Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130332e35342e35302e302f32332d3233203d3e203536323832.roa
File:                     3130332e35342e35302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          kteh+/dH58X8lyJpG5LrKUJ5HrTXpY5jYizwIbecsQs=
Subject key identifier:   2C:5A:73:06:6C:DE:24:9D:3E:E1:BB:11:53:6D:A3:B1:04:7C:E2:1F
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       7B143F785E517B8E0C7D2DB5E25CFAD3794948C4
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130332e35342e35302e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     56282
IP address blocks:        103.54.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:14:3f:78:5e:51:7b:8e:0c:7d:2d:b5:e2:5c:fa:d3:79:49:48:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=2C5A73066CDE249D3EE1BB11536DA3B1047CE21F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:8e:be:36:79:69:69:1c:ac:8b:06:0b:c1:
                    aa:9a:d0:d1:69:1e:b4:11:31:03:81:a6:29:63:27:
                    84:7a:be:30:12:d2:fb:f3:b4:80:4b:c4:09:08:31:
                    9c:b5:c6:59:9e:a6:5e:f8:c8:b0:5f:f2:fa:f5:75:
                    33:59:bf:0f:b5:4b:59:9a:b1:5d:6a:ea:3f:7e:55:
                    49:71:5a:11:82:69:8d:8c:ae:7a:09:35:5f:a4:63:
                    51:bc:db:40:cc:b9:47:3d:4f:87:65:e6:ad:de:e0:
                    2c:e5:58:07:f4:39:da:2e:07:6d:82:47:dc:ec:41:
                    4c:69:a5:c7:4f:3a:5e:1f:43:f0:38:80:28:25:41:
                    ba:7a:f8:8b:d7:38:46:a9:d2:6d:bb:aa:93:ee:8c:
                    05:d6:27:ad:81:6a:bf:f5:98:a0:fc:c1:17:62:2b:
                    1c:ac:2a:65:67:90:a3:99:01:11:92:f9:1d:3e:c3:
                    06:f3:9f:b3:ee:cf:09:66:e9:a8:df:c1:2d:d4:80:
                    1f:63:a3:9b:3d:98:07:c7:ed:06:7d:7f:d4:c1:e5:
                    7a:cf:e2:99:34:1f:4c:57:f0:08:b2:fa:d6:f5:f4:
                    59:77:fd:80:28:1d:c6:7d:d0:2b:c9:72:09:bd:78:
                    0e:f0:89:d5:be:2e:92:a9:69:91:b5:d6:3f:92:6e:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5A:73:06:6C:DE:24:9D:3E:E1:BB:11:53:6D:A3:B1:04:7C:E2:1F
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130332e35342e35302e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:eb:f4:ac:a6:65:39:5b:d4:3b:1c:30:36:47:80:57:d9:
         34:da:30:05:cd:4c:63:0f:8e:b4:53:07:c6:45:61:0b:9d:fd:
         ef:a3:0f:aa:01:40:6e:34:11:89:3e:84:40:73:2f:9d:b1:5c:
         71:8a:ee:a6:14:2e:5d:50:bf:9c:65:59:16:37:1f:95:22:35:
         da:3a:c0:fc:47:b8:4b:67:d7:82:a7:20:c1:0d:1c:59:80:ca:
         f0:75:8d:83:16:22:6f:49:2e:43:a5:5f:e2:d0:85:49:cb:7b:
         c6:1a:63:2a:38:5f:01:01:8c:55:b2:bc:83:5c:b9:c5:88:f0:
         c7:70:e1:d8:d4:ae:bd:84:db:9b:b3:29:70:21:9e:49:f2:87:
         c3:27:e6:3d:7e:14:49:c2:fc:8d:1c:8c:6a:58:1f:c1:00:08:
         58:bc:b8:57:5d:1f:9a:7b:79:0a:d4:0b:7d:4b:55:81:ed:29:
         1f:04:39:73:0f:65:50:48:9d:2c:a8:ba:3a:fb:8b:24:5e:4f:
         a9:cf:a1:46:57:2e:4b:27:5c:57:e6:a6:3b:c9:08:a1:2e:30:
         29:69:62:97:18:3b:6b:ab:23:32:2e:b1:ce:bd:53:d6:15:16:
         8d:63:e7:74:7d:f4:01:b5:d4:3a:c0:f1:2f:d7:97:cc:97:8d:
         9f:1d:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:14 2026 by rpki-client