Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130332e31352e39362e302f32322d3234203d3e203233373234.roa
File:                     3130332e31352e39362e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier:          a0S4vH9Uu2CSVsDScsXWE3hwHTjbMHe7SiSb/vjaDHc=
Subject key identifier:   C1:83:31:0E:BB:26:75:E6:68:8C:0F:F5:2C:32:8B:D8:E2:89:3C:5B
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       69CA5E201A030AEAA9B3FD2BD1D48330233BFEA4
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130332e31352e39362e302f32322d3234203d3e203233373234.roa
Signing time:             Mon 11 May 2026 08:43:23 +0000
ROA not before:           Mon 11 May 2026 08:38:23 +0000
ROA not after:            Mon 10 May 2027 08:43:23 +0000
asID:                     23724
IP address blocks:        103.15.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:5e:20:1a:03:0a:ea:a9:b3:fd:2b:d1:d4:83:30:23:3b:fe:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: May 11 08:38:23 2026 GMT
            Not After : May 10 08:43:23 2027 GMT
        Subject: CN=C183310EBB2675E6688C0FF52C328BD8E2893C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:d6:73:a8:e3:57:d9:72:61:ca:75:1e:43:
                    61:d4:20:1a:02:f7:f9:11:8e:14:82:ef:56:30:e6:
                    82:86:c6:89:99:de:e9:57:28:06:1d:42:4b:63:b1:
                    24:7c:6b:e7:cb:f6:ee:b2:0d:8e:82:ef:b0:6a:cd:
                    7b:db:a9:3a:de:f9:02:04:04:0f:88:9d:96:b6:39:
                    a5:ac:4d:7a:d1:9c:ed:b8:2f:a1:01:a0:b6:f8:e7:
                    17:fd:9d:84:8f:88:30:d3:ad:eb:d5:02:3c:87:91:
                    b6:37:79:f6:ed:66:dc:36:10:d5:47:80:30:1e:8c:
                    1d:86:b0:ec:31:47:72:81:ad:b5:1f:2e:50:02:74:
                    1f:73:ae:3a:3f:2b:73:fb:c9:9b:2b:5a:26:55:3c:
                    6d:52:d2:44:a7:cf:23:7e:00:5c:87:60:3e:5e:88:
                    ed:4e:ff:18:6a:d0:30:e8:49:70:ee:a1:b7:6c:81:
                    29:3d:ab:e7:d5:68:3b:4f:71:da:fe:a7:90:fc:de:
                    a1:ad:76:d2:e8:0f:82:a9:76:eb:d2:0c:15:c4:05:
                    0d:a5:9c:3c:dd:b4:f1:21:33:8c:be:28:ab:00:a6:
                    98:3c:5f:90:ab:b8:eb:ac:81:8c:05:a7:a3:00:ae:
                    68:ac:02:57:2e:43:6d:67:c6:b8:d5:90:83:d5:17:
                    69:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:83:31:0E:BB:26:75:E6:68:8C:0F:F5:2C:32:8B:D8:E2:89:3C:5B
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130332e31352e39362e302f32322d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:64:2c:b9:2a:5a:5c:f6:28:d6:c7:1f:2b:9a:bc:7a:dc:e2:
         07:2f:33:e1:25:9f:d4:e6:82:13:02:04:4e:5a:ff:d1:5c:0b:
         c6:6e:da:70:f0:06:e1:4c:a3:27:0a:02:d0:f1:98:68:ca:6f:
         4e:14:40:59:de:ed:ee:4a:c2:43:21:8a:32:ce:00:72:41:98:
         6b:49:74:f5:44:f5:ba:36:6a:73:f8:bd:88:a0:fb:32:8c:b7:
         0e:10:06:aa:a3:f5:1c:00:80:f9:1a:00:97:18:33:7b:46:c6:
         2d:b9:30:a6:5e:5e:2e:f5:1e:79:5f:7e:5a:6e:43:8f:6a:ba:
         c9:3a:a4:40:ff:10:f7:7b:24:84:c8:f0:50:31:16:2e:b2:e7:
         d5:94:b3:28:e6:38:2f:f1:05:c4:37:9b:2e:a7:a6:34:ae:87:
         e6:b9:ea:fe:ef:a6:bc:52:51:7e:18:4d:27:32:69:f0:e7:7c:
         1d:79:00:ff:3c:7a:0f:cd:e9:85:a0:20:ad:23:a5:15:18:ba:
         15:9a:13:5d:cf:c2:b6:3d:7d:e9:e0:77:61:12:5d:ca:5f:27:
         22:de:97:ed:04:cb:7f:4c:26:bb:bd:de:7e:0f:69:d0:cb:67:
         1c:1a:3e:cb:d6:90:1b:ef:b5:a7:14:9d:b5:84:84:7a:00:ab:
         05:b7:5f:ec
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUacpeIBoDCuqps/0r0dSDMCM7/qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjA1MTEwODM4MjNaFw0yNzA1MTAwODQzMjNaMDMxMTAvBgNV
BAMTKEMxODMzMTBFQkIyNjc1RTY2ODhDMEZGNTJDMzI4QkQ4RTI4OTNDNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR+dZzqONX2XJhynUeQ2HUIBoC
9/kRjhSC71Yw5oKGxomZ3ulXKAYdQktjsSR8a+fL9u6yDY6C77BqzXvbqTre+QIE
BA+InZa2OaWsTXrRnO24L6EBoLb45xf9nYSPiDDTrevVAjyHkbY3efbtZtw2ENVH
gDAejB2GsOwxR3KBrbUfLlACdB9zrjo/K3P7yZsrWiZVPG1S0kSnzyN+AFyHYD5e
iO1O/xhq0DDoSXDuobdsgSk9q+fVaDtPcdr+p5D83qGtdtLoD4KpduvSDBXEBQ2l
nDzdtPEhM4y+KKsAppg8X5CruOusgYwFp6MArmisAlcuQ21nxrjVkIPVF2llAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUwYMxDrsmdeZojA/1LDKL2OKJPFswHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMDMzMmUzMTM1
MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcPYDANBgkqhkiG9w0BAQsFAAOCAQEAR2QsuSpaXPYo1scfK5q8etziBy8z
4SWf1OaCEwIETlr/0VwLxm7acPAG4UyjJwoC0PGYaMpvThRAWd7t7krCQyGKMs4A
ckGYa0l09UT1ujZqc/i9iKD7Moy3DhAGqqP1HACA+RoAlxgze0bGLbkwpl5eLvUe
eV9+Wm5Dj2q6yTqkQP8Q93skhMjwUDEWLrLn1ZSzKOY4L/EFxDebLqemNK6H5rnq
/u+mvFJRfhhNJzJp8Od8HXkA/zx6D83phaAgrSOlFRi6FZoTXc/Ctj196eB3YRJd
yl8nIt6X7QTLf0wmu73efg9p0MtnHBo+y9aQG++1pxSdtYSEegCrBbdf7A==
-----END CERTIFICATE-----
Generated at Wed May 13 14:17:32 2026 by rpki-client