Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3230332e3130372e302e302f31372d3234203d3e203435313032.roa
File:                     3230332e3130372e302e302f31372d3234203d3e203435313032.roa (raw, json)
Hash identifier:          TzUsS7pSyn+D4yFZunVv70JQR08FdJ3fIYZThUFyx70=
Subject key identifier:   B5:75:54:07:A6:FA:D3:81:A4:28:33:67:E1:ED:E2:4A:3A:A2:ED:10
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       2980CDAF7BB9EDE879D6A6437D8C484449E4E661
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3230332e3130372e302e302f31372d3234203d3e203435313032.roa
Signing time:             Mon 11 May 2026 16:31:28 +0000
ROA not before:           Mon 11 May 2026 16:26:28 +0000
ROA not after:            Mon 10 May 2027 16:31:28 +0000
asID:                     45102
IP address blocks:        203.107.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:80:cd:af:7b:b9:ed:e8:79:d6:a6:43:7d:8c:48:44:49:e4:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: May 11 16:26:28 2026 GMT
            Not After : May 10 16:31:28 2027 GMT
        Subject: CN=B5755407A6FAD381A4283367E1EDE24A3AA2ED10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:ce:74:66:a9:a1:3e:cf:69:76:05:86:ff:
                    3b:10:3f:7d:e0:de:38:58:ee:10:04:29:35:9c:c5:
                    ee:9a:25:1f:16:1e:5c:8d:2f:9f:1e:f3:ff:f4:a5:
                    15:aa:2a:a9:8e:6c:51:55:03:4e:41:8e:1e:52:14:
                    a7:ab:62:1c:5a:bc:0d:9c:e7:58:f7:ae:5d:bc:d1:
                    83:21:95:c6:0e:df:b0:6f:c6:2e:62:77:a0:76:b9:
                    a2:34:02:c4:15:e8:7e:1f:0b:58:09:40:03:da:8f:
                    04:bf:61:ee:2c:72:00:f0:43:c1:d7:ea:87:84:08:
                    01:f7:9c:6a:57:1e:60:aa:d6:28:91:da:11:97:82:
                    fa:0d:d0:f6:56:c7:fa:4e:5a:fd:15:21:62:91:68:
                    98:66:26:be:62:a8:f9:10:4b:81:29:54:d3:d7:a8:
                    ca:aa:cd:fd:50:8f:75:3f:26:16:a4:8e:d8:c1:81:
                    68:31:77:cb:52:c6:b5:2b:e8:70:50:48:44:82:06:
                    3a:40:d6:93:33:35:02:16:be:0c:9b:65:3b:bf:26:
                    ee:f9:03:64:5b:84:be:47:82:b3:da:47:82:de:d4:
                    9c:ab:32:f8:3d:42:62:e7:a1:a5:29:a6:3f:63:16:
                    96:b1:f5:67:6c:9c:4e:05:29:6f:9d:3c:79:da:47:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:54:07:A6:FA:D3:81:A4:28:33:67:E1:ED:E2:4A:3A:A2:ED:10
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3230332e3130372e302e302f31372d3234203d3e203435313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.107.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:c0:cc:02:e1:ce:3d:f5:1e:32:3d:49:07:be:51:32:1d:
         14:65:f4:41:77:4a:3d:34:c0:28:65:a6:6a:c4:2b:45:41:b5:
         dc:1d:43:ac:0f:44:b4:ec:66:46:66:3a:b4:a0:36:b4:9b:0a:
         15:fb:5a:57:7a:bc:32:cb:fd:24:c9:57:cc:03:2a:eb:ae:89:
         70:e9:46:71:9b:60:5a:f8:3a:b8:1d:03:1c:2f:64:f5:11:1d:
         a0:ed:9c:4a:c9:ea:64:25:95:74:4e:97:58:a2:16:51:2a:5d:
         5c:c4:ae:40:7e:27:a6:b7:dc:db:a0:46:d4:03:57:be:3a:41:
         29:b2:52:3f:13:fc:7b:ab:ab:fc:10:78:17:50:5b:63:a3:ef:
         2b:5c:ff:92:e8:2e:88:0d:7c:a9:96:0a:a8:98:3a:1c:e0:eb:
         46:69:18:a5:62:fc:da:4f:57:5e:c5:78:83:33:4d:e7:8b:45:
         fe:3c:1a:0d:36:85:d9:5e:e7:6c:05:f2:b9:ab:b0:91:03:9c:
         4f:4d:56:73:6d:2b:a1:65:22:f0:a1:3a:f2:cf:a8:df:e9:04:
         b4:dd:42:8d:da:53:c9:55:6f:cf:46:ff:73:69:b2:4c:c2:59:
         8a:3d:81:ec:86:24:6a:01:34:8a:e9:70:2b:85:f5:5b:35:64:
         5f:1d:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:37 2026 by rpki-client