Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39352e302f32342d3234203d3e203633363331.roa
File:                     3130332e37372e39352e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier:          NsElr4y8RK7qoiuMUOtcT2AvRJzlIyPNTYuFs3jDxYA=
Subject key identifier:   BF:58:D3:B8:C5:79:E3:2A:ED:80:B4:33:B4:36:D6:68:42:32:05:14
Certificate issuer:       /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Certificate serial:       3ED389951AC45061F0F239DC77A3E25A9C5D9E09
Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39352e302f32342d3234203d3e203633363331.roa
Signing time:             Thu 16 Apr 2026 05:55:33 +0000
ROA not before:           Thu 16 Apr 2026 05:50:33 +0000
ROA not after:            Thu 15 Apr 2027 05:55:33 +0000
asID:                     63631
IP address blocks:        103.77.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 23:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d3:89:95:1a:c4:50:61:f0:f2:39:dc:77:a3:e2:5a:9c:5d:9e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
        Validity
            Not Before: Apr 16 05:50:33 2026 GMT
            Not After : Apr 15 05:55:33 2027 GMT
        Subject: CN=BF58D3B8C579E32AED80B433B436D66842320514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:ec:79:96:55:93:8c:6d:9b:ae:94:c0:bc:
                    4d:64:13:3e:1c:b1:8d:bf:cd:b9:3c:15:29:13:d1:
                    35:aa:10:67:6f:37:0a:b0:ff:7d:04:9e:89:89:13:
                    c7:e1:06:26:32:94:13:29:3c:06:ac:07:ce:7b:5f:
                    62:ce:c8:32:01:48:2c:58:dc:33:6e:be:43:21:59:
                    d9:d1:79:b3:f4:73:41:f5:2e:2f:87:07:c0:eb:1b:
                    d0:69:ac:9d:4a:d9:b0:1d:c6:84:03:18:00:90:96:
                    7d:9e:30:ce:62:f4:15:a5:37:05:f7:29:75:fc:86:
                    60:4c:80:de:26:6c:e0:af:77:54:15:1c:1b:3a:eb:
                    2d:72:a5:63:0d:e3:b3:ae:52:34:3a:ea:67:97:81:
                    f5:7f:dc:3d:04:46:89:8c:76:38:75:0d:4e:22:fc:
                    48:db:72:f4:d7:2f:76:58:cb:e1:69:73:9a:a7:5f:
                    92:3f:04:be:a3:67:23:34:80:2e:29:11:57:92:9a:
                    10:b1:f6:f1:9a:9d:cc:92:31:62:11:ad:84:0b:61:
                    1f:07:91:6f:01:4b:1c:c0:82:7b:80:77:ed:29:2c:
                    99:fc:43:89:89:7f:49:70:6c:2d:76:7e:c2:dd:2e:
                    31:b1:34:69:fb:4f:ec:cf:90:6d:95:c5:43:80:9a:
                    4d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:D3:B8:C5:79:E3:2A:ED:80:B4:33:B4:36:D6:68:42:32:05:14
            X509v3 Authority Key Identifier:
                keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39352e302f32342d3234203d3e203633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:27:7a:b5:5e:12:cb:d5:20:aa:d2:9f:17:d5:9c:4b:ec:
         b3:8c:ba:1a:ca:f0:04:1d:5e:9f:10:c6:2d:ca:57:9c:df:e5:
         db:c5:93:f7:c0:cc:66:f8:1d:6a:a6:42:4b:d9:f4:11:04:f4:
         e7:fc:e6:57:33:73:30:6a:26:3e:9e:1a:0e:c8:5f:d4:5d:cf:
         70:50:8e:65:f8:2a:dc:0b:ae:90:e9:bb:0f:7e:7c:95:55:fd:
         22:2d:2f:c4:49:27:4d:20:ea:ca:ac:a4:35:50:f7:12:94:cb:
         35:fa:93:8f:c9:65:54:5e:90:42:76:8a:35:f4:cc:49:aa:c1:
         7a:99:43:22:44:cc:03:96:c9:f9:9b:d5:59:5f:1a:ed:77:c9:
         4e:46:06:fa:9f:e5:a7:7c:f1:61:3e:da:82:86:17:83:07:93:
         81:21:44:8e:77:cf:a7:86:98:fc:cf:54:83:7c:56:e0:73:63:
         3b:6b:3a:64:c2:e1:3b:82:f7:37:29:fb:a8:59:0d:91:05:17:
         96:b2:b2:03:58:d9:22:b4:c5:08:2e:fe:38:f5:07:64:81:43:
         58:c4:78:64:9a:3e:8b:84:24:29:ac:48:c0:60:77:cf:a3:98:
         18:78:f2:55:b3:78:b2:f6:bb:16:6a:b5:02:00:8f:a8:b5:8f:
         90:20:84:da
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUPtOJlRrEUGHw8jncd6PiWpxdngkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy
MzI2M0MyMjAeFw0yNjA0MTYwNTUwMzNaFw0yNzA0MTUwNTU1MzNaMDMxMTAvBgNV
BAMTKEJGNThEM0I4QzU3OUUzMkFFRDgwQjQzM0I0MzZENjY4NDIzMjA1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8+x5llWTjG2brpTAvE1kEz4c
sY2/zbk8FSkT0TWqEGdvNwqw/30EnomJE8fhBiYylBMpPAasB857X2LOyDIBSCxY
3DNuvkMhWdnRebP0c0H1Li+HB8DrG9BprJ1K2bAdxoQDGACQln2eMM5i9BWlNwX3
KXX8hmBMgN4mbOCvd1QVHBs66y1ypWMN47OuUjQ66meXgfV/3D0ERomMdjh1DU4i
/EjbcvTXL3ZYy+Fpc5qnX5I/BL6jZyM0gC4pEVeSmhCx9vGancySMWIRrYQLYR8H
kW8BSxzAgnuAd+0pLJn8Q4mJf0lwbC12fsLdLjGxNGn7T+zPkG2VxUOAmk1fAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUv1jTuMV54yrtgLQztDbWaEIyBRQwHwYDVR0j
BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF
MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDM2MTI0MDM3MDU0NDY2LzAvMzEzMDMzMmUzNzM3
MmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzMzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdNXzANBgkqhkiG9w0BAQsFAAOCAQEAT9knerVeEsvVIKrSnxfVnEvss4y6
GsrwBB1enxDGLcpXnN/l28WT98DMZvgdaqZCS9n0EQT05/zmVzNzMGomPp4aDshf
1F3PcFCOZfgq3AuukOm7D358lVX9Ii0vxEknTSDqyqykNVD3EpTLNfqTj8llVF6Q
QnaKNfTMSarBeplDIkTMA5bJ+ZvVWV8a7XfJTkYG+p/lp3zxYT7agoYXgweTgSFE
jnfPp4aY/M9Ug3xW4HNjO2s6ZMLhO4L3Nyn7qFkNkQUXlrKyA1jZIrTFCC7+OPUH
ZIFDWMR4ZJo+i4QkKaxIwGB3z6OYGHjyVbN4sva7Fmq1AgCPqLWPkCCE2g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:54 2026 by rpki-client