037A399C454A97C76E583B7F9659DA81DBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:53:f7:0f:4d:ed:28:b5:0e:9a:67:a4:5c:
                    6f:f2:ec:df:b4:25:9b:ef:5a:58:76:f4:ac:ff:3e:
                    5a:7d:28:03:56:ca:d1:5b:2c:33:f1:a3:42:e1:69:
                    40:bb:ac:44:99:15:95:c8:46:16:e3:05:7b:2f:86:
                    e6:09:25:b2:bd:57:ca:ed:62:64:98:61:ea:63:5e:
                    04:29:fa:3c:90:cf:0b:30:5e:96:d1:da:8c:23:68:
                    e6:78:7b:2e:f2:11:b9:45:90:ca:c8:a2:f7:13:64:
                    17:c1:33:e5:9d:e4:97:a1:a9:c6:db:92:ff:a6:3f:
                    5d:75:b7:9c:4f:67:ef:61:ad:a7:7b:84:36:d9:94:
                    ef:b7:c4:f8:12:85:02:8e:b2:42:4b:5f:de:74:9b:
                    c0:94:d3:fc:1a:91:20:80:59:71:84:9b:d5:1e:f4:
                    9d:80:a8:94:f0:fe:32:e0:4a:7c:0b:1f:20:35:6d:
                    b9:19:a4:43:17:fd:ca:ff:b7:b6:e0:c0:7d:91:61:
                    3f:49:30:ee:28:b0:54:67:4b:3d:39:c2:14:27:ea:
                    31:43:c7:8a:15:bb:cf:3a:78:1a:b5:f5:ea:7e:1b:
                    27:96:2f:f2:56:f8:f1:c9:c0:32:85:3a:c4:d8:0e:
                    8d:2c:a4:c1:d0:f8:a5:06:ca:fc:3b:ac:8c:b1:92:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AF:03:7A:39:9C:45:4A:97:C7:6E:58:3B:7F:96:59:DA:81:DB:F2
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e382e3232322e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:22:e7:03:dc:13:87:6c:a9:7f:c2:e4:59:b2:06:7c:5c:51:
         45:83:58:ee:c9:44:91:44:b7:c4:db:ef:3d:62:e2:5a:ce:07:
         79:61:76:17:77:10:b6:0e:1a:20:e5:ca:37:1f:df:f0:10:ac:
         71:fa:f7:eb:70:fc:61:fb:83:7b:8c:d7:1f:48:f4:1e:44:8e:
         a4:d1:db:93:2e:f7:55:36:60:cf:a9:78:fa:61:51:46:ba:bd:
         4a:78:fb:8f:32:33:1d:ae:f8:46:1f:50:8f:d5:46:33:86:d3:
         af:9e:89:c2:1b:22:0a:c2:b1:7c:4f:1c:3d:25:1a:c6:36:a2:
         da:3a:89:44:eb:7e:83:83:3b:59:1b:1f:15:a0:c5:70:11:15:
         c3:70:93:43:67:ad:e0:a8:4a:55:a9:a5:8b:dd:3f:9d:1a:21:
         c5:e0:d7:20:0a:31:e4:3f:55:1a:29:38:ff:15:20:4c:89:7a:
         65:c0:b0:61:15:fa:18:84:9f:77:f9:06:7e:98:d3:45:97:a0:
         07:91:0f:e2:df:68:d8:3c:56:a6:76:4f:1a:35:b3:09:e4:0c:
         bd:39:82:ae:f7:39:3b:2c:f5:40:b3:d2:98:41:01:bd:07:98:
         b4:e9:e4:8a:09:62:c0:c1:87:27:fe:1c:cd:22:fd:bf:2f:1f:
         2c:f1:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:22:03 2026 by rpki-client