Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233342e302f32342d3234203d3e203536303436.roa
File:                     3130332e31392e3233342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          S2authncQF+P+8wjn/XyrmIoJ43F7+cKb34LevXK1Wo=
Subject key identifier:   43:1D:56:55:56:86:66:3A:93:36:12:EF:F3:C8:03:5C:0A:25:7A:E5
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       5674840F83936566DB45484B6D25B7962C6DACEA
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233342e302f32342d3234203d3e203536303436.roa
Signing time:             Fri 18 Sep 2026 01:26:53 +0000
ROA not before:           Fri 18 Sep 2026 01:21:53 +0000
ROA not after:            Fri 17 Sep 2027 01:26:53 +0000
asID:                     56046
IP address blocks:        103.19.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 09:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:74:84:0f:83:93:65:66:db:45:48:4b:6d:25:b7:96:2c:6d:ac:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Sep 18 01:21:53 2026 GMT
            Not After : Sep 17 01:26:53 2027 GMT
        Subject: CN=431D56555686663A933612EFF3C8035C0A257AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:86:cd:0e:d5:58:fb:df:9b:5d:4c:25:bd:
                    3e:f2:8f:6b:cb:2f:61:32:91:52:c5:38:ed:d4:bd:
                    be:3e:95:bb:d8:a2:87:b2:77:39:c9:f9:c3:6f:95:
                    40:78:f5:1d:b0:02:28:ad:c2:08:fb:84:b2:3f:de:
                    d6:19:ff:81:e5:bb:4a:5c:ff:e5:cb:e9:4e:5e:16:
                    1d:41:4f:f1:33:6d:71:88:71:88:f0:4b:3e:01:cb:
                    9e:f3:c2:9a:73:10:22:cc:d8:71:a5:97:40:ab:53:
                    39:7e:9d:e4:2a:44:e2:37:1b:0b:62:63:03:96:f8:
                    99:0b:5c:21:1d:17:d1:ad:85:5c:56:64:e5:5a:b7:
                    ec:68:00:4c:7e:b4:27:bc:66:ed:75:c7:96:6a:a7:
                    43:fc:45:d8:0c:8e:5d:f2:19:b8:50:25:11:ad:83:
                    01:71:d0:94:0d:19:f8:62:02:9e:c3:a8:1e:73:ca:
                    ff:85:d8:22:62:38:42:64:a8:d9:30:61:61:34:5b:
                    a3:aa:e7:b8:4c:b4:70:8b:99:b8:12:7d:80:6c:e7:
                    1f:97:69:b2:03:d7:b2:af:7b:5e:f1:f7:cd:0a:20:
                    73:2e:a2:44:b1:33:81:4d:13:5e:4c:3d:35:3c:b6:
                    44:af:bb:61:03:5d:54:87:6e:2b:5c:bb:f2:8f:bf:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1D:56:55:56:86:66:3A:93:36:12:EF:F3:C8:03:5C:0A:25:7A:E5
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e31392e3233342e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:91:01:8d:12:61:1e:17:d1:a1:02:f9:19:85:02:b3:4e:d2:
         c9:49:44:8d:5d:f7:9e:0c:ad:ba:e3:8d:0a:5d:45:d0:a7:05:
         89:a0:00:3b:28:f5:94:2f:4a:3f:ec:1c:fe:73:b1:1d:56:26:
         1b:8f:17:a0:7d:7a:8d:30:ff:b6:03:b0:83:c9:4e:80:46:ba:
         4b:08:f2:24:68:49:b9:63:aa:e3:58:dd:66:71:5c:75:67:cb:
         23:ec:46:86:87:c1:7b:24:39:a4:5e:11:6b:aa:87:86:12:b8:
         f7:a2:73:ac:08:33:9a:1f:db:f7:63:5a:0a:f6:ac:9f:34:28:
         49:f8:c2:31:5f:d0:6c:a3:e5:7f:7f:96:ed:3c:0a:3f:c5:c1:
         71:a7:d3:5a:40:d6:fb:31:2c:a3:09:97:5c:3e:ec:69:0a:a8:
         9d:69:2d:d7:68:7d:d4:c0:6d:d6:a9:f2:88:7c:d0:f2:68:33:
         3f:87:ca:f0:96:3a:9d:5b:1c:d1:6b:bd:53:8b:ee:4a:0d:bf:
         dd:91:f1:25:70:58:7a:f6:d1:2e:8e:f2:17:e7:40:2d:a3:23:
         ef:be:5c:f9:73:5d:f7:ea:2b:64:01:46:a9:a2:90:1c:1c:f2:
         a3:ba:41:ce:d6:0f:31:9d:65:1a:8d:1a:ba:ed:ef:6d:6b:09:
         30:8e:27:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:04:47 2026 by rpki-client