Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e35392e3131362e302f32322d3332203d3e203536303436.roa
File:                     3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier:          z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=
Subject key identifier:   66:AB:E4:F6:63:A1:02:40:6E:28:2A:5F:B9:EF:E6:5A:ED:11:EE:04
Certificate issuer:       /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Certificate serial:       6F88E6DA5106F3671205EAB7E52014801E8F89A9
Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e35392e3131362e302f32322d3332203d3e203536303436.roa
Signing time:             Wed 15 Apr 2026 07:52:55 +0000
ROA not before:           Wed 15 Apr 2026 07:47:55 +0000
ROA not after:            Wed 14 Apr 2027 07:52:55 +0000
asID:                     56046
IP address blocks:        103.59.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:88:e6:da:51:06:f3:67:12:05:ea:b7:e5:20:14:80:1e:8f:89:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
        Validity
            Not Before: Apr 15 07:47:55 2026 GMT
            Not After : Apr 14 07:52:55 2027 GMT
        Subject: CN=66ABE4F663A102406E282A5FB9EFE65AED11EE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:08:47:66:ba:31:78:ed:42:29:f7:b4:56:f4:
                    26:c0:81:f8:a9:bf:23:5f:29:9f:c6:93:0f:79:4e:
                    14:77:38:06:da:ce:10:08:5d:50:ff:23:bf:43:b7:
                    20:99:e4:0f:ac:c1:6f:27:2e:a1:b4:ee:56:92:e6:
                    69:c5:60:e4:59:74:0c:af:6f:a9:f9:9f:7d:4b:4a:
                    d5:4a:1b:6b:f0:d1:02:57:cd:84:b4:fd:d9:75:f0:
                    be:a2:61:86:99:c6:85:55:9d:00:4f:0b:df:73:97:
                    cf:0b:49:81:06:f8:42:6a:b1:b9:c9:1e:e2:12:f9:
                    c9:d9:6b:bd:01:e3:1c:e2:e1:c8:16:6e:6e:16:1e:
                    4e:d2:f9:72:8f:be:bd:48:90:ec:eb:89:05:9a:cd:
                    8e:19:f4:c2:1e:50:3b:73:68:cf:4e:1a:d9:56:52:
                    05:8a:b6:d5:0d:7d:be:ff:48:c7:4f:72:2f:ad:d4:
                    90:70:53:36:14:91:8d:fc:73:43:d6:95:0c:86:62:
                    2a:10:2b:d7:e2:5f:00:a0:cb:8c:29:c9:82:4c:fa:
                    8b:08:b0:dd:90:f9:39:51:10:5f:9f:d1:cc:c2:74:
                    23:39:df:9e:dd:e2:e5:30:22:a7:96:d7:9b:b5:5d:
                    3d:22:bd:3b:21:bf:03:4d:f2:61:48:37:7b:76:d5:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AB:E4:F6:63:A1:02:40:6E:28:2A:5F:B9:EF:E6:5A:ED:11:EE:04
            X509v3 Authority Key Identifier:
                keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e35392e3131362e302f32322d3332203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:e5:29:01:1e:8a:57:7b:a0:ec:69:e6:15:90:f8:e6:15:6d:
         21:50:bc:5b:54:ef:81:60:7a:fa:b1:39:f0:7f:ab:19:d5:2a:
         03:a6:57:ed:64:37:71:e5:d8:71:8d:e4:20:26:45:f9:39:02:
         6b:14:a4:1b:19:db:d8:ae:01:84:ad:a8:a1:2a:9a:f3:94:c7:
         77:38:cf:4b:31:9a:d7:65:b7:7f:10:11:bd:df:6c:bb:fe:23:
         d6:05:93:42:48:61:43:11:bb:fe:9e:35:66:82:b4:e3:a4:17:
         b9:bf:07:8c:fb:4b:5b:bb:40:25:49:b3:05:89:19:e9:a5:b1:
         ea:0d:df:b6:22:10:16:c4:6c:89:e4:11:40:c6:47:36:bc:7a:
         8c:9f:21:9e:59:f1:43:44:35:0a:32:a0:9f:9b:ce:18:98:e8:
         a7:c7:74:9a:86:95:b1:11:f9:c1:60:7b:e1:91:6d:bf:9e:1e:
         5f:97:5e:bf:d1:c3:4a:12:12:2b:f3:38:a5:ad:c2:df:c5:ec:
         0e:24:cd:fe:e9:27:25:4c:ed:42:4c:99:0c:67:ea:5e:f8:a0:
         72:6d:46:9e:dc:5b:a2:05:fc:4e:b0:42:e3:22:93:10:c3:35:
         7a:4c:5a:4c:56:e2:62:f0:5e:8b:92:42:e9:30:e4:85:42:61:
         e0:f2:60:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:49 2026 by rpki-client