Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e203536303436.roa
File:                     3130332e36302e3136342e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier:          JGee1jbT/oJkUuUxiQKutxXa0Yh+wmoesb3hIUiU5SE=
Subject key identifier:   B1:26:8B:F1:5A:81:E6:FB:57:2A:96:02:A6:22:EC:26:11:3A:D2:B0
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       1AD08349995CDAD86DF987E5D9CDE2C939036B1D
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 08:31:42 +0000
ROA not before:           Tue 14 Apr 2026 08:26:42 +0000
ROA not after:            Tue 13 Apr 2027 08:31:42 +0000
asID:                     56046
IP address blocks:        103.60.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:83:49:99:5c:da:d8:6d:f9:87:e5:d9:cd:e2:c9:39:03:6b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr 14 08:26:42 2026 GMT
            Not After : Apr 13 08:31:42 2027 GMT
        Subject: CN=B1268BF15A81E6FB572A9602A622EC26113AD2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:79:06:e2:40:df:38:9f:5e:20:1c:f4:8f:
                    4c:2c:b3:a7:a6:02:e9:f7:68:f6:a6:a1:1d:79:6d:
                    60:b0:4a:af:b4:d2:67:9f:ba:6c:56:88:f2:f3:ed:
                    28:fc:21:af:8a:6d:99:34:f7:d7:19:d4:bd:42:86:
                    4a:99:15:fc:5a:ba:7d:61:f1:97:dc:01:d8:ba:a3:
                    e7:28:cc:ba:af:15:41:d3:60:fb:0d:05:3f:d8:a3:
                    bb:05:35:67:b6:52:b5:7f:bf:f2:74:1b:dc:51:50:
                    c3:5b:f4:34:03:e8:2c:69:fe:61:c3:78:b4:f7:68:
                    b4:6b:77:46:e8:f3:93:2b:87:bb:21:0a:cf:9c:30:
                    b3:40:f0:94:4c:4c:4a:7c:b3:fc:63:2b:b7:c7:6c:
                    5a:2e:cc:fe:bf:74:c4:bb:1c:7b:9f:0e:a8:3d:86:
                    ec:f9:20:2c:97:dd:9b:f6:97:5c:91:55:76:b9:a9:
                    84:64:87:56:99:c4:8b:cd:03:7a:77:52:a2:87:e0:
                    ff:3c:c8:74:92:7b:58:f6:1d:8b:c5:7e:d6:16:32:
                    75:ca:05:bc:64:fe:2a:7b:91:cf:0b:fe:af:6a:64:
                    db:7a:a4:3f:8d:2b:4d:ff:57:9a:88:60:26:d4:66:
                    2b:65:37:c1:63:67:b8:ba:f9:5e:38:93:c6:49:bf:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:26:8B:F1:5A:81:E6:FB:57:2A:96:02:A6:22:EC:26:11:3A:D2:B0
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/3130332e36302e3136342e302f32322d3332203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:d8:16:11:41:8d:a2:91:ac:71:a9:e5:ae:78:c6:e2:16:
         27:42:d0:77:b2:3b:d2:2d:49:35:f1:22:f5:ad:04:64:80:aa:
         1a:e3:a0:d0:36:67:93:44:4e:cd:cb:7e:75:ef:6b:e3:3d:c6:
         31:09:be:c8:48:a5:a3:df:dc:5c:e7:ea:e5:6d:6e:ad:ad:5a:
         c4:3a:87:4a:2f:6d:cf:09:22:29:16:b7:69:50:27:8d:8f:f6:
         1b:89:3c:36:df:13:65:3f:f4:a0:90:44:b4:4b:04:b1:98:a1:
         dc:17:51:50:b3:fa:b9:cc:60:19:72:f7:03:d4:22:06:8b:12:
         c6:97:85:9f:33:0d:ab:42:59:10:db:3c:b4:87:d5:eb:94:7a:
         0d:90:12:63:bf:e4:66:e7:7e:17:78:9e:ac:4e:3f:32:96:79:
         ec:c0:40:2d:39:2f:2a:90:47:fc:77:f0:78:3c:b4:69:65:13:
         be:9a:9b:de:64:21:d6:e8:d0:bd:9f:de:41:43:1a:a9:cd:07:
         41:44:f1:52:12:14:c7:f5:a9:93:49:5d:83:19:9f:85:1b:06:
         76:d5:f7:ba:91:84:8b:17:5d:59:02:1f:51:94:a2:f6:ed:e8:
         d5:e7:49:4b:24:bf:fd:6a:ca:9f:0f:20:b3:56:95:4c:fe:16:
         17:c3:c7:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:05 2026 by rpki-client