Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa
File:                     3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa (raw, json)
Hash identifier:          qzksNBoqmy2lMtZScdS/0RStTiDB+RJTNhrDYjSfPp8=
Subject key identifier:   BD:BC:E4:19:AC:9E:7E:EE:7E:03:18:E2:2F:46:A8:D4:32:10:92:0F
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       64FFBC09B1BC36B985731486A3E009E8A1BAC6CC
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa
Signing time:             Mon 11 May 2026 02:33:25 +0000
ROA not before:           Mon 11 May 2026 02:28:25 +0000
ROA not after:            Mon 10 May 2027 02:33:25 +0000
asID:                     56048
IP address blocks:        103.238.160.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ff:bc:09:b1:bc:36:b9:85:73:14:86:a3:e0:09:e8:a1:ba:c6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: May 11 02:28:25 2026 GMT
            Not After : May 10 02:33:25 2027 GMT
        Subject: CN=BDBCE419AC9E7EEE7E0318E22F46A8D43210920F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:de:3c:09:8c:d0:e3:c7:1d:32:32:8b:70:
                    12:29:cd:a3:da:60:13:4b:56:87:fa:8d:e7:6c:54:
                    a5:75:23:aa:f6:64:e6:06:52:fc:27:c9:ed:55:fc:
                    fd:46:8f:7a:d0:ba:e8:4a:ae:f0:94:e6:3e:65:bc:
                    04:74:57:2b:f9:82:73:ca:6c:93:2c:61:a5:a7:0d:
                    cc:56:71:1c:f3:c6:b8:3c:b4:4e:76:bc:69:7b:e7:
                    97:57:cb:da:eb:4e:d7:a9:8a:6d:c3:43:cb:29:81:
                    98:dd:4c:46:bf:a2:f6:bf:5c:72:b7:90:ce:31:4b:
                    cd:77:e0:fb:f5:35:0f:07:17:1a:7d:ad:b0:8e:63:
                    c8:32:5a:0b:d4:8c:e3:fd:cc:8d:d8:72:b8:6a:42:
                    9e:51:9b:5f:e9:56:dd:2e:d2:fa:6c:3f:0d:19:2f:
                    79:09:2a:82:72:cc:ae:b1:fd:4f:db:05:c3:d0:8b:
                    c8:97:9d:3a:6f:45:02:a5:01:91:d3:a5:3e:a9:5b:
                    63:f8:78:31:31:15:eb:40:ed:ab:f6:df:bd:3a:8c:
                    5c:60:f0:a2:30:12:9c:07:51:25:96:b8:26:4b:c7:
                    69:26:1c:9f:d9:a2:5b:56:55:a9:52:f5:4e:63:5c:
                    a6:e0:7f:96:fc:60:0e:97:87:6d:d2:8f:9d:9a:ae:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:E4:19:AC:9E:7E:EE:7E:03:18:E2:2F:46:A8:D4:32:10:92:0F
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e3136302e302f32332d3332203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:5b:b3:cf:c7:bb:ee:3a:18:33:9b:2f:a3:61:4f:dc:5e:
         7d:5e:89:37:e4:9e:21:d4:ea:64:a4:05:d5:a7:9c:da:b3:63:
         2e:59:c4:ef:74:6b:bb:87:4d:f6:cf:65:23:ac:43:15:91:1e:
         b8:88:35:6f:92:4d:2d:37:71:c8:f4:77:ee:ca:09:f4:0f:1f:
         51:dd:82:ee:24:bb:f6:79:05:22:ac:db:30:9d:4b:fa:4c:60:
         44:53:c3:ae:c6:c8:04:54:9b:3c:45:2d:1c:ff:d3:0c:78:a9:
         07:e0:6e:30:c7:cf:13:c6:93:f0:40:12:b4:9b:0b:24:0c:76:
         aa:70:e4:1c:b2:c1:f0:54:d8:2f:f0:94:8b:83:9b:0d:ac:47:
         7b:1b:9a:4e:77:a5:bf:09:a2:96:ef:eb:ab:24:03:c1:44:d3:
         45:a8:ac:fb:fb:27:95:bd:cc:8d:92:a1:0e:8b:b7:4d:9f:e5:
         23:42:4a:92:35:b7:67:76:5c:d2:5e:42:e6:d6:c8:5b:98:4c:
         99:a7:69:6f:25:29:36:0a:8d:55:12:ba:a2:cf:cf:d6:32:06:
         59:7f:8b:ff:d3:63:34:27:0d:a3:06:e5:c2:4a:54:d6:dd:cf:
         81:1e:a7:c0:c0:8d:4c:2d:1f:2e:1a:61:56:cb:37:21:9f:06:
         46:8c:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:20 2026 by rpki-client