Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32332d3233203d3e20313334373630.roa
File:                     3130332e34312e322e302f32332d3233203d3e20313334373630.roa (raw, json)
Hash identifier:          SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=
Subject key identifier:   CC:86:C2:20:4E:5B:7F:79:C3:79:47:8F:99:6F:4E:53:82:18:0E:D2
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       51A0585D90C90B02DCB3A666D3CA1981FCEA7B05
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32332d3233203d3e20313334373630.roa
Signing time:             Wed 13 May 2026 05:24:01 +0000
ROA not before:           Wed 13 May 2026 05:19:01 +0000
ROA not after:            Wed 12 May 2027 05:24:01 +0000
asID:                     134760
IP address blocks:        103.41.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:58:5d:90:c9:0b:02:dc:b3:a6:66:d3:ca:19:81:fc:ea:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: May 13 05:19:01 2026 GMT
            Not After : May 12 05:24:01 2027 GMT
        Subject: CN=CC86C2204E5B7F79C379478F996F4E5382180ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:ee:4f:40:27:73:36:34:8c:88:ed:3f:48:
                    ce:41:df:3a:2b:61:e7:48:2b:61:3d:a1:3a:58:e3:
                    d8:8b:65:68:a4:79:1c:e8:ef:09:d2:85:ca:b6:94:
                    40:37:da:23:58:39:58:bc:91:fe:9f:c2:25:aa:f1:
                    01:ea:06:c5:10:7c:1d:73:71:51:03:d7:1e:d2:34:
                    53:ac:b3:f9:3a:e0:d4:ad:10:0a:8d:6c:04:28:10:
                    06:42:ad:f7:32:a8:64:30:e9:14:cc:17:68:8a:82:
                    42:94:23:d1:28:29:ab:1c:21:af:1d:dc:90:fd:83:
                    6e:04:e2:6a:7b:55:36:f3:e9:c0:36:a7:66:d7:0a:
                    83:7e:cd:f1:95:ab:e9:59:b9:e1:4c:41:da:72:c7:
                    3a:52:0f:48:64:46:6e:0b:cf:f5:e0:e7:73:40:5f:
                    d0:16:cd:e9:95:d5:82:62:fa:58:3e:ee:e4:6a:3d:
                    5b:fd:b2:76:df:e1:af:8f:5d:8c:5e:fb:d6:74:6c:
                    80:33:64:ab:c4:d5:ec:54:ff:6f:cc:1c:2c:c3:a2:
                    3b:0b:8c:32:6e:85:dd:c5:0e:a7:80:4e:13:ab:2c:
                    08:74:8d:a9:d9:34:39:85:7a:40:0f:5b:55:21:0d:
                    0c:17:cb:81:da:f4:cd:98:e0:0f:c8:57:f2:78:d7:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:86:C2:20:4E:5B:7F:79:C3:79:47:8F:99:6F:4E:53:82:18:0E:D2
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e322e302f32332d3233203d3e20313334373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:74:96:85:c8:c1:1e:6e:7a:f4:c8:f0:d6:1f:fb:e0:8d:
         3d:f4:4f:13:60:b7:b1:0a:3e:97:8d:d0:fc:74:4e:34:08:e9:
         e4:65:fe:9d:eb:fe:a5:a8:81:c7:06:db:6f:6b:b3:31:7e:85:
         7a:19:4c:d2:0b:44:81:dc:72:10:c2:67:ec:15:d8:8d:35:e7:
         e8:aa:0d:71:69:66:16:fa:ad:6a:16:b9:e8:9b:1f:df:d3:82:
         49:6b:06:40:93:b3:c4:e3:e9:6b:4b:c9:c9:f2:a8:60:59:38:
         d1:39:8e:fd:8a:79:27:f9:2f:71:48:41:17:eb:0f:f4:14:9b:
         d4:02:10:f3:a8:1b:b0:e2:e0:a3:7f:27:aa:f7:43:76:82:dc:
         12:c7:00:ac:7f:23:5c:0e:b3:65:d6:23:d4:c3:08:b9:cb:5f:
         29:d3:2e:3a:b7:bd:97:6c:ba:4b:67:20:10:02:3e:97:88:18:
         30:29:3e:1e:17:86:6b:9d:85:52:41:bb:85:ea:a2:5d:45:fd:
         f4:31:6d:e0:aa:39:5a:9f:24:39:81:dc:8f:6f:48:c7:9c:9b:
         d7:ab:37:9c:6b:a0:a7:d1:cf:b1:71:e6:f2:e7:88:ee:9b:6e:
         4b:f8:7d:0c:99:10:f5:49:84:7e:c5:2b:95:14:45:01:b0:35:
         9c:f4:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:27 2026 by rpki-client