Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e2034383337.roa
File:                     3130332e36302e3136342e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier:          dZGyd9JNPLiYHO0TnfSl7bhsG5Ez1osZjPWrZetk+u8=
Subject key identifier:   1A:EA:40:95:B4:FE:72:D2:C9:C2:BF:56:3A:60:52:40:22:F5:CD:F7
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       2D5357B96D5EDA03042648394393970697567458
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e2034383337.roa
Signing time:             Tue 14 Apr 2026 08:40:10 +0000
ROA not before:           Tue 14 Apr 2026 08:35:10 +0000
ROA not after:            Tue 13 Apr 2027 08:40:10 +0000
asID:                     4837
IP address blocks:        103.60.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:53:57:b9:6d:5e:da:03:04:26:48:39:43:93:97:06:97:56:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr 14 08:35:10 2026 GMT
            Not After : Apr 13 08:40:10 2027 GMT
        Subject: CN=1AEA4095B4FE72D2C9C2BF563A60524022F5CDF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:4b:02:91:5e:8d:b2:3d:f4:7f:3b:bc:e4:
                    ef:53:df:dd:87:cf:2a:fa:c0:56:2c:60:0a:7f:89:
                    77:5b:33:84:21:14:31:49:8d:e9:f1:3e:f4:f7:82:
                    7b:0d:52:1c:34:bf:27:cd:52:b2:08:65:9d:b0:45:
                    b1:88:24:39:65:8d:c6:ff:ce:33:83:fc:f5:e7:00:
                    a8:43:64:92:b9:b8:22:db:79:76:b7:fa:3a:b9:89:
                    b9:63:21:c5:1e:a2:3b:97:9e:d7:6b:25:7e:ff:1b:
                    86:ac:c1:c3:bf:8d:4d:37:1e:fa:d6:8c:3c:eb:b8:
                    ed:40:34:c7:45:1f:5e:d5:f4:5a:54:d7:59:3d:c0:
                    40:22:64:5c:3f:a4:8f:58:b8:b1:5e:1e:4b:67:01:
                    4d:b8:da:ca:1e:ea:90:76:70:b4:5e:5f:2e:21:42:
                    54:db:31:bd:ef:e3:72:1f:53:c4:88:1d:24:b8:53:
                    fd:d9:73:b1:ad:24:be:39:f1:a9:d0:ac:14:c9:57:
                    55:e1:87:4c:7c:67:f0:41:3a:62:d1:48:ff:4e:c3:
                    8a:f2:53:da:dc:04:33:3b:2a:3b:1d:49:33:b0:da:
                    f8:5a:fc:e6:60:47:c8:1d:83:d1:f7:6c:ba:45:d5:
                    5c:4d:ba:06:bf:20:a5:4a:be:e2:88:31:be:fc:d1:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:40:95:B4:FE:72:D2:C9:C2:BF:56:3A:60:52:40:22:F5:CD:F7
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:9a:8f:c9:74:14:8f:95:4d:3e:30:31:76:8c:8f:af:65:
         31:ed:b2:c1:fb:04:e1:28:71:9e:83:ac:a3:48:b1:01:76:30:
         2b:13:cc:e6:42:77:77:2d:4c:23:d6:48:b1:55:06:a0:b2:99:
         15:25:7b:e0:a5:ba:00:b5:0c:47:07:3a:7f:72:44:87:1a:49:
         19:e5:3d:51:bb:dd:14:c6:98:f5:29:85:e0:68:e5:40:69:01:
         81:df:6e:3c:4c:ab:d1:63:f7:c5:c1:c8:6c:05:9d:2a:be:6c:
         58:a2:03:f2:28:d5:b7:71:98:35:67:8c:4d:3f:ce:99:ad:40:
         8a:c2:fc:0c:6b:6b:26:fc:97:59:d7:8c:ed:c6:64:1b:25:dd:
         7c:fa:eb:08:4c:0a:b6:a4:ca:df:c9:51:7c:3e:05:7d:fa:c8:
         2e:7b:d1:2b:33:7d:f8:70:f8:d1:06:a1:25:bc:13:c0:d5:ce:
         00:a9:32:b2:8d:44:44:ad:e4:52:19:7b:f4:bf:0d:bc:de:6a:
         c8:cf:3c:df:8b:19:df:4d:79:8d:5b:17:15:51:43:54:86:cf:
         c8:d9:ed:6d:83:b0:82:a4:a3:15:42:26:a9:65:db:3b:7f:6b:
         9a:65:3d:1b:bb:d2:00:8b:b4:e9:4a:c6:ce:c7:91:2d:2d:8d:
         d5:d9:14:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:11 2026 by rpki-client