Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e332e302f32342d3234203d3e20313331353734.roa
File:                     3130332e34312e332e302f32342d3234203d3e20313331353734.roa (raw, json)
Hash identifier:          WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=
Subject key identifier:   0B:6C:D3:1B:75:22:9F:14:69:66:0D:F4:E7:64:73:77:35:59:AE:63
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       4193405C98B17E7D977DC5E83AC9517E5461F268
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e332e302f32342d3234203d3e20313331353734.roa
Signing time:             Wed 13 May 2026 05:22:57 +0000
ROA not before:           Wed 13 May 2026 05:17:57 +0000
ROA not after:            Wed 12 May 2027 05:22:57 +0000
asID:                     131574
IP address blocks:        103.41.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:93:40:5c:98:b1:7e:7d:97:7d:c5:e8:3a:c9:51:7e:54:61:f2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: May 13 05:17:57 2026 GMT
            Not After : May 12 05:22:57 2027 GMT
        Subject: CN=0B6CD31B75229F1469660DF4E76473773559AE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:a1:05:43:30:09:86:9a:a1:6c:73:ed:6d:
                    5e:fb:ec:8d:3b:ae:de:0a:77:da:b9:8c:98:e2:6b:
                    76:be:30:57:97:bb:3d:1b:54:0d:15:4a:73:e1:2f:
                    d3:67:45:33:c4:50:cd:69:b1:c3:1e:e6:ab:aa:a8:
                    2c:96:ab:ef:6f:81:28:58:c2:7e:75:fc:66:c6:54:
                    5d:1e:2c:c8:08:29:b5:ca:e9:ab:84:db:7f:35:0f:
                    c8:eb:a2:3f:6b:13:82:e7:05:bd:e1:3f:dc:68:37:
                    22:e4:30:f5:8e:59:3d:18:a2:6e:e3:91:3b:c1:d0:
                    f6:85:e2:9a:02:4b:14:9f:de:23:14:b2:a9:e5:6a:
                    8b:19:a6:79:81:f6:8c:eb:f2:09:5a:95:3a:62:50:
                    a1:d9:b9:4f:23:6d:38:3d:b0:c8:7a:55:a1:8b:b3:
                    27:12:e1:3c:1e:d0:a4:8a:89:f3:f8:82:3d:aa:f8:
                    d3:e0:59:ac:43:da:2d:70:ca:74:6f:f4:5e:a9:27:
                    17:bf:1d:b3:80:4e:da:81:7e:ea:98:2e:e8:5f:4f:
                    92:4e:61:f2:4d:da:03:6c:60:27:10:84:f7:a1:0d:
                    4a:77:c4:29:84:1f:66:38:07:61:74:3e:ce:da:3d:
                    8f:05:f1:b6:f7:a6:85:3f:00:fd:18:d2:fc:b0:39:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6C:D3:1B:75:22:9F:14:69:66:0D:F4:E7:64:73:77:35:59:AE:63
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e34312e332e302f32342d3234203d3e20313331353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:94:39:54:9b:da:cb:49:f7:c2:d8:9b:ee:8b:fe:ed:a9:37:
         e8:a7:d2:01:13:ba:7e:c3:a3:91:bf:06:fc:d5:e3:b3:dc:86:
         a9:47:d4:8b:ef:f5:bb:44:88:b0:c4:ac:9f:ab:1b:6d:77:d5:
         af:0c:53:b4:02:1a:55:0d:1b:ab:fd:49:03:0a:71:84:9e:37:
         90:c3:2d:ce:f2:27:09:c4:e6:50:ca:ea:88:eb:95:06:79:46:
         e5:c6:c1:77:87:d9:08:da:ae:4b:fb:31:0a:27:b1:fe:a8:ee:
         66:66:40:4f:5a:d9:3e:6b:75:c0:e2:1a:6c:37:a1:78:4c:86:
         7c:01:f2:3a:05:98:72:c4:12:d9:3a:47:b9:44:a8:93:0b:62:
         24:4b:5a:53:4f:b2:a5:e9:ec:8a:bc:77:2a:cb:3e:c6:47:d8:
         3f:a4:72:80:b0:ff:c9:5e:02:89:0b:50:bf:0e:73:fb:96:ff:
         02:51:fa:ea:1a:79:3c:dc:56:d4:85:d8:cf:83:36:69:9d:c2:
         82:45:93:7d:fe:2b:df:b9:d6:34:cf:8e:30:f7:10:87:a9:d0:
         0a:73:68:c4:d3:cf:7d:ac:4f:0a:8d:29:22:09:79:cf:0e:12:
         0d:ac:12:98:5c:48:69:d6:e1:63:30:c8:4c:4b:02:ca:c6:9a:
         1d:11:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:30 2026 by rpki-client