Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
File:                     3130332e34302e31322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier:          eTgStNrILLEQn6PYKaBT8itPS7H8pR6GNIRhhcECj+Q=
Subject key identifier:   F7:87:4B:C5:B6:DC:70:99:C0:F6:E9:01:64:1E:1D:D0:A4:05:E6:C4
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       3BF8E73CA19FBE2D3ED1F2D6E2761B23E6B200C2
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa
Signing time:             Tue 14 Apr 2026 07:34:11 +0000
ROA not before:           Tue 14 Apr 2026 07:29:11 +0000
ROA not after:            Tue 13 Apr 2027 07:34:11 +0000
asID:                     13378
IP address blocks:        103.40.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 02:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f8:e7:3c:a1:9f:be:2d:3e:d1:f2:d6:e2:76:1b:23:e6:b2:00:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:29:11 2026 GMT
            Not After : Apr 13 07:34:11 2027 GMT
        Subject: CN=F7874BC5B6DC7099C0F6E901641E1DD0A405E6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:b1:e4:6f:f2:33:8e:48:99:19:97:2d:21:
                    b4:24:6d:e3:89:b7:0a:2c:ba:57:75:5a:c2:aa:c3:
                    ec:6d:71:8f:60:8d:8a:91:ca:e4:2b:33:c8:1c:a7:
                    72:89:8a:2a:12:f1:1c:15:1a:8d:36:3c:2d:1f:d7:
                    3b:aa:08:74:2b:1a:7e:71:90:b7:77:ea:01:9d:78:
                    d5:8e:c6:a2:6b:b6:32:fa:e3:10:b1:64:d3:1e:b0:
                    d9:27:e3:c8:2e:e4:49:ae:99:92:90:10:a0:24:f7:
                    ef:82:1b:7e:19:5c:f4:e8:0c:a2:5f:53:a1:90:09:
                    d1:f0:14:78:52:21:7b:8a:9e:37:07:2c:d6:f2:50:
                    cb:4c:b8:57:ba:cf:7a:f3:bd:24:fa:c6:00:c2:58:
                    8f:51:27:d4:83:f7:5f:7f:9f:57:cf:da:5d:6b:75:
                    dd:cb:0f:65:0f:4b:b2:10:08:23:51:e4:91:98:6f:
                    24:5a:da:95:d5:2a:94:3a:2d:eb:a3:aa:62:24:97:
                    0b:8c:bf:79:d4:cd:07:f3:4e:33:9e:4e:16:b1:6f:
                    95:20:19:91:b4:7c:75:c7:bc:fc:31:b0:1d:ce:94:
                    52:c7:17:48:94:b2:85:2e:fc:eb:e4:03:bf:8c:fa:
                    70:bd:e7:60:1b:f7:d7:3a:dd:5d:87:20:e9:39:cd:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:87:4B:C5:B6:DC:70:99:C0:F6:E9:01:64:1E:1D:D0:A4:05:E6:C4
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203133333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:75:11:eb:89:1d:5f:7b:a7:be:e1:02:4c:12:7e:43:e6:e5:
         0e:c9:f9:06:66:0c:7e:94:f8:ea:d4:9f:e9:77:ec:f5:1b:9e:
         b3:10:3c:0d:cb:89:94:14:60:f1:61:9b:40:79:0a:04:20:69:
         b3:58:04:28:c2:bf:be:44:31:23:a0:6a:24:ab:fd:01:e7:1d:
         57:6c:04:15:f1:d8:3a:25:1d:4c:91:a9:2b:38:f4:7f:33:8f:
         68:5b:d9:81:0a:3e:8c:16:a7:db:14:9f:08:58:c0:52:13:83:
         07:a3:f2:c0:7d:aa:0f:43:4e:4f:07:a9:c6:d3:ec:52:14:d0:
         1f:82:2e:1e:45:9f:bf:b3:b9:63:4a:ac:07:61:bf:ab:59:47:
         35:06:6e:6a:48:08:33:f0:91:3a:b7:87:55:c0:f5:c6:88:06:
         55:ca:c7:0c:72:88:3b:70:fd:33:bd:ef:a8:c0:2b:44:21:a7:
         1e:2f:a7:ab:0f:1d:1f:75:5e:b0:00:f7:8f:40:3f:36:5b:78:
         6b:59:37:ad:2b:2e:42:4e:8c:f4:c0:06:9e:44:ae:ce:d9:96:
         a4:cc:56:fc:70:c8:ba:11:ac:8b:93:83:77:37:57:4a:ff:5b:
         0c:e2:d7:62:cc:63:bc:a5:ea:fc:e4:a9:0e:e6:d8:75:da:26:
         3e:26:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:00 2026 by rpki-client