Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e352e302f32342d3234203d3e203538383534.roa
File:                     3130332e32372e352e302f32342d3234203d3e203538383534.roa (raw, json)
Hash identifier:          7pTtCdtAeXZxGjA7RJCZZdkN9oIX588wv35Q/6jbVas=
Subject key identifier:   95:6E:27:DB:6C:4D:EA:7C:32:3F:60:CA:AA:FC:4E:DB:E2:7B:6D:D5
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       37FA4FD24783CA0831E8E2A9BABD2397B2F58640
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e352e302f32342d3234203d3e203538383534.roa
Signing time:             Wed 27 May 2026 08:38:32 +0000
ROA not before:           Wed 27 May 2026 08:33:32 +0000
ROA not after:            Wed 26 May 2027 08:38:32 +0000
asID:                     58854
IP address blocks:        103.27.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fa:4f:d2:47:83:ca:08:31:e8:e2:a9:ba:bd:23:97:b2:f5:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 27 08:33:32 2026 GMT
            Not After : May 26 08:38:32 2027 GMT
        Subject: CN=956E27DB6C4DEA7C323F60CAAAFC4EDBE27B6DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:8c:5f:d8:dd:90:d1:7f:5d:80:e8:03:53:
                    4f:05:1d:0c:6e:b2:f2:75:d1:e0:dc:6b:b8:bd:ed:
                    4f:77:76:09:8b:01:ef:34:d9:5e:61:e9:2c:3f:b0:
                    41:fe:c5:99:ed:69:5d:23:01:0e:30:35:9f:7f:f1:
                    24:89:c1:c5:25:2a:b2:f1:e8:f7:fc:55:dc:89:7a:
                    cb:93:79:0f:9a:47:10:91:27:91:36:ac:15:09:30:
                    af:0b:a2:e6:d3:e6:de:85:fa:a7:f1:5e:ac:6f:16:
                    17:19:3e:e8:26:2c:f9:fe:b1:f8:b9:d2:94:25:99:
                    f8:ed:6b:58:19:36:ee:35:c8:cd:69:67:99:6b:f4:
                    9d:a1:1a:f5:83:3f:c4:cb:35:73:e5:3a:f0:bd:09:
                    bf:d5:8c:4e:6b:ce:a7:58:4b:9d:01:ce:6b:55:3a:
                    50:c5:3e:e0:b0:6e:79:37:51:ea:57:20:3a:26:d2:
                    0a:39:e5:37:3b:8d:49:92:25:7b:ae:96:20:67:50:
                    07:af:c0:00:af:d4:50:36:a5:e6:a6:ec:c6:ed:92:
                    3e:de:ea:18:29:b6:85:bf:09:79:18:88:8a:86:59:
                    1b:3f:a4:c8:db:58:1f:9f:df:62:f7:c2:ec:2c:fb:
                    68:63:41:01:59:3c:33:8d:da:36:52:e0:e2:9d:75:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6E:27:DB:6C:4D:EA:7C:32:3F:60:CA:AA:FC:4E:DB:E2:7B:6D:D5
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e352e302f32342d3234203d3e203538383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:86:3e:5f:c5:c9:74:ac:66:f1:3f:12:86:fe:b1:9b:26:ca:
         66:63:5a:b7:08:18:a0:6b:47:9d:1f:e1:5d:dc:7d:18:90:52:
         2c:bc:f5:35:82:35:c6:d2:cd:22:aa:11:42:7c:cb:81:1d:2e:
         58:dc:e2:2e:8e:73:16:41:9f:6d:06:c9:3f:99:9f:07:0a:77:
         07:36:28:90:ce:b7:2a:44:7b:a4:03:05:f5:e0:66:9c:5b:14:
         86:fa:02:9f:21:0e:3f:79:f2:57:b1:df:c8:35:0f:1c:c5:27:
         79:f7:41:0a:f4:7c:53:39:2e:69:d1:77:2f:de:5f:cc:82:21:
         07:e8:55:12:ac:c9:96:23:bf:f4:59:26:8f:c5:ca:23:2e:3c:
         e9:1f:fa:d4:e9:30:5d:89:7c:1e:9c:e8:e3:be:3a:eb:48:c0:
         50:a5:af:46:d0:e1:1e:d9:9c:81:1c:f0:6f:dd:62:5d:d5:94:
         77:ea:a3:73:5a:6a:72:f6:a7:b4:34:b7:44:c9:d4:64:5f:b9:
         64:15:5a:e7:34:0f:bc:01:d1:cd:eb:13:95:e3:68:78:e1:b0:
         e3:0c:f8:12:2a:a8:0d:0f:34:10:48:9e:43:35:04:62:0a:13:
         cf:ff:fd:ef:be:c0:e6:69:6f:6c:45:79:8b:64:11:bc:c3:28:
         bd:4a:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:51:23 2026 by rpki-client