Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e36342e302f31392d3139203d3e2034383038.roa
File:                     3130332e3231332e36342e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier:          5RjjrMRBQ2pFXDjBDWykiUlOIHcfYH7fxePxF1vJKHU=
Subject key identifier:   65:23:BF:D0:76:CA:08:FA:9C:F7:B3:45:DE:BE:9A:DE:37:68:FC:7D
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       34FA5EAAA5BDF16B723372AA45658F0F7EA81C59
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e36342e302f31392d3139203d3e2034383038.roa
Signing time:             Tue 12 May 2026 08:22:31 +0000
ROA not before:           Tue 12 May 2026 08:17:31 +0000
ROA not after:            Tue 11 May 2027 08:22:31 +0000
asID:                     4808
IP address blocks:        103.213.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fa:5e:aa:a5:bd:f1:6b:72:33:72:aa:45:65:8f:0f:7e:a8:1c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: May 12 08:17:31 2026 GMT
            Not After : May 11 08:22:31 2027 GMT
        Subject: CN=6523BFD076CA08FA9CF7B345DEBE9ADE3768FC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:7b:9b:9b:7d:a9:2b:a3:d2:6b:b6:03:1c:
                    e4:bc:1b:95:0f:e5:91:40:78:7b:0c:9f:b6:b0:5b:
                    f3:c2:84:03:e8:51:33:34:d4:6f:b7:7f:06:e9:89:
                    61:b3:1e:5b:5f:f3:f4:93:fa:7e:07:82:39:dd:d2:
                    6f:ca:13:50:ac:ae:c7:92:ca:5e:03:c3:96:23:f6:
                    63:db:66:56:48:21:c5:82:3f:ab:16:d3:63:e1:f0:
                    e9:d0:d6:0b:e8:b3:b7:96:3b:1b:a3:48:b1:d1:b4:
                    bd:08:66:f8:97:34:18:7f:f2:b7:54:d6:d8:32:bf:
                    25:e5:3d:e3:17:21:26:21:9c:1f:8b:ab:4d:13:a5:
                    3d:d9:aa:e8:14:e8:31:06:03:66:66:67:09:f7:2e:
                    51:4b:37:2b:65:8c:47:1d:af:91:64:05:76:f9:b9:
                    e1:a5:42:4d:92:b3:fc:33:51:35:f8:23:a2:4f:a9:
                    5f:fa:fd:e1:d6:d3:a7:20:71:a3:cf:22:41:ea:2c:
                    6a:a3:91:4d:c3:50:e9:0e:72:6e:57:35:d6:61:de:
                    c3:f4:ba:b1:b9:fc:4a:e9:1d:6f:50:ba:5f:ba:8e:
                    2b:4b:4c:aa:07:60:e6:12:db:c8:2d:c7:06:c3:56:
                    55:b9:0e:3c:c3:06:6d:ab:e6:3f:4d:6f:6c:21:19:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:BF:D0:76:CA:08:FA:9C:F7:B3:45:DE:BE:9A:DE:37:68:FC:7D
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e36342e302f31392d3139203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:1d:a0:08:6e:81:39:b7:4f:34:86:df:9f:43:21:0d:21:
         1f:60:ae:6b:80:d7:68:07:6a:85:21:7b:3b:07:90:7e:6d:33:
         ef:50:81:e5:73:d9:5f:f1:fe:4c:d3:77:4e:c4:a2:b7:64:3a:
         30:de:cc:77:96:2b:22:d6:19:be:7f:52:d7:69:b3:6c:4a:fd:
         5f:9c:04:73:bd:33:0d:5d:bf:8d:e2:ce:75:80:b9:e2:32:b9:
         c0:e7:19:e6:d8:0d:ef:2f:2f:e3:4a:ea:93:c2:c4:36:85:86:
         3d:79:e2:79:a4:d6:87:a8:01:a0:17:af:66:36:d9:b1:a3:08:
         4a:f6:af:22:8f:68:f4:a5:ab:7b:75:a3:fb:d1:8a:cd:7d:73:
         9f:3b:29:4b:a8:6d:7c:75:c4:6c:c5:13:c1:d5:51:33:dd:48:
         43:f4:2b:47:5b:b9:5d:7f:0f:6b:98:d6:6f:1e:39:91:70:29:
         d7:94:2c:33:78:3a:fa:84:be:30:8e:00:38:68:7a:58:a0:b5:
         4d:86:5a:0c:ef:20:dc:e8:ba:a3:ee:9a:2b:0b:1d:32:20:f3:
         94:97:5a:0d:05:0d:99:33:2b:a7:39:09:c7:c4:83:bb:dc:2c:
         53:79:dd:be:08:58:4d:0c:09:55:1a:cc:13:88:29:21:86:a4:
         6a:59:a8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:44 2026 by rpki-client