Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa
File:                     3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier:          k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=
Subject key identifier:   C0:F8:37:18:3D:B8:E9:16:EE:92:09:5A:10:A4:30:35:E6:7A:D7:C1
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       3CB431F54AD6EEDA2D0C4E7EE6D8B196BE2D5EDD
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa
Signing time:             Wed 15 Apr 2026 07:22:56 +0000
ROA not before:           Wed 15 Apr 2026 07:17:56 +0000
ROA not after:            Wed 14 Apr 2027 07:22:56 +0000
asID:                     55991
IP address blocks:        103.192.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b4:31:f5:4a:d6:ee:da:2d:0c:4e:7e:e6:d8:b1:96:be:2d:5e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 15 07:17:56 2026 GMT
            Not After : Apr 14 07:22:56 2027 GMT
        Subject: CN=C0F837183DB8E916EE92095A10A43035E67AD7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1b:1d:cb:04:be:00:06:17:fc:53:1e:d0:19:
                    18:76:0f:83:df:25:7d:5b:9e:d7:a7:d3:33:5c:df:
                    c1:c2:83:84:6e:11:05:a2:5a:94:a3:26:af:5b:b4:
                    b9:11:34:68:f1:2d:43:bf:00:1f:d0:a1:ba:e2:bd:
                    46:7c:7d:bf:30:ae:f8:ca:f9:b9:e1:86:12:e8:54:
                    0b:bb:dd:d6:9e:63:90:fa:4a:50:ae:b0:f2:85:97:
                    3b:2c:b1:8a:ae:5f:ae:75:dd:1a:53:0c:74:2b:cc:
                    45:47:d8:9e:1d:91:e9:e3:7d:d3:2b:e8:37:d7:51:
                    76:63:75:69:59:59:89:88:9b:39:75:85:a5:b8:bf:
                    43:ac:cb:ad:77:1f:3e:ae:28:5a:f6:cd:ab:24:c4:
                    73:50:d7:f8:c3:04:f9:a6:47:be:a7:46:65:ec:ee:
                    b6:53:79:cf:2b:40:ea:f1:a6:a0:89:50:a4:85:31:
                    f2:6d:44:41:c6:02:e5:32:5a:cd:fd:82:18:bd:32:
                    38:74:e7:18:23:5b:71:1d:1d:12:7d:24:6c:28:a5:
                    b3:20:0c:4f:3f:f2:4d:7d:36:37:2c:e1:9c:13:c0:
                    f3:76:8d:2d:83:6e:09:20:f6:18:e7:26:70:f0:02:
                    58:5e:0a:2d:14:d2:a2:79:e0:c2:01:4c:4f:60:5b:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F8:37:18:3D:B8:E9:16:EE:92:09:5A:10:A4:30:35:E6:7A:D7:C1
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:5c:2d:c6:dd:39:82:53:07:f7:91:64:f5:81:81:ef:07:
         dc:61:eb:31:f7:ee:3b:d2:60:0d:96:a9:30:be:cb:9a:5c:2d:
         a2:04:bc:89:53:79:57:aa:d9:8a:8f:f0:6a:d8:0a:26:96:dc:
         6e:5e:98:37:8e:c3:c8:35:83:68:1b:3d:79:58:b2:77:89:88:
         f2:b4:af:30:42:b8:6a:c8:ea:41:fd:cc:e9:06:36:f7:f6:93:
         58:89:cc:96:4e:f0:6b:26:e4:76:6e:ee:30:76:06:ea:a9:64:
         49:76:04:41:1d:6a:a4:d7:59:bf:2a:83:42:e7:2e:81:f9:65:
         cc:20:ef:80:a2:66:07:b4:02:4e:e6:6a:6e:93:44:44:94:6c:
         9d:0f:e1:99:74:81:25:05:6b:d4:68:dd:d7:64:83:4d:57:48:
         43:09:11:47:86:19:d5:a1:d3:08:1e:f0:da:95:16:b1:a1:4e:
         02:68:f3:c8:76:ad:02:84:b0:90:ef:30:30:39:06:ca:18:65:
         7d:a5:1e:71:6d:e7:fa:46:82:f6:4d:fa:e5:a7:61:97:bc:aa:
         97:07:be:5e:88:02:c6:0e:40:a7:0d:f2:e1:77:e5:67:a5:5f:
         3a:3b:f9:17:ba:ab:09:32:2b:1a:c6:4b:52:a0:d6:64:20:12:
         ba:eb:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:16 2026 by rpki-client