Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e37352e3130342e302f32322d3234203d3e203633373031.roa
File:                     3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (raw, json)
Hash identifier:          +KXcWOztyLv/Ynmm+FEsOtCGJApsRxgda15t6ILwOjc=
Subject key identifier:   9B:43:C2:1F:72:9F:58:52:A4:ED:C6:3F:3E:CA:36:53:2E:2D:BD:F9
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       5654DAADAFC97999C11E8416E78F744A3F0EED9F
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e37352e3130342e302f32322d3234203d3e203633373031.roa
Signing time:             Fri 29 May 2026 06:54:44 +0000
ROA not before:           Fri 29 May 2026 06:49:44 +0000
ROA not after:            Fri 28 May 2027 06:54:44 +0000
asID:                     63701
IP address blocks:        103.75.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:54:da:ad:af:c9:79:99:c1:1e:84:16:e7:8f:74:4a:3f:0e:ed:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: May 29 06:49:44 2026 GMT
            Not After : May 28 06:54:44 2027 GMT
        Subject: CN=9B43C21F729F5852A4EDC63F3ECA36532E2DBDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:bc:b1:d3:d5:35:70:4b:fe:2e:91:46:93:
                    53:99:ef:5e:1b:1d:69:e9:83:bd:16:63:b6:b3:a6:
                    ce:3c:5f:6b:6c:65:0c:5b:81:e0:f6:64:d8:b9:d7:
                    84:b4:3a:76:b3:4f:e5:6e:91:7b:f3:7b:cd:32:1b:
                    7a:6d:04:7b:fe:bc:c6:62:17:2a:68:e7:11:d3:cf:
                    93:8f:65:d7:1f:be:a2:75:fd:1f:d4:e5:d5:f1:b1:
                    de:60:05:db:e8:7b:3a:73:f6:12:e9:1e:fb:12:4e:
                    97:1d:1c:a5:24:a9:a1:f3:75:a3:3f:a6:14:12:16:
                    a9:36:5b:61:30:87:be:4d:84:55:a2:99:65:9d:5a:
                    13:32:67:e7:dd:89:46:1f:a6:88:40:bc:d1:4d:c6:
                    02:20:94:3b:00:34:36:04:65:4c:ba:8b:60:d9:a3:
                    00:a1:48:1a:51:5d:11:82:69:57:47:7a:5d:e1:cf:
                    18:0a:da:16:bc:d3:92:e8:9d:53:e2:a4:82:54:e0:
                    55:9f:55:f1:86:c5:8e:49:1e:2c:0f:41:62:8d:7b:
                    11:52:da:dc:a5:50:fb:b9:ec:33:e1:35:a7:91:60:
                    45:82:da:dd:23:b1:c1:67:75:fc:d7:14:b2:7c:9d:
                    76:4b:51:b7:89:20:35:f3:8e:1d:7e:cf:b7:03:32:
                    1b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:C2:1F:72:9F:58:52:A4:ED:C6:3F:3E:CA:36:53:2E:2D:BD:F9
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e37352e3130342e302f32322d3234203d3e203633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:51:e6:9c:b9:bf:9e:88:2e:94:98:86:8c:28:80:f9:44:
         8d:4d:86:18:64:30:4a:0e:c0:9a:3a:07:82:53:05:14:33:fc:
         f0:48:f7:b8:71:c7:4d:0c:2b:d1:b0:4f:d1:d3:be:0c:23:cc:
         69:ac:7b:36:da:5c:db:d9:3e:a5:ae:9a:d2:40:71:61:3b:be:
         37:2b:b0:03:14:d8:27:34:b3:43:d0:04:97:28:d3:61:d4:25:
         e0:c3:41:34:c4:c3:25:f2:d3:e3:89:22:62:76:0d:0e:b2:d0:
         f1:45:15:ad:39:fe:58:b8:de:4e:74:89:e3:75:f1:f5:a1:50:
         ac:5d:4d:68:52:28:3e:cf:b3:5f:39:54:4a:18:cc:07:c1:25:
         b9:27:75:cc:72:91:3f:8e:2e:be:a1:1f:d6:4c:3b:22:20:27:
         57:7c:e3:05:09:80:b8:3a:ea:5a:6e:2a:e6:32:4c:84:7c:0c:
         c4:dc:fe:a7:44:87:7c:1a:6a:fd:ad:07:d8:81:bc:6e:62:0f:
         36:69:c6:0d:ee:1a:e4:4c:77:be:2e:f1:47:06:1f:57:01:e1:
         8c:f1:e6:fa:fa:64:77:64:72:5e:9e:15:b7:b7:c6:4b:9c:fd:
         64:b8:91:8d:db:6d:8d:4d:5b:70:eb:3e:b9:b1:41:02:29:5f:
         cc:2b:07:43
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUVlTara/JeZnBHoQW5490Sj8O7Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE
Q0I5NjM1NzAeFw0yNjA1MjkwNjQ5NDRaFw0yNzA1MjgwNjU0NDRaMDMxMTAvBgNV
BAMTKDlCNDNDMjFGNzI5RjU4NTJBNEVEQzYzRjNFQ0EzNjUzMkUyREJERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQryx09U1cEv+LpFGk1OZ714b
HWnpg70WY7azps48X2tsZQxbgeD2ZNi514S0OnazT+VukXvze80yG3ptBHv+vMZi
Fypo5xHTz5OPZdcfvqJ1/R/U5dXxsd5gBdvoezpz9hLpHvsSTpcdHKUkqaHzdaM/
phQSFqk2W2Ewh75NhFWimWWdWhMyZ+fdiUYfpohAvNFNxgIglDsANDYEZUy6i2DZ
owChSBpRXRGCaVdHel3hzxgK2ha805LonVPipIJU4FWfVfGGxY5JHiwPQWKNexFS
2tylUPu57DPhNaeRYEWC2t0jscFndfzXFLJ8nXZLUbeJIDXzjh1+z7cDMhubAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUm0PCH3KfWFKk7cY/Pso2Uy4tvfkwHwYDVR0j
BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3
MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDY4NDQxNy8wLzMxMzAzMzJlMzcz
NTJlMzEzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMzM3MzAzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdLaDANBgkqhkiG9w0BAQsFAAOCAQEADSRR5py5v56ILpSYhowogPlE
jU2GGGQwSg7AmjoHglMFFDP88Ej3uHHHTQwr0bBP0dO+DCPMaax7Ntpc29k+pa6a
0kBxYTu+NyuwAxTYJzSzQ9AElyjTYdQl4MNBNMTDJfLT44kiYnYNDrLQ8UUVrTn+
WLjeTnSJ43Xx9aFQrF1NaFIoPs+zXzlUShjMB8EluSd1zHKRP44uvqEf1kw7IiAn
V3zjBQmAuDrqWm4q5jJMhHwMxNz+p0SHfBpq/a0H2IG8bmIPNmnGDe4a5Ex3vi7x
RwYfVwHhjPHm+vpkd2RyXp4Vt7fGS5z9ZLiRjdttjU1bcOs+ubFBAilfzCsHQw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:00:30 2026 by rpki-client