Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32322d3234203d3e203633353637.roa
File:                     3130332e33372e34342e302f32322d3234203d3e203633353637.roa (raw, json)
Hash identifier:          V7XtfKZT5VZshCrbtyq0JblEJPA8B3soGPJ6WZUxVpI=
Subject key identifier:   14:3F:24:FF:C9:D6:CF:ED:66:76:16:15:1A:39:F2:8F:11:0C:47:4B
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       31302DDE4B30FC0E64E00D5EC246DF08AC2CD282
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32322d3234203d3e203633353637.roa
Signing time:             Tue 14 Apr 2026 07:58:05 +0000
ROA not before:           Tue 14 Apr 2026 07:53:05 +0000
ROA not after:            Tue 13 Apr 2027 07:58:05 +0000
asID:                     63567
IP address blocks:        103.37.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 02:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:30:2d:de:4b:30:fc:0e:64:e0:0d:5e:c2:46:df:08:ac:2c:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:53:05 2026 GMT
            Not After : Apr 13 07:58:05 2027 GMT
        Subject: CN=143F24FFC9D6CFED667616151A39F28F110C474B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:d0:7c:f2:2d:6b:91:3b:64:d6:dd:5b:e1:
                    2a:d8:0f:71:75:f7:32:a5:07:34:82:ca:6b:ff:f8:
                    f2:8f:84:f9:dd:0d:83:3f:e4:d9:28:be:4d:b3:c1:
                    9e:38:3c:97:54:6b:e0:8b:f8:7d:cb:0a:c9:8b:f6:
                    b0:19:ed:09:a4:b3:36:e8:dc:da:a1:54:66:8b:8f:
                    07:d6:7c:05:be:da:18:a4:aa:29:04:f8:89:92:99:
                    8b:0d:34:74:54:da:dd:1a:92:de:e1:db:b2:e2:f7:
                    52:38:18:75:ac:5c:d5:a7:63:18:dd:39:96:33:53:
                    02:f7:f6:7b:4c:2e:4c:e8:c5:2c:ce:5b:2e:ae:2a:
                    11:20:a3:82:77:8a:5a:7f:09:d5:2b:8b:3f:7e:c9:
                    4f:53:48:58:0f:91:de:82:dd:b5:4f:c1:0c:02:6d:
                    fa:2b:75:d7:de:a3:3f:a1:58:9f:ee:5a:ff:9f:72:
                    b3:a8:62:3f:66:b5:20:1d:6e:6b:df:61:95:bf:3a:
                    e9:6a:1d:b3:cf:8a:a5:cd:9c:c7:10:f0:34:e9:11:
                    0f:90:c4:41:89:94:5a:95:0e:b1:6a:59:d5:15:f0:
                    ce:71:66:80:fc:29:d4:4b:2d:a0:11:b7:a4:b0:c2:
                    cf:76:d2:ab:65:58:53:cb:0e:2f:99:4e:c6:34:1a:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:24:FF:C9:D6:CF:ED:66:76:16:15:1A:39:F2:8F:11:0C:47:4B
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32322d3234203d3e203633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:89:a9:a8:59:8c:11:69:3e:02:df:09:f3:0e:0f:9a:a3:
         f3:59:c7:30:29:d4:e0:8a:42:de:50:c9:83:86:72:f8:29:fd:
         6a:91:0c:9d:26:08:cf:2b:0c:15:f6:22:a8:fc:92:af:49:59:
         f6:6e:ef:1a:20:0f:6f:2a:95:23:e7:4e:0b:7f:28:75:d0:1c:
         17:11:8a:41:75:8c:aa:01:f0:3e:83:29:eb:28:1b:bd:17:68:
         19:b5:c9:9a:d9:bb:0c:c9:0b:75:b9:0c:a3:c9:fb:ba:7f:d6:
         a2:ca:20:31:c9:78:fe:df:87:a7:ab:c7:71:15:6f:4a:2f:32:
         dd:ae:0f:3d:5c:6b:9c:58:4a:4c:f4:65:0b:69:77:8f:3c:28:
         10:4a:3f:f8:28:04:99:cb:7f:07:ec:b5:a5:83:d6:8f:f0:29:
         6f:de:ba:92:38:9d:cc:be:82:2b:4a:54:67:94:2f:33:b5:cd:
         fa:c5:2a:c7:93:a3:42:da:92:16:7e:74:e6:6b:d5:41:d2:d9:
         ba:6e:46:51:e9:cc:de:de:e6:73:7c:95:c9:f1:5f:ae:cd:4b:
         d3:79:6d:3d:eb:c9:31:94:8e:44:c8:0a:5f:1f:13:e9:59:ae:
         4d:00:c2:ac:88:0f:70:b5:a5:06:72:44:fa:a4:94:23:f5:94:
         3c:f8:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:37:26 2026 by rpki-client