Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e36342e302f31392d3139203d3e203633363437.roa
File:                     3130332e3231332e36342e302f31392d3139203d3e203633363437.roa (raw, json)
Hash identifier:          95Ukf/7Px4o2XdOBcVGY9C7RohWPgL62zWxf7yYjXhg=
Subject key identifier:   82:FD:99:C9:21:3C:4D:76:7E:6B:59:AD:35:D7:6B:F5:FB:79:DA:D3
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       2D1E421D57980B604A1A5F98B95CDA8E505E3762
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e36342e302f31392d3139203d3e203633363437.roa
Signing time:             Tue 12 May 2026 08:22:31 +0000
ROA not before:           Tue 12 May 2026 08:17:31 +0000
ROA not after:            Tue 11 May 2027 08:22:31 +0000
asID:                     63647
IP address blocks:        103.213.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1e:42:1d:57:98:0b:60:4a:1a:5f:98:b9:5c:da:8e:50:5e:37:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: May 12 08:17:31 2026 GMT
            Not After : May 11 08:22:31 2027 GMT
        Subject: CN=82FD99C9213C4D767E6B59AD35D76BF5FB79DAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:07:f4:51:cb:a6:ff:be:16:ea:94:c6:0b:
                    0b:88:fd:b7:02:7b:37:f4:ca:3a:5c:6a:d3:dc:0c:
                    81:f6:20:c5:9c:a0:2c:3b:23:32:cd:93:cd:1e:a5:
                    98:94:4a:3d:74:84:34:7c:41:36:e0:d4:7c:ee:e1:
                    da:fb:5b:3e:8b:ac:81:98:e9:aa:69:b8:b8:d2:80:
                    b5:a9:5a:e5:ed:39:33:10:8c:56:71:c0:32:03:c4:
                    a7:a6:0f:f0:86:44:b7:35:4a:46:20:8c:8a:31:d6:
                    a5:7f:98:84:c1:48:44:b2:22:d4:d6:a2:fa:fd:06:
                    44:7f:00:c4:16:9e:6a:c4:98:91:c0:09:a2:24:ef:
                    68:b0:c7:1b:42:d5:2a:1f:dd:75:93:95:2c:9f:76:
                    66:15:5e:eb:4c:72:35:97:61:a1:a5:63:7f:09:60:
                    d1:1b:c6:ee:c1:86:0d:a3:08:79:64:87:92:37:cc:
                    23:b7:7b:9b:43:9f:18:7a:79:36:e6:e6:50:d0:d1:
                    8b:64:75:a6:77:58:cb:d3:a2:75:f9:e0:28:6e:b3:
                    0d:b2:28:a5:9a:7e:4e:5b:ec:da:a2:c9:c3:f7:38:
                    7e:79:0c:e6:d2:d5:0c:87:17:97:34:4a:c5:6b:fd:
                    7e:65:a9:1c:dc:96:7a:7d:74:e2:bb:9d:22:63:c5:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:99:C9:21:3C:4D:76:7E:6B:59:AD:35:D7:6B:F5:FB:79:DA:D3
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e36342e302f31392d3139203d3e203633363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:13:ee:69:47:6c:1b:75:ae:0a:9c:0a:a7:e0:cb:20:3d:
         1b:09:ef:33:28:2f:a9:1c:18:63:f5:17:ba:a3:c8:1d:88:0e:
         90:5f:77:3c:b9:34:0e:de:51:4b:05:e5:b5:16:3b:76:56:08:
         52:80:39:2d:88:a1:56:ae:77:af:7b:75:d7:9d:3f:f7:07:08:
         ea:8e:7a:19:d5:a1:75:1e:06:a3:45:be:2d:79:7b:bb:db:9a:
         9a:34:3c:e6:d4:18:5e:00:33:15:21:18:d9:f9:d5:26:13:9d:
         2a:84:49:fa:87:fb:e8:13:99:96:82:42:d0:b6:11:39:b8:e7:
         01:c0:bf:93:5d:e7:7b:e6:77:cc:ba:29:d6:00:07:7a:ed:da:
         ab:80:09:7c:96:80:3c:e0:a8:b8:bb:91:fe:cb:02:9b:d3:02:
         7e:60:0e:d1:d9:f4:c9:4f:f2:b2:eb:f5:76:55:29:63:25:76:
         40:55:1a:7f:00:52:73:b3:a6:99:b5:52:5c:0c:60:66:f9:74:
         69:e5:e4:22:40:1c:45:38:87:a1:1f:64:cb:40:1b:75:4c:4f:
         13:0b:cf:d6:c8:0d:cb:c5:b4:40:c9:ae:b3:42:70:00:4b:94:
         03:af:92:1d:15:a9:2c:bc:8b:72:a2:a9:ae:90:c2:1b:d5:96:
         e6:94:ae:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:11 2026 by rpki-client