Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034313334.roa
File:                     3130332e3230352e3235322e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          vWXcDFus5TQjX4P6g+vU+QBAoWKa8v5DLltjEs4m1qU=
Subject key identifier:   02:EE:96:44:E2:8F:1A:7C:1F:93:EC:FD:55:0C:E8:D5:AE:DF:39:B7
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       6F39131F740BC14198DDA391AEFC1C925B728241
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034313334.roa
Signing time:             Tue 14 Apr 2026 07:32:01 +0000
ROA not before:           Tue 14 Apr 2026 07:27:01 +0000
ROA not after:            Tue 13 Apr 2027 07:32:01 +0000
asID:                     4134
IP address blocks:        103.205.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 15:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:39:13:1f:74:0b:c1:41:98:dd:a3:91:ae:fc:1c:92:5b:72:82:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:27:01 2026 GMT
            Not After : Apr 13 07:32:01 2027 GMT
        Subject: CN=02EE9644E28F1A7C1F93ECFD550CE8D5AEDF39B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:2e:fc:de:b0:69:a6:03:7f:29:4d:b1:0c:
                    be:36:fc:70:1a:98:77:ff:f2:68:f4:37:5a:49:fa:
                    93:1e:d6:41:f1:b0:91:24:34:94:60:f6:22:bd:40:
                    12:f8:97:62:58:47:3d:70:fc:08:d2:b6:c7:15:1c:
                    1d:80:19:8f:87:90:43:ef:15:96:20:e6:e4:98:36:
                    2d:a1:98:af:12:13:b7:bb:58:65:d7:9e:df:20:0b:
                    02:8c:cd:19:15:ad:0f:cf:49:76:6a:bb:44:f1:3d:
                    de:e8:aa:d0:f4:49:5a:ad:be:5f:9a:15:61:a6:70:
                    10:a4:0d:9b:1a:44:8d:f1:f2:f3:7f:14:a8:c4:3b:
                    3d:20:94:80:54:47:fb:37:8c:7f:f6:6a:16:99:7c:
                    81:3c:9f:95:aa:3a:06:81:d5:59:c8:b8:a3:29:bd:
                    c5:a2:90:a7:30:90:5d:a9:70:3b:39:29:cf:06:cb:
                    fe:22:4e:b7:d2:e8:bb:2d:5e:fc:33:f2:34:dd:a9:
                    32:99:41:53:ed:e5:54:74:c3:29:64:4b:ee:4b:a7:
                    5d:9e:d3:d0:a8:98:d8:26:ab:de:c7:33:98:fd:62:
                    fe:a9:a2:3c:59:13:c8:26:d6:43:7c:a4:91:10:2c:
                    33:c7:1a:b3:4e:8a:83:44:76:a9:14:90:8a:eb:ef:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:96:44:E2:8F:1A:7C:1F:93:EC:FD:55:0C:E8:D5:AE:DF:39:B7
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:28:85:2f:0c:ae:d0:de:81:f4:f9:f6:9c:7d:65:75:9a:d4:
         f2:4a:fa:06:0e:42:0c:6c:7e:ac:88:32:73:7e:14:8e:a4:59:
         15:b8:97:3f:06:8b:4d:2d:1e:03:ee:78:b4:52:05:ff:b1:48:
         4d:67:33:1a:a5:fb:e5:d8:f4:b1:c9:8b:d8:45:b0:fd:e8:94:
         6d:1f:ae:6e:d4:21:36:8b:ee:c8:50:cb:51:04:73:28:0d:fa:
         ea:a9:1f:4e:54:11:01:8c:6d:31:1b:e0:8e:37:e3:ec:55:26:
         b3:3f:07:34:be:5e:5b:8e:a9:4b:47:e9:9e:c6:19:7a:d3:c8:
         b5:24:54:4b:18:53:24:6b:00:64:dc:84:7a:d2:f7:d5:98:79:
         56:11:7a:08:3a:c6:85:2e:76:35:af:0e:83:63:0e:6d:79:a3:
         37:f9:e2:64:20:d9:6c:29:fc:a8:a1:95:4c:fe:e8:86:f8:99:
         1c:0e:18:76:a5:6d:e1:64:e8:a2:5a:08:36:50:5f:95:7d:a9:
         97:89:89:e8:96:20:e9:87:74:fe:81:20:e2:f2:ac:a9:4c:ce:
         74:ef:77:a1:4b:03:aa:25:3e:ef:50:81:66:e5:a7:35:da:1b:
         b9:0b:3d:e0:f5:1d:5e:36:71:b1:3e:40:e0:6f:fd:06:80:80:
         c5:7c:38:1e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbzkTH3QLwUGY3aORrvwckltygkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA0MTQwNzI3MDFaFw0yNzA0MTMwNzMyMDFaMDMxMTAvBgNV
BAMTKDAyRUU5NjQ0RTI4RjFBN0MxRjkzRUNGRDU1MENFOEQ1QUVERjM5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLy783rBppgN/KU2xDL42/HAa
mHf/8mj0N1pJ+pMe1kHxsJEkNJRg9iK9QBL4l2JYRz1w/AjStscVHB2AGY+HkEPv
FZYg5uSYNi2hmK8SE7e7WGXXnt8gCwKMzRkVrQ/PSXZqu0TxPd7oqtD0SVqtvl+a
FWGmcBCkDZsaRI3x8vN/FKjEOz0glIBUR/s3jH/2ahaZfIE8n5WqOgaB1VnIuKMp
vcWikKcwkF2pcDs5Kc8Gy/4iTrfS6LstXvwz8jTdqTKZQVPt5VR0wylkS+5Lp12e
09ComNgmq97HM5j9Yv6pojxZE8gm1kN8pJEQLDPHGrNOioNEdqkUkIrr7zfxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUAu6WROKPGnwfk+z9VQzo1a7fObcwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzAzMzJlMzIz
MDM1MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDMxMzMzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfN/DANBgkqhkiG9w0BAQsFAAOCAQEABSiFLwyu0N6B9Pn2nH1ldZrU
8kr6Bg5CDGx+rIgyc34UjqRZFbiXPwaLTS0eA+54tFIF/7FITWczGqX75dj0scmL
2EWw/eiUbR+ubtQhNovuyFDLUQRzKA366qkfTlQRAYxtMRvgjjfj7FUmsz8HNL5e
W46pS0fpnsYZetPItSRUSxhTJGsAZNyEetL31Zh5VhF6CDrGhS52Na8Og2MObXmj
N/niZCDZbCn8qKGVTP7ohviZHA4YdqVt4WTooloINlBflX2pl4mJ6JYg6Yd0/oEg
4vKsqUzOdO93oUsDqiU+71CBZuWnNdobuQs94PUdXjZxsT5A4G/9BoCAxXw4Hg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:04 2026 by rpki-client