Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203233363530.roa
File:                     3130332e33372e34342e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          L37hgiCsbvtSA6BkcZlIWhSpgI2KCMI1vAeQybXH91k=
Subject key identifier:   C1:FB:8E:E6:6B:F2:2F:38:33:8C:31:59:5C:0B:52:D3:D9:77:B5:64
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       20F652E61ABCD6A882DE2AC2284B41F69283DD8F
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203233363530.roa
Signing time:             Mon 28 Sep 2026 01:00:36 +0000
ROA not before:           Mon 28 Sep 2026 00:55:36 +0000
ROA not after:            Mon 27 Sep 2027 01:00:36 +0000
asID:                     23650
IP address blocks:        103.37.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f6:52:e6:1a:bc:d6:a8:82:de:2a:c2:28:4b:41:f6:92:83:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:36 2026 GMT
            Not After : Sep 27 01:00:36 2027 GMT
        Subject: CN=C1FB8EE66BF22F38338C31595C0B52D3D977B564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:23:e6:87:08:ff:8d:57:18:b6:a1:24:a0:35:
                    b0:a0:32:1b:b7:7a:c3:b6:de:ad:86:b0:70:91:cd:
                    d2:5b:03:36:11:05:40:c0:56:f8:d4:c6:e0:42:ab:
                    75:05:8c:ab:82:c6:2c:d0:60:01:d0:58:10:6d:10:
                    9d:63:77:6d:5f:4e:02:54:09:67:8e:68:bc:40:f7:
                    26:78:54:a2:7a:20:c7:9a:50:3a:5a:e2:8f:06:2f:
                    99:57:a5:26:1a:b2:8a:46:52:eb:52:e1:ab:f0:b1:
                    90:4e:b7:dd:e8:d0:e5:a6:d3:5c:d8:a7:88:bd:7a:
                    d1:6b:a0:16:f9:95:5b:f3:41:dd:39:69:a7:05:3e:
                    e8:88:05:ab:e6:c9:ac:ae:35:fa:28:83:20:57:d4:
                    c3:74:5d:1b:46:ef:f7:7a:59:b5:d8:1e:6f:53:72:
                    f2:d2:4a:8a:18:69:09:1f:3f:bf:15:c5:30:c4:78:
                    2e:37:8f:57:6d:e1:ac:a3:e8:45:e3:ff:6d:59:ab:
                    4b:90:52:0a:f9:a9:60:4b:70:b8:0a:ef:f8:9a:99:
                    ee:09:d0:82:ac:1a:d4:e4:6f:e3:bd:9b:1d:de:a5:
                    64:d3:c8:05:43:5b:16:35:6d:0d:e4:73:d7:1a:cd:
                    17:26:76:54:94:cf:94:0a:30:c6:ed:81:73:04:9a:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:8E:E6:6B:F2:2F:38:33:8C:31:59:5C:0B:52:D3:D9:77:B5:64
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:37:90:aa:77:fd:81:05:ba:25:b0:83:c7:94:40:dd:ba:bd:
         1f:e2:19:72:c2:00:47:c5:a2:be:e2:b9:f0:f8:5d:2e:d9:e3:
         e5:37:ca:68:3d:66:d2:a9:43:31:04:71:be:37:90:32:62:79:
         3a:71:ba:63:2c:2a:65:01:4f:ab:32:cf:d5:18:e2:06:e6:ec:
         21:85:da:58:04:2e:6a:a9:73:8b:7d:3e:e9:c2:37:35:f5:40:
         d1:c8:11:12:79:9e:1d:f3:11:36:22:d8:cf:eb:7d:e3:20:51:
         49:46:5e:34:96:8b:57:e6:75:9e:db:01:5b:fd:e7:68:60:5d:
         e9:0f:95:17:70:1f:39:97:97:c6:49:f1:67:2c:82:73:0f:ad:
         b1:8b:42:5d:b5:38:6f:2e:33:fd:1d:5e:41:1e:ce:30:98:69:
         2e:2f:94:4f:5c:57:50:3a:46:3e:4a:cb:2d:df:9c:d8:8c:e8:
         d4:97:81:af:3a:81:bd:d3:ed:0b:8e:87:95:cf:36:17:2f:4f:
         27:4a:57:38:3e:c0:2a:11:13:5e:97:51:b0:12:15:ad:de:8c:
         7e:64:98:3d:c0:aa:d4:11:c0:2d:f8:da:b0:4d:4f:93:36:af:
         15:c5:3d:65:41:34:34:55:fe:2e:ca:9c:d1:b2:09:14:d9:d3:
         f3:6f:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:31:33 2026 by rpki-client