Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
File:                     AS13378.roa (raw, json)
Hash identifier:          nWHxMWTssd43uMZ38m8/ZjpkTkKrm4c3p8GzUfS+7yY=
Subject key identifier:   FB:6A:7B:34:D8:AB:4D:CB:78:14:5A:5D:28:86:3E:BF:96:93:40:89
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       3B60D6DFA7EA8BDD938D398483690334D09C78E3
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
Signing time:             Wed 12 Aug 2026 15:35:43 +0000
ROA not before:           Wed 12 Aug 2026 15:30:43 +0000
ROA not after:            Wed 11 Aug 2027 15:35:43 +0000
asID:                     13378
IP address blocks:        43.248.184.0/21 maxlen: 21
                          103.40.12.0/22 maxlen: 22
                          103.45.160.0/22 maxlen: 24
                          103.205.252.0/22 maxlen: 22
                          103.239.244.0/22 maxlen: 24
                          111.223.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 00:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:60:d6:df:a7:ea:8b:dd:93:8d:39:84:83:69:03:34:d0:9c:78:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Aug 12 15:30:43 2026 GMT
            Not After : Aug 11 15:35:43 2027 GMT
        Subject: CN=FB6A7B34D8AB4DCB78145A5D28863EBF96934089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:37:be:1b:ab:ee:a5:7b:09:f9:14:07:1f:
                    fb:66:03:fc:b4:b6:c9:e3:e4:89:10:0c:ad:d4:3b:
                    99:a3:6d:53:44:10:0f:31:6c:e7:09:c2:20:a0:06:
                    e0:7a:d9:45:fe:4e:c0:11:f3:0e:22:af:08:c6:d8:
                    c6:b1:b6:41:28:8d:9d:34:d1:d7:54:b3:28:dd:6a:
                    84:dd:6c:8c:7d:f8:5c:a9:66:5f:d9:6d:90:22:17:
                    76:fb:92:fc:cf:c3:6a:9e:e6:a3:6b:e4:7e:da:41:
                    ca:59:a2:72:c9:eb:fc:9d:1e:be:78:1c:29:07:01:
                    6c:85:c0:ff:68:ef:1c:71:14:bd:59:7f:68:2c:d7:
                    ae:b8:d4:6e:b6:7e:fe:b8:f7:fa:18:53:4e:73:d4:
                    16:a6:d8:73:0b:80:98:c3:e7:a0:85:85:87:d2:3d:
                    00:c1:78:ee:93:c4:29:03:42:ff:6e:fa:12:da:13:
                    24:e4:55:28:8d:1c:69:dc:a9:5c:63:97:10:35:1d:
                    31:f0:22:1f:c1:8c:14:76:c3:fa:cb:a4:d0:2f:34:
                    aa:5d:eb:b6:cb:d7:eb:e8:fc:97:78:62:05:0b:90:
                    dc:aa:0a:2d:b5:52:be:df:cc:fb:37:27:91:a1:cc:
                    41:ad:60:4d:e3:79:77:a0:2f:b8:a8:63:c1:e8:4c:
                    43:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6A:7B:34:D8:AB:4D:CB:78:14:5A:5D:28:86:3E:BF:96:93:40:89
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.184.0/21
                  103.40.12.0/22
                  103.45.160.0/22
                  103.205.252.0/22
                  103.239.244.0/22
                  111.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:85:82:30:27:44:91:8e:25:5d:97:be:17:e0:06:fe:62:f7:
         f1:e0:2c:41:96:ad:8a:6c:b8:3e:ae:dc:8e:20:7d:1b:0b:97:
         ad:b4:87:6c:59:5f:74:96:0f:e2:ca:24:03:87:f3:12:e2:ea:
         b5:25:6f:48:bd:d7:b7:e8:ff:33:66:88:95:2f:48:c9:8f:9f:
         cc:af:c5:e6:a6:a3:bf:fb:33:b3:10:56:41:c4:7c:31:e0:a1:
         3d:e9:1e:66:0c:b5:28:a5:d5:44:ef:2b:24:31:e6:86:65:e3:
         f0:72:d9:57:a0:af:cc:f7:7c:58:85:49:35:ef:bb:80:2a:7a:
         78:d8:38:8f:f4:eb:6e:46:a9:21:8d:b9:47:a6:cf:d6:bd:6d:
         5e:39:b9:6b:63:4e:f2:ea:e0:93:9f:49:61:11:d1:6d:f1:59:
         56:f4:51:15:0a:81:1d:8e:46:0b:62:df:cb:97:3c:e2:70:4e:
         80:4f:85:20:f3:c4:4f:0d:44:7d:db:93:45:2c:a2:08:13:68:
         82:1a:6c:dc:79:79:92:46:f3:3d:18:54:78:65:cb:d8:94:b5:
         38:b3:b5:be:35:c2:f3:01:b3:4e:09:86:2a:26:db:3d:fc:2f:
         1a:f3:cd:05:ac:b4:e2:ab:e6:50:34:f9:3f:9c:26:3f:f0:a9:
         5d:16:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:30 2026 by rpki-client