Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e372e302f32342d3234203d3e203538383534.roa
File:                     3130332e32372e372e302f32342d3234203d3e203538383534.roa (raw, json)
Hash identifier:          g+hnuBNKsm6ziUrgUw+cA7ldB47CwfimIC2umZGUB+8=
Subject key identifier:   F8:F0:1C:13:3C:2D:51:FD:E5:60:00:3C:6C:72:21:7C:CC:F8:17:28
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       7C7EEA5481ABEF72C2C26D8739125FCC6C839548
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e372e302f32342d3234203d3e203538383534.roa
Signing time:             Wed 27 May 2026 08:38:32 +0000
ROA not before:           Wed 27 May 2026 08:33:32 +0000
ROA not after:            Wed 26 May 2027 08:38:32 +0000
asID:                     58854
IP address blocks:        103.27.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7e:ea:54:81:ab:ef:72:c2:c2:6d:87:39:12:5f:cc:6c:83:95:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 27 08:33:32 2026 GMT
            Not After : May 26 08:38:32 2027 GMT
        Subject: CN=F8F01C133C2D51FDE560003C6C72217CCCF81728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:18:49:be:04:78:fc:fd:3e:23:f4:d8:b8:
                    f9:fb:31:93:c1:24:8b:85:c8:84:38:4e:dd:eb:eb:
                    4a:56:1e:5d:57:46:e6:61:e8:ae:25:e2:d9:07:7c:
                    98:75:b6:68:b1:8c:44:a3:1a:b6:3c:2f:6c:05:35:
                    19:ec:69:b0:73:f8:52:65:f1:4c:17:7d:66:98:d3:
                    24:21:91:b3:7c:28:76:96:aa:2f:0f:3a:6f:94:15:
                    ce:43:40:2f:e6:23:06:88:70:05:63:50:ba:e2:1e:
                    0d:8d:13:f3:82:9b:49:e2:30:f2:d8:5a:58:83:b8:
                    92:83:3a:cf:72:cd:a2:83:6e:b8:5c:a8:86:a2:c6:
                    8d:5c:43:62:e4:08:c9:1a:56:3c:42:7b:03:8f:34:
                    0e:f8:95:ad:46:e1:1a:cb:d1:b2:a2:ed:b1:bd:f6:
                    e0:ac:8e:46:7b:68:47:4e:c5:73:74:91:87:8c:c6:
                    9a:9e:55:53:64:90:df:81:81:78:59:c4:d2:3d:92:
                    89:1c:09:d9:0a:14:df:40:06:d2:a0:e9:ae:d3:13:
                    a3:d0:47:0a:71:cd:a1:40:4d:e7:97:ac:66:26:c1:
                    21:bd:62:00:24:f8:e5:58:7c:c8:b2:6b:c6:f2:04:
                    ab:dd:1c:9b:0a:b6:ce:6b:b1:6c:5f:0a:18:0b:07:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:1C:13:3C:2D:51:FD:E5:60:00:3C:6C:72:21:7C:CC:F8:17:28
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e32372e372e302f32342d3234203d3e203538383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e4:99:6d:62:e4:40:a5:53:ea:ff:03:34:74:9c:21:a0:5c:
         2b:14:b7:34:92:14:e5:b5:0e:0c:4a:78:b5:19:9a:a2:1f:aa:
         96:d7:94:eb:94:48:1a:2f:2c:91:04:9a:4f:30:65:0a:6c:45:
         27:48:90:19:d6:6b:24:cf:84:70:5a:e7:fb:c6:f7:64:01:c4:
         34:eb:84:6c:4e:c6:54:0d:1d:61:cf:2a:0a:19:a8:53:e2:02:
         d2:f9:e4:39:43:05:0a:1b:b2:5e:e5:03:60:1c:b7:3a:bf:a0:
         b0:01:13:05:20:51:4a:99:ec:5d:bb:34:a8:1b:d0:fb:e6:e7:
         0d:d2:43:ff:45:d6:fe:42:a1:ce:8e:2e:62:a3:bc:62:c9:c0:
         0a:5a:14:02:b7:6e:ea:38:3b:43:30:03:eb:bc:ed:64:8c:b6:
         b5:0f:b6:56:08:9d:18:a0:37:53:ce:76:25:89:af:01:c0:68:
         fc:c5:58:51:1f:bf:aa:4d:88:49:89:79:16:78:c5:d9:ee:42:
         86:c6:6f:27:7d:21:6e:a7:56:74:d4:27:a9:56:b3:6c:c3:8a:
         83:39:fe:a9:3e:87:57:e9:8e:9b:c6:d3:f7:2e:b3:de:76:c1:
         2c:72:9b:62:a9:06:79:04:a0:a7:b5:04:cb:be:59:c9:fb:04:
         0e:83:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:53 2026 by rpki-client