Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS9808.roa
File:                     AS9808.roa (raw, json)
Hash identifier:          RAHCjoZiKyNzBq3FMDIaEpR2kH3+XTi1YGQ3vOVwGyk=
Subject key identifier:   08:36:61:37:19:88:E6:D3:9F:0F:DB:DA:92:B8:D1:00:4E:DB:80:68
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       503F501EE94D2A18759F106D0D7288D4EA52697D
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS9808.roa
Signing time:             Tue 14 Jul 2026 07:19:54 +0000
ROA not before:           Tue 14 Jul 2026 07:14:54 +0000
ROA not after:            Tue 13 Jul 2027 07:19:54 +0000
asID:                     9808
IP address blocks:        43.248.184.0/21 maxlen: 24
                          103.40.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 11:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:50:1e:e9:4d:2a:18:75:9f:10:6d:0d:72:88:d4:ea:52:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Jul 14 07:14:54 2026 GMT
            Not After : Jul 13 07:19:54 2027 GMT
        Subject: CN=083661371988E6D39F0FDBDA92B8D1004EDB8068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:ea:a6:12:1f:bf:15:d8:ca:45:f7:a0:3a:
                    f8:a4:5d:a1:1b:33:44:67:92:de:0b:fa:1d:4a:a8:
                    de:99:f1:9e:85:aa:36:97:10:d2:1f:83:ce:b8:ea:
                    71:44:09:2a:8c:f7:4b:e8:8e:12:23:59:6a:7d:5f:
                    b3:2b:3c:e2:ea:7e:b0:cc:98:31:f0:e9:e7:eb:66:
                    1e:54:5c:48:5b:9a:66:79:59:7f:4d:07:f5:de:1a:
                    de:14:93:01:2e:16:9b:ff:b9:3b:78:73:af:fc:64:
                    ca:ff:f1:cb:36:a8:58:37:e7:e0:4b:05:57:64:2d:
                    68:62:0b:36:55:6c:fc:f3:31:b5:5f:16:22:3f:62:
                    70:01:f9:19:59:d3:98:73:4b:4b:28:17:ea:c9:b6:
                    85:ac:a2:ac:e9:b6:7d:c9:6d:c2:bb:86:bf:68:08:
                    db:97:83:9a:50:94:17:fb:53:1b:f1:a1:2f:f0:3f:
                    84:00:97:c5:0e:a9:b4:f9:5c:ba:61:3f:04:d6:b1:
                    bf:16:f0:c2:4a:35:10:ef:6a:70:d6:ad:38:96:30:
                    6d:f3:86:6e:7e:50:6a:71:d4:09:ab:8e:f6:3d:63:
                    ae:9d:12:c3:df:15:39:b7:bb:2a:4e:dd:33:ac:33:
                    b0:61:ac:52:a1:a8:3a:d6:62:32:26:4b:69:32:fb:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:61:37:19:88:E6:D3:9F:0F:DB:DA:92:B8:D1:00:4E:DB:80:68
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS9808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.184.0/21
                  103.40.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:6d:76:62:e7:56:f2:44:a5:17:8e:56:c2:95:b0:6d:67:
         09:c8:5a:b1:02:44:a8:f6:51:d3:74:b9:2b:61:d1:87:de:59:
         f6:f0:f2:6e:37:cb:a3:9f:6f:e9:ee:c8:e9:c7:af:e9:a4:e2:
         8c:3b:f4:c4:21:9a:22:e3:9f:bf:d0:ee:9e:eb:f0:f1:1c:2d:
         24:21:ea:26:3b:7b:d0:03:48:41:85:2b:c7:93:fc:07:c7:1c:
         5b:54:8e:16:c8:72:ff:1e:04:c2:62:9e:c8:31:1a:69:ac:3c:
         c1:84:c8:32:5e:b7:99:78:e8:87:f7:88:2d:8b:a8:31:e9:9b:
         bc:dc:48:b5:2b:6f:fb:45:27:fa:86:12:24:41:f3:7f:01:c1:
         df:7a:10:d2:54:2b:a3:7f:be:5c:55:7b:55:6a:c7:91:5f:6f:
         f8:07:12:ae:e5:80:5d:db:1a:b4:4e:b6:24:fc:41:52:79:1c:
         c8:e3:05:c2:f2:18:88:39:23:15:cb:80:c6:60:39:14:81:b3:
         0e:be:bf:14:8a:10:41:7d:a1:a1:73:09:84:d0:21:9c:99:4b:
         27:a6:c4:a3:e7:30:7c:77:9a:7f:8c:09:bd:80:ab:24:56:4d:
         45:38:45:7f:17:88:d1:36:60:55:bc:44:61:5b:1c:be:a2:29:
         c3:39:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 22:49:48 2026 by rpki-client