Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36392e302f32342d3234203d3e20313531323936.roa
File:                     3130332e37312e36392e302f32342d3234203d3e20313531323936.roa (raw, json)
Hash identifier:          kTouZy1gjaR90O2aS4hnEHJrUX16MGxFTmED8/3zLaY=
Subject key identifier:   07:48:99:AC:3C:9A:A5:83:F9:00:CA:28:A2:AC:4E:8A:8E:1F:CF:6B
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       3ECA68F47861F9867CA2D9DF43F6DD26BF30B452
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36392e302f32342d3234203d3e20313531323936.roa
Signing time:             Fri 17 Apr 2026 07:56:56 +0000
ROA not before:           Fri 17 Apr 2026 07:51:56 +0000
ROA not after:            Fri 16 Apr 2027 07:56:56 +0000
asID:                     151296
IP address blocks:        103.71.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ca:68:f4:78:61:f9:86:7c:a2:d9:df:43:f6:dd:26:bf:30:b4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Apr 17 07:51:56 2026 GMT
            Not After : Apr 16 07:56:56 2027 GMT
        Subject: CN=074899AC3C9AA583F900CA28A2AC4E8A8E1FCF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:69:7d:83:7b:bc:5f:cd:ee:93:24:2e:81:
                    b7:ff:57:a8:9d:0f:7d:a1:aa:f4:23:fc:5f:51:c4:
                    7a:96:50:29:97:a9:01:6a:ec:4d:69:61:25:72:a4:
                    fd:1d:70:04:87:bd:d4:39:e0:1e:4e:ea:81:39:e8:
                    b1:69:9c:f9:3f:90:48:92:f6:81:a0:e3:37:af:23:
                    de:1a:18:4e:99:cf:06:80:24:c2:e3:98:f9:55:88:
                    b7:eb:2a:31:81:d1:66:9e:14:6d:a8:8c:b3:73:45:
                    5a:04:d9:37:bf:b5:90:a9:6a:f4:fa:10:0a:4b:4d:
                    79:37:fb:f8:46:07:00:c5:d8:a9:a0:d8:8c:42:01:
                    02:ec:68:91:a8:64:56:17:0a:44:c2:87:00:a9:57:
                    48:08:f9:26:ff:79:fd:75:83:eb:2d:6b:23:34:4c:
                    99:df:7d:71:51:64:75:57:93:67:a9:5a:0e:f5:86:
                    fb:58:8d:11:d4:ea:ba:df:c9:b4:ce:f0:c7:f7:29:
                    00:7e:f3:7c:1b:63:b9:1f:76:d0:79:e9:34:97:53:
                    1e:20:cf:e7:55:cc:fb:c3:db:e9:a1:9d:9f:1a:3f:
                    06:43:3a:0f:a3:1c:2f:f9:3e:a5:f3:3e:b7:6e:46:
                    b3:ed:af:7b:7f:cc:43:cd:dc:50:f5:d5:5e:28:c7:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:48:99:AC:3C:9A:A5:83:F9:00:CA:28:A2:AC:4E:8A:8E:1F:CF:6B
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e36392e302f32342d3234203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:90:42:d6:97:12:53:85:71:80:5f:6d:1e:5c:6e:e1:76:41:
         2e:c7:33:c2:0b:e1:24:40:8c:0c:2e:34:ae:dc:5e:2e:b8:28:
         57:a7:56:62:fc:27:67:09:88:97:46:33:b8:24:e8:29:4e:e2:
         da:0a:9e:76:33:01:a4:44:96:21:d1:3c:b6:35:b0:d7:cf:4a:
         6d:6c:87:80:cb:63:93:0f:1d:01:30:e9:08:b4:43:d7:92:f9:
         96:c1:77:a2:cc:98:0a:15:8c:41:05:3e:3a:a7:23:e7:21:ba:
         0c:d2:34:b4:91:e9:97:76:07:be:4e:0f:08:09:ab:65:68:ce:
         d5:86:e9:e3:31:e6:22:b2:a3:81:8c:30:90:7a:4d:2a:c5:c3:
         1e:a1:0d:f0:f6:cd:ab:98:df:ef:8a:ab:66:af:68:02:bd:f4:
         a0:e8:ff:11:5f:c5:70:17:56:8d:13:ec:eb:67:f1:c2:5e:c5:
         93:7a:77:af:04:4a:42:65:14:2f:94:0a:4d:62:f7:c3:03:5b:
         5f:98:78:f6:3d:e6:fb:01:3d:0a:e5:79:dc:f9:a6:d5:d3:cd:
         0a:05:ec:e2:dc:d2:ff:b1:35:16:9e:b9:db:ed:f6:fa:5f:bc:
         12:ba:2f:c2:e9:03:9d:d0:25:c2:5e:5a:a2:2f:bc:98:f1:61:
         ef:74:1c:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:22 2026 by rpki-client