Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37342e302f32342d3234203d3e203633363331.roa
File:                     3130332e37372e37342e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier:          +SACmmpAElpqmXII63Jhjhb5xmU61Ubzx0s1wYb2aAg=
Subject key identifier:   E3:B4:CE:6F:32:BF:54:D2:0C:5D:82:D7:74:41:5D:2A:97:9B:92:9E
Certificate issuer:       /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial:       2551FA506893ADE8BD6E7529ECB4651F4CD00C4D
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37342e302f32342d3234203d3e203633363331.roa
Signing time:             Thu 16 Apr 2026 07:09:23 +0000
ROA not before:           Thu 16 Apr 2026 07:04:23 +0000
ROA not after:            Thu 15 Apr 2027 07:09:23 +0000
asID:                     63631
IP address blocks:        103.77.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:51:fa:50:68:93:ad:e8:bd:6e:75:29:ec:b4:65:1f:4c:d0:0c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
        Validity
            Not Before: Apr 16 07:04:23 2026 GMT
            Not After : Apr 15 07:09:23 2027 GMT
        Subject: CN=E3B4CE6F32BF54D20C5D82D774415D2A979B929E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:40:fa:af:d0:d8:08:83:29:b9:c8:59:7e:
                    9a:9b:d1:c6:ad:69:9b:88:d2:33:58:c9:ac:48:8a:
                    f4:29:ba:e9:68:1b:e0:1f:e5:d3:f5:c4:29:2a:c6:
                    71:90:45:69:63:f9:83:d8:39:e4:bd:e9:68:6a:29:
                    f0:84:95:45:3a:53:0c:2c:35:6c:27:63:d8:2b:69:
                    ca:b7:3f:14:86:26:3f:91:2c:07:33:3b:41:35:a4:
                    31:93:b4:80:2b:63:15:eb:90:6e:31:02:5e:ee:1a:
                    94:4f:2e:fe:ef:2a:24:48:1f:88:e0:73:00:4e:a2:
                    5d:ff:23:33:69:11:e2:75:19:14:d1:64:ac:4a:11:
                    36:02:87:8f:23:53:6f:55:a3:4d:f4:ef:83:93:6e:
                    cf:3f:e6:5c:06:e6:19:f8:4b:8e:c4:f8:15:b7:ac:
                    02:5f:e7:2c:8b:ae:82:ea:40:12:79:a4:2f:83:7b:
                    16:ff:a4:02:30:25:a8:7c:f4:c1:f9:4c:93:a3:93:
                    94:61:f3:90:88:5a:c5:a2:eb:f4:d3:98:16:50:10:
                    09:d5:65:fa:50:8f:26:41:6a:e4:c9:fa:08:b5:a8:
                    e0:ca:ba:d7:3f:0a:db:55:8e:00:c6:41:e5:fa:71:
                    0b:06:2a:36:b9:6d:b6:ef:76:8b:69:1d:2a:1f:9e:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B4:CE:6F:32:BF:54:D2:0C:5D:82:D7:74:41:5D:2A:97:9B:92:9E
            X509v3 Authority Key Identifier:
                keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e37342e302f32342d3234203d3e203633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:05:d3:71:b7:80:35:55:9b:31:63:04:d3:4a:de:0c:d5:0e:
         44:69:dd:c3:27:b1:b0:e4:2a:a6:7a:0a:71:70:d6:5e:db:73:
         af:38:d5:29:01:36:ec:06:30:7a:c8:49:c3:01:87:4f:61:f4:
         20:af:3d:92:8b:d8:05:e3:fd:43:4f:26:d6:ae:07:25:39:60:
         eb:58:dc:87:16:b6:bc:b8:2b:f7:5b:c5:48:b6:af:b7:6a:49:
         d2:f2:bf:c3:72:f8:5c:02:30:a9:5c:dd:1a:9c:46:c3:e6:bc:
         88:92:32:e0:1a:ea:b8:0c:e1:89:42:56:95:75:75:c1:10:90:
         b1:1e:6a:9e:c0:ad:96:c1:79:de:ea:f6:96:f1:df:82:16:80:
         fe:81:86:bc:19:04:fa:08:63:46:20:3f:25:37:c2:b3:f7:b8:
         29:bb:ce:ba:20:fd:d1:92:21:52:c5:32:bc:64:42:49:98:4e:
         26:c3:2a:5c:d9:18:9e:7d:10:16:10:97:4f:29:b7:2c:bb:b0:
         3a:5a:76:0f:fe:1f:0b:91:9b:05:f2:3b:98:7f:96:48:85:13:
         44:83:e0:a8:4c:d1:ae:af:a1:bb:4d:f5:8b:a8:5d:2a:76:44:
         91:36:3e:ed:e2:63:3b:61:d9:c8:11:aa:24:f8:37:e5:07:6d:
         51:65:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:20 2026 by rpki-client