Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e37322e302f32322d3232203d3e203536303431.roa
File:                     3130332e3234342e37322e302f32322d3232203d3e203536303431.roa (raw, json)
Hash identifier:          YBTvgpZD/Sl9LIE93BPKELK8zzhu3JfsP63LJsDx5Ws=
Subject key identifier:   05:5C:A3:92:3E:62:72:F3:E8:52:13:C7:A1:50:85:10:0C:1C:BC:0A
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       56EC44BAC5175E011B9A84EDBE94EAB07499999B
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e37322e302f32322d3232203d3e203536303431.roa
Signing time:             Wed 15 Apr 2026 09:33:02 +0000
ROA not before:           Wed 15 Apr 2026 09:28:02 +0000
ROA not after:            Wed 14 Apr 2027 09:33:02 +0000
asID:                     56041
IP address blocks:        103.244.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ec:44:ba:c5:17:5e:01:1b:9a:84:ed:be:94:ea:b0:74:99:99:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Apr 15 09:28:02 2026 GMT
            Not After : Apr 14 09:33:02 2027 GMT
        Subject: CN=055CA3923E6272F3E85213C7A15085100C1CBC0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:a3:9b:9f:74:81:96:c9:f9:b5:64:76:6c:
                    4c:fa:ae:62:84:e4:17:23:76:7d:79:ec:5b:1d:1f:
                    a1:1a:d1:ac:27:32:b9:76:9c:d3:cd:8e:61:d4:b4:
                    8e:6b:36:a1:8f:7b:f6:2b:cd:6f:3a:fb:de:38:5c:
                    95:60:bc:14:e0:74:79:ad:28:b9:5a:75:21:a8:f1:
                    c6:c6:aa:f3:19:3b:70:06:54:a8:14:0e:99:ae:4b:
                    25:a0:4a:3d:0b:c9:59:2c:0d:0b:37:6b:61:bf:a4:
                    59:54:80:1d:11:1f:12:16:e3:0c:d0:11:9f:aa:da:
                    88:b2:b1:6d:08:dd:3a:86:d8:f5:1d:46:1a:6b:9f:
                    1f:12:98:60:5e:22:61:fb:07:ec:26:8c:2e:75:10:
                    ac:f6:60:ef:60:17:ae:83:09:37:7f:5e:c4:fc:97:
                    ec:97:e3:7a:dc:d8:62:29:08:cd:d3:d4:a2:03:f0:
                    2c:f6:5f:21:aa:5f:6b:5c:4a:68:c7:c0:71:76:41:
                    8c:a5:87:ba:18:68:c8:a6:d7:31:f2:b5:e4:d5:db:
                    e4:14:50:57:23:e6:4d:06:c0:39:79:47:c7:66:59:
                    88:0c:ff:dd:dd:0e:f2:9d:c8:d0:c9:12:67:48:e8:
                    d8:2b:52:91:b7:8c:6b:28:07:4b:71:68:86:b9:55:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:A3:92:3E:62:72:F3:E8:52:13:C7:A1:50:85:10:0C:1C:BC:0A
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3234342e37322e302f32322d3232203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:55:9a:b7:dd:09:2c:14:7b:a7:7e:a0:96:8f:c9:f0:95:cc:
         cc:85:cd:0e:da:84:f2:03:20:a8:ea:9b:70:b0:90:fe:5e:61:
         77:f7:85:0c:02:f6:3f:70:0c:cb:5c:2f:a6:b8:13:3c:cd:d1:
         09:c5:4f:25:7d:87:50:f0:01:9b:66:14:bf:7b:03:1e:93:5e:
         81:a4:58:d2:69:76:c5:81:50:ee:d9:28:0c:ac:ee:af:76:03:
         d1:c7:95:b3:16:55:a1:46:1e:af:57:e3:4a:4d:0c:50:6e:17:
         07:fa:07:01:bb:ed:d4:51:75:e8:9d:b6:ba:c5:db:50:38:be:
         48:10:82:fb:a3:8e:c4:3b:fa:8f:a6:c0:cd:96:dc:5e:39:5a:
         25:1d:67:27:91:3a:0b:68:32:33:0c:7d:87:ae:c7:61:b0:62:
         b7:35:dd:7e:07:94:88:5f:3f:74:54:1b:fa:75:0f:9d:c0:89:
         32:63:73:24:0b:fb:d3:0b:44:76:35:15:e8:5a:73:51:e4:d4:
         15:fd:f6:a1:50:95:97:3f:72:69:9f:f2:f6:40:89:76:d3:8b:
         4e:d9:66:c0:40:0c:1c:a6:32:67:77:74:dd:04:95:90:bd:18:
         8b:b8:2c:14:f8:75:ae:28:6a:d7:22:6c:e8:b6:2c:e0:cc:4f:
         ca:8e:2c:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:13 2026 by rpki-client