Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37322e302f32342d3234203d3e203633363331.roa
File:                     3130332e37372e37322e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier:          x17cHSRYcX/Kt66624cs2XAt5w4hzS22OUj6QmZWVd8=
Subject key identifier:   36:16:7D:22:EC:C1:4B:58:8F:AC:D1:E9:53:B0:59:75:5E:66:BA:12
Certificate issuer:       /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial:       1B2B0B0614C61D4636BE6F50800D30D9B8C0104E
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37322e302f32342d3234203d3e203633363331.roa
Signing time:             Thu 16 Apr 2026 07:09:24 +0000
ROA not before:           Thu 16 Apr 2026 07:04:24 +0000
ROA not after:            Thu 15 Apr 2027 07:09:24 +0000
asID:                     63631
IP address blocks:        103.77.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 13:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2b:0b:06:14:c6:1d:46:36:be:6f:50:80:0d:30:d9:b8:c0:10:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
        Validity
            Not Before: Apr 16 07:04:24 2026 GMT
            Not After : Apr 15 07:09:24 2027 GMT
        Subject: CN=36167D22ECC14B588FACD1E953B059755E66BA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:f3:01:05:f8:b5:22:60:96:b6:23:32:16:
                    19:ab:4d:a3:91:de:2c:96:1a:26:dd:84:eb:70:57:
                    cf:ba:0c:57:89:9f:e3:1e:f9:f0:f8:ab:f7:b2:09:
                    55:ea:23:44:90:00:60:95:78:02:aa:e4:07:cc:91:
                    07:4a:04:7e:1a:cf:0c:44:e8:9c:aa:3e:b0:17:86:
                    ef:02:ef:61:e5:74:73:ae:ae:98:48:b5:8c:f3:53:
                    ab:1b:2e:67:71:b8:1b:7f:b8:f6:3e:15:d2:1f:95:
                    17:c6:8c:da:cb:8e:64:d2:db:91:95:ba:b8:e3:71:
                    46:cb:17:d4:d6:e8:5d:4a:25:8d:57:ca:de:5c:29:
                    f7:b4:5f:4e:be:c6:a5:17:c5:07:c1:ce:37:24:e4:
                    d0:dc:4b:eb:bb:28:ec:eb:8e:d0:e7:93:57:d3:b4:
                    58:f7:6d:c1:92:53:e5:08:56:65:64:50:19:ec:f8:
                    18:d3:6b:0b:f3:1d:b4:73:dc:5f:23:c7:98:b0:1b:
                    aa:76:bb:34:06:e0:73:37:e5:8a:98:4e:58:ad:3b:
                    ad:53:ed:13:8b:76:ee:23:1a:7e:15:c6:38:c7:20:
                    9f:09:13:df:76:3a:aa:58:e4:e0:d6:b1:6b:f7:a9:
                    b0:1b:2d:d4:5a:ac:91:b2:75:dc:11:cc:37:05:c8:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:16:7D:22:EC:C1:4B:58:8F:AC:D1:E9:53:B0:59:75:5E:66:BA:12
            X509v3 Authority Key Identifier:
                keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37322e302f32342d3234203d3e203633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:0a:ba:e9:5e:92:d2:fb:83:79:92:93:b4:57:43:ef:16:f1:
         97:9c:18:4d:80:18:b3:30:ce:3a:fa:51:1f:41:a5:69:d4:b7:
         00:b0:28:4a:3e:7d:17:fd:09:ec:68:13:fd:1f:df:78:58:5c:
         38:c8:fb:71:97:f4:8f:bc:d1:9c:9b:5d:86:22:49:7a:1c:ad:
         fe:d9:cb:65:30:0c:6a:95:c3:10:e9:c0:38:e5:1a:48:d2:5d:
         84:bb:22:38:d1:95:6f:31:06:37:10:2b:d4:a2:39:ff:e9:7c:
         8b:ff:de:09:d0:11:5e:8d:49:b1:90:ee:67:fd:1e:e8:dd:05:
         25:ac:b1:c2:86:43:3d:ca:53:46:e6:34:17:c0:55:f3:16:cd:
         d5:4e:10:3f:8f:fb:70:15:74:5d:a7:d1:38:04:32:b2:81:d8:
         c9:3d:e4:c5:1d:dd:95:f2:b4:df:ef:73:78:90:46:9a:b2:99:
         75:f2:99:6c:8c:08:47:7e:ba:4d:14:43:d6:4c:57:07:00:73:
         01:8f:69:bd:ec:0b:94:2f:6a:14:0f:2c:1e:02:2f:94:57:c5:
         77:b3:39:05:b8:a2:66:e8:3d:c4:75:58:2d:ea:d1:66:78:f8:
         75:32:53:e8:6a:8a:cb:35:d8:36:bb:7f:c8:ed:f7:c6:66:74:
         92:31:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:38 2026 by rpki-client