Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130362e332e31362e302f32302d3230203d3e203233373234.roa
File:                     3130362e332e31362e302f32302d3230203d3e203233373234.roa (raw, json)
Hash identifier:          lvmeZtZf9nsEoRffragC1Fgvf+5zk0SVEPBQog6hscM=
Subject key identifier:   1F:7B:1C:DA:DF:06:37:4F:FE:BB:F1:F6:5E:8F:F7:5E:2E:50:61:78
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       6F2F4F40D6C7C1117D5AD0CC40E986A5C5531EA5
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130362e332e31362e302f32302d3230203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:54 +0000
ROA not before:           Tue 12 May 2026 08:29:54 +0000
ROA not after:            Tue 11 May 2027 08:34:54 +0000
asID:                     23724
IP address blocks:        106.3.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2f:4f:40:d6:c7:c1:11:7d:5a:d0:cc:40:e9:86:a5:c5:53:1e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:54 2026 GMT
            Not After : May 11 08:34:54 2027 GMT
        Subject: CN=1F7B1CDADF06374FFEBBF1F65E8FF75E2E506178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:d0:77:48:cb:92:ad:a6:74:d4:6f:64:1e:
                    68:22:94:aa:95:f6:2d:68:b4:81:74:6d:2a:f0:ae:
                    21:62:04:93:7a:52:e3:7e:31:9d:58:83:a1:8a:6a:
                    a2:69:86:c1:04:fe:8a:e0:b7:ae:58:de:94:2f:a7:
                    28:0b:c8:d4:cb:59:97:a1:6e:ec:09:1f:51:d9:11:
                    66:67:d4:d4:5a:c9:cf:09:bf:f8:5c:94:72:4b:a3:
                    c9:27:65:10:e6:b7:4a:8f:a0:1a:51:73:68:95:dc:
                    eb:a1:c3:da:e2:98:18:f9:3b:69:53:38:d0:af:f9:
                    d1:29:99:9a:ea:da:e5:53:5a:64:e5:fd:15:9d:8e:
                    f9:65:76:a6:ac:95:fa:ed:e7:74:c8:35:44:c4:a9:
                    2e:a1:bd:3d:93:ed:07:b3:60:47:ff:b3:a8:fe:5a:
                    0a:44:f6:3c:ad:69:bd:b3:09:43:fe:b3:c0:30:f7:
                    71:8d:02:13:54:d3:ac:39:61:1a:7a:53:24:90:a1:
                    63:10:37:31:20:fb:0e:ae:68:e1:ef:e6:6b:48:e0:
                    7b:04:69:a7:0d:df:cd:3f:7a:ec:be:a6:ff:51:dd:
                    bf:63:d9:b7:64:a3:54:d3:00:91:89:3c:81:a2:39:
                    a7:93:39:40:b7:14:91:d8:37:53:04:f4:db:c2:c8:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7B:1C:DA:DF:06:37:4F:FE:BB:F1:F6:5E:8F:F7:5E:2E:50:61:78
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3130362e332e31362e302f32302d3230203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.3.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:59:b6:e9:7c:f9:91:22:31:e7:c5:0e:0c:c4:7c:63:3a:ed:
         1d:83:40:73:e8:b6:60:ce:53:62:ee:cd:cd:62:34:59:a7:21:
         18:64:1e:99:23:17:43:e5:24:fe:2b:af:04:dd:2d:bc:94:94:
         04:d8:23:67:ae:1b:3c:54:61:e2:8f:bf:c9:4b:ab:a7:84:f4:
         d4:fd:de:79:53:b1:d1:2e:90:e3:11:47:13:92:5a:7c:d9:7b:
         27:33:0c:f0:b9:97:08:ec:32:e8:7f:cb:9c:86:9a:60:b4:7d:
         0d:95:7e:27:14:a3:af:dd:55:75:14:6f:d9:ec:93:bb:96:07:
         5c:19:aa:ed:c2:a1:2b:0d:e7:9e:0d:be:6f:2e:fe:b0:17:f3:
         c6:41:4a:6d:e9:ea:82:cf:ca:14:4e:7e:1e:af:28:67:80:01:
         4e:02:04:b2:81:0c:f1:de:9a:e4:7b:f1:22:31:b4:61:ba:17:
         10:4c:6e:ec:72:d1:c8:3c:ac:f0:90:f3:49:84:af:26:66:33:
         0a:ab:97:cc:85:7a:cf:59:30:6c:82:f0:5f:ba:2e:9d:90:5b:
         7f:86:48:73:3d:c6:9d:f9:4a:cf:03:e4:ed:cd:f8:81:ae:a9:
         09:bf:56:ee:4f:d5:f0:40:12:be:b4:54:bd:43:6a:8d:7e:da:
         fc:26:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:47 2026 by rpki-client