Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e342e302f32322d3232203d3e203538383534.roa
File:                     3130332e32372e342e302f32322d3232203d3e203538383534.roa (raw, json)
Hash identifier:          X07mjB9bjxe2OIWzT2PkfOiYRqWsVnjKrNMXTnKBIxg=
Subject key identifier:   74:BB:7A:CF:B7:3A:99:BD:19:FB:44:D0:C3:E1:E9:8C:A0:AB:DB:AF
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       1F1B5C83188D559B883C8237024D24E4F849C903
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e342e302f32322d3232203d3e203538383534.roa
Signing time:             Wed 27 May 2026 08:38:32 +0000
ROA not before:           Wed 27 May 2026 08:33:32 +0000
ROA not after:            Wed 26 May 2027 08:38:32 +0000
asID:                     58854
IP address blocks:        103.27.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1b:5c:83:18:8d:55:9b:88:3c:82:37:02:4d:24:e4:f8:49:c9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 27 08:33:32 2026 GMT
            Not After : May 26 08:38:32 2027 GMT
        Subject: CN=74BB7ACFB73A99BD19FB44D0C3E1E98CA0ABDBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:c8:f0:b7:16:a5:66:38:7f:ad:c9:be:f4:
                    59:23:d5:92:f3:81:bf:51:67:91:07:3f:c2:3b:bf:
                    7a:1a:51:cf:d7:06:5e:d9:00:bd:84:12:f6:04:74:
                    06:6b:9f:f6:d8:9a:59:f6:41:1d:ea:a6:1f:90:c5:
                    1c:86:4e:4c:10:54:b8:84:11:62:27:b9:54:42:f1:
                    23:c1:03:dd:4a:d2:d9:62:b7:8c:36:d2:20:d2:1f:
                    03:94:3b:4c:d5:17:bb:5c:98:f8:0e:b1:e5:95:c5:
                    62:56:3d:cb:2f:0f:a5:f7:c7:86:03:fa:e1:42:46:
                    6c:9c:98:42:e7:b1:87:e0:9a:cf:5c:8d:33:3d:f0:
                    df:1b:dc:f9:93:a3:2b:0f:e9:3f:fb:b8:f9:1e:11:
                    36:8b:36:91:6d:1d:05:09:c2:9e:be:b7:fd:96:c0:
                    14:75:13:bf:b2:3b:35:7a:57:80:3d:0a:62:12:8c:
                    d5:81:65:d2:10:ac:b7:b4:fe:f6:f2:2b:d2:c9:8b:
                    0b:d9:f1:02:6c:25:e0:95:d3:0a:c7:c8:ee:50:ae:
                    ea:0c:57:2c:f7:18:ed:46:1b:7d:a6:50:35:56:4f:
                    f1:74:cc:29:1d:3a:d9:78:2f:b5:85:43:aa:78:8c:
                    70:93:d0:37:ed:7f:da:df:c9:22:5d:60:f1:ca:11:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BB:7A:CF:B7:3A:99:BD:19:FB:44:D0:C3:E1:E9:8C:A0:AB:DB:AF
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e342e302f32322d3232203d3e203538383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:93:d1:44:aa:52:96:e4:c5:2c:2d:72:8e:3e:81:f7:74:e5:
         58:05:f8:ef:a4:26:ea:b2:50:bc:e4:2f:93:b8:ea:4b:f1:e0:
         d1:57:2c:33:43:10:e5:07:60:64:a0:0c:e2:af:91:8d:a0:a7:
         c6:76:2b:9f:dd:6b:2b:ea:b2:af:97:e1:b5:2e:e0:83:8f:c2:
         a8:99:cb:81:3a:23:b4:c2:86:ac:7e:e7:5b:7a:95:6f:db:1a:
         61:8f:95:86:6a:37:1e:a8:b3:dc:8c:2a:47:32:5c:b1:d5:13:
         8c:c1:a6:fe:38:36:98:42:79:0a:37:14:e6:a9:85:f5:81:9e:
         9e:7f:d8:cd:4d:7c:6f:b6:2e:af:c1:cb:79:c0:3e:d8:b6:a3:
         14:a0:50:bd:c5:53:64:13:22:7c:ca:33:ca:8e:fe:e6:1d:80:
         3e:b1:14:46:e2:db:95:68:5b:f3:b6:56:e5:16:5a:c7:e3:50:
         33:05:0f:04:7e:1c:a9:e5:04:94:87:56:c9:d4:1b:1f:10:ca:
         ad:00:43:5b:2b:7f:25:18:43:31:d9:25:18:48:ca:03:b4:68:
         55:e2:98:49:e7:0d:c7:66:8e:8f:49:6d:ef:74:d4:83:2b:36:
         6d:cc:b1:52:07:55:4a:7c:57:e3:69:4a:49:bc:52:c4:b0:3e:
         8a:4f:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:51:58 2026 by rpki-client