Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34352e302f32342d3234203d3e203538343636.roa
File:                     3130332e3231352e34352e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          XkU0YtFgShSzOo20rJdwEEfkrJVTk7yy7dqNfbR4/fo=
Subject key identifier:   F1:6B:DD:2F:DF:2B:D2:53:1B:DB:EA:04:3F:B7:F4:5E:CF:CD:BE:8D
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       0F4CEFEDA8B6BBC80C19069631ED49B4CA055158
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34352e302f32342d3234203d3e203538343636.roa
Signing time:             Fri 08 May 2026 08:35:46 +0000
ROA not before:           Fri 08 May 2026 08:30:46 +0000
ROA not after:            Fri 07 May 2027 08:35:46 +0000
asID:                     58466
IP address blocks:        103.215.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4c:ef:ed:a8:b6:bb:c8:0c:19:06:96:31:ed:49:b4:ca:05:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: May  8 08:30:46 2026 GMT
            Not After : May  7 08:35:46 2027 GMT
        Subject: CN=F16BDD2FDF2BD2531BDBEA043FB7F45ECFCDBE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:64:d9:47:f3:f0:f4:e3:a9:90:45:6c:9a:
                    5a:e7:0f:b9:10:4a:55:d2:a2:b6:f5:69:d3:a9:a5:
                    25:54:a7:e4:ea:c7:b9:74:38:9f:c1:1f:5c:e2:5b:
                    7a:41:87:d2:fb:c7:19:98:13:90:4f:38:02:b1:31:
                    ee:76:bf:3a:27:41:dd:fc:62:ed:64:62:9b:62:5d:
                    49:4d:25:b5:a3:93:22:18:49:f0:d1:4d:17:81:80:
                    3d:ce:11:d4:4d:ad:c4:7c:69:a4:a1:36:a9:13:2a:
                    5b:9b:99:4e:01:a4:85:0b:16:ab:76:7b:b1:6d:53:
                    93:db:f1:33:ca:92:42:5b:af:f2:f1:ca:f5:0b:58:
                    d7:28:c5:ef:e8:b2:8f:43:18:c1:fc:96:43:5e:23:
                    55:0a:b2:a5:93:d0:bd:5d:a8:58:62:2e:8f:24:30:
                    c5:f0:37:96:94:ae:8d:9b:4e:cd:03:c6:cd:23:e5:
                    b0:6c:ad:ba:50:9a:d3:3c:dd:ad:a5:18:b0:ae:48:
                    0c:30:59:6a:dc:c4:2d:b3:2e:b7:ce:24:67:77:7d:
                    a3:b1:c8:41:93:fd:a8:e3:79:dc:39:35:82:d2:b9:
                    b6:1c:f6:90:08:61:b3:d5:b3:09:e3:da:68:f8:7e:
                    0d:b9:17:96:2d:60:77:9a:37:8c:d8:11:fa:54:27:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:DD:2F:DF:2B:D2:53:1B:DB:EA:04:3F:B7:F4:5E:CF:CD:BE:8D
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34352e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:32:3b:17:e7:d7:3c:d2:f0:4f:b7:e5:1d:3f:50:f8:e1:
         4b:37:38:d8:b3:0b:4f:71:49:b8:3e:51:32:1b:e7:af:99:89:
         9e:df:43:0f:e2:e0:94:e4:93:75:e6:28:3c:2c:ab:96:32:cc:
         d2:64:cc:fe:9c:e7:77:52:85:a0:20:90:f8:13:03:d4:c1:c2:
         3e:23:c6:5b:e9:d9:2c:7e:e1:38:9a:5d:24:b1:4c:28:48:19:
         d9:c6:1f:32:4c:84:06:e9:a8:bb:14:ba:3f:da:cb:37:4f:fd:
         96:15:3d:4b:1b:0a:4b:28:3b:72:e3:eb:04:64:bb:4c:be:4c:
         96:79:b9:69:55:2c:59:19:d3:e8:10:ee:bd:88:06:7d:41:87:
         82:9c:5e:cd:e3:5b:43:35:62:6a:1d:3e:47:b7:f8:71:60:1a:
         f2:a0:8a:af:a6:e8:f9:15:13:a4:c1:01:d8:02:b3:30:b9:6a:
         45:4d:3a:c0:e3:a8:48:ca:f5:4a:90:0b:de:b0:dc:bb:b0:8e:
         88:c7:24:6c:5e:07:ae:64:15:66:36:8f:46:63:9d:e3:86:5d:
         bc:54:1c:91:90:37:1d:7e:22:40:9b:96:ed:51:8a:ab:02:73:
         b5:6f:d2:1b:f8:bd:12:1e:f3:c4:cc:44:52:a1:b0:25:7d:43:
         08:66:45:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:34:11 2026 by rpki-client