Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034313334.roa
File:                     3130332e34302e31322e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          Do7qBrGV+H6wRaYu85VjNVmf9xjnm2Ol/0XUb5OgyBg=
Subject key identifier:   75:7B:15:8E:79:03:F5:3F:51:DE:39:5C:7F:02:FB:74:38:81:D8:3D
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       35AA244508C43156F339A8EF8C202639EF7289C9
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034313334.roa
Signing time:             Tue 14 Apr 2026 07:34:10 +0000
ROA not before:           Tue 14 Apr 2026 07:29:10 +0000
ROA not after:            Tue 13 Apr 2027 07:34:10 +0000
asID:                     4134
IP address blocks:        103.40.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:aa:24:45:08:c4:31:56:f3:39:a8:ef:8c:20:26:39:ef:72:89:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:29:10 2026 GMT
            Not After : Apr 13 07:34:10 2027 GMT
        Subject: CN=757B158E7903F53F51DE395C7F02FB743881D83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:dc:d8:58:97:03:b0:d4:e9:15:26:40:e1:
                    b4:f3:43:b4:2c:f0:d9:a0:10:7e:2f:47:63:9a:e0:
                    70:f1:37:f5:0d:22:19:8e:6f:2e:d3:6d:21:d8:d6:
                    5e:21:38:64:d4:4f:ae:d6:a7:92:08:95:df:47:dd:
                    a4:69:50:0c:d8:73:b3:e2:2f:2b:f4:8c:98:8e:de:
                    5d:31:50:fb:e3:93:d4:fd:25:99:7b:99:95:5c:0b:
                    99:42:a4:3b:c0:be:79:16:c5:4b:ce:18:27:87:56:
                    ae:10:9b:b8:24:31:4a:6a:6a:2d:0e:89:d1:73:b6:
                    66:95:db:8c:94:66:8b:09:c5:2f:05:b4:5e:fa:fc:
                    6d:6e:c2:a1:e6:07:bc:c9:c6:af:7c:ea:d1:59:02:
                    4c:a4:16:1a:91:b0:03:e7:ef:0c:8c:38:95:2f:37:
                    c5:9e:d5:6e:fe:c8:ec:64:a6:2e:2a:8e:f4:a4:45:
                    87:59:bd:26:82:08:1e:e2:fe:14:2e:95:62:02:29:
                    e5:bc:2e:6b:cb:b2:c1:17:0c:e5:01:99:da:c2:91:
                    cf:e2:30:17:05:43:b1:07:5d:dc:b1:3a:31:44:12:
                    7f:fd:b1:d2:a1:ff:68:86:d4:4e:f2:7c:04:9e:ce:
                    5c:7d:7d:43:76:72:fe:ec:e3:01:c6:a4:3b:16:a1:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7B:15:8E:79:03:F5:3F:51:DE:39:5C:7F:02:FB:74:38:81:D8:3D
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:7a:7a:62:41:b9:79:b6:07:57:02:fa:e5:bc:d9:dc:fa:80:
         bf:dc:be:6a:ef:d8:1e:09:87:c5:9d:1d:31:16:7c:90:d9:22:
         60:cb:e7:36:28:9a:c7:d2:b1:a1:a3:8e:a8:78:19:78:17:ea:
         96:f7:92:0c:1f:85:61:2b:34:ec:67:86:db:6d:1f:f0:eb:6a:
         0e:1a:bc:3d:09:6a:33:21:e3:22:01:af:e0:97:9c:cf:b0:8b:
         c0:05:f5:49:78:72:00:63:59:07:4f:d9:4c:0d:f1:4d:6d:e0:
         12:ee:b5:1d:72:10:f1:4d:d7:37:38:ba:1d:40:1a:7a:c6:a3:
         9e:c3:d6:54:ef:59:d2:f7:fc:b3:cd:a0:a1:5d:3e:8a:92:50:
         16:f8:a3:8f:ef:3a:df:8a:e2:a4:f6:8c:e1:de:fe:db:d4:19:
         65:7f:17:65:04:07:9c:75:b1:71:f9:51:75:c2:61:4b:7f:a8:
         13:30:80:0b:fe:c2:3f:da:d1:79:48:60:c0:95:fc:0d:d0:bb:
         db:8d:78:88:b8:f9:9b:f9:15:aa:1b:6a:e7:61:d8:fb:4d:77:
         bf:fa:11:07:b2:3b:ab:87:c0:73:47:1a:c6:3d:10:ef:ec:bf:
         99:e1:26:fa:de:18:2b:1d:45:62:44:55:48:5c:3d:3a:a5:75:
         0b:06:04:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:53 2026 by rpki-client