Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e37352e3130342e302f32322d3234203d3e203633373031.roa
File:                     3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (raw, json)
Hash identifier:          aeACiq24WzNuqNoiZEWz6bXGj59Rj/c0kBVmOgCJJIk=
Subject key identifier:   1E:4E:B8:A3:B4:35:B2:1D:A2:2C:1A:D9:AB:CC:84:4D:59:49:67:40
Certificate issuer:       /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial:       63FC61D77AE4771D3F426BD525F4F54A8EAB2D3D
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e37352e3130342e302f32322d3234203d3e203633373031.roa
Signing time:             Fri 10 Apr 2026 08:16:33 +0000
ROA not before:           Fri 10 Apr 2026 08:11:33 +0000
ROA not after:            Fri 09 Apr 2027 08:16:33 +0000
asID:                     63701
IP address blocks:        103.75.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fc:61:d7:7a:e4:77:1d:3f:42:6b:d5:25:f4:f5:4a:8e:ab:2d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
        Validity
            Not Before: Apr 10 08:11:33 2026 GMT
            Not After : Apr  9 08:16:33 2027 GMT
        Subject: CN=1E4EB8A3B435B21DA22C1AD9ABCC844D59496740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:08:4f:84:ea:47:d5:44:ea:0c:e2:80:df:
                    32:c1:36:cd:b1:06:07:08:5d:71:e6:db:b2:d9:e0:
                    d5:83:ac:81:59:ae:38:ed:4e:fd:9c:e0:a4:b1:f6:
                    3c:03:1d:68:b5:06:41:e6:68:0b:3a:1b:5e:07:8e:
                    ff:bd:df:65:86:44:4b:cf:15:c1:95:ae:17:c9:b2:
                    d9:41:6a:24:fc:99:d9:11:af:40:c7:8c:1d:01:42:
                    95:e7:26:32:00:bf:a0:52:51:a7:66:38:1b:6e:30:
                    61:ab:ed:2f:4c:4a:17:5c:3d:49:10:de:7d:95:b3:
                    74:89:ab:96:5b:fa:ea:41:60:fb:c4:c3:ed:00:da:
                    b7:c4:8a:0b:41:e4:ce:24:71:25:47:79:e3:b0:36:
                    00:0f:3e:d3:07:77:55:e0:e8:c2:74:ca:1b:27:43:
                    5d:53:af:31:a0:d8:cb:51:bb:66:63:c2:d5:5b:12:
                    41:87:d7:b4:72:7e:c9:f9:1e:0f:7b:c8:ad:13:3d:
                    13:b6:8f:8e:fd:90:fb:1b:96:a9:90:9d:92:a9:27:
                    a0:98:3d:60:6d:6a:05:48:f9:34:f0:b4:5e:76:51:
                    9f:95:6e:4a:e5:0a:e4:a2:71:57:49:72:47:c7:47:
                    4a:bb:08:cd:4f:30:36:97:e0:1b:5b:8b:1f:11:06:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4E:B8:A3:B4:35:B2:1D:A2:2C:1A:D9:AB:CC:84:4D:59:49:67:40
            X509v3 Authority Key Identifier:
                keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/3130332e37352e3130342e302f32322d3234203d3e203633373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:3b:c8:27:14:e0:20:07:e1:56:43:1a:47:5c:0e:41:57:
         b1:8a:9e:73:11:e4:23:cb:72:9e:95:f3:7b:63:7f:d6:49:04:
         5a:c8:21:8e:50:cc:30:05:38:81:70:cc:53:fb:ce:81:6e:4f:
         f1:ae:f0:36:f7:13:35:ea:37:fc:d9:35:80:a3:c3:ad:74:5d:
         20:63:82:3b:55:d8:60:6b:d3:30:5a:71:fd:5f:49:db:3f:49:
         9c:70:9d:89:9d:33:a9:d7:26:cf:2f:fc:a3:8a:13:66:36:06:
         c1:6e:b5:3b:df:1b:87:bd:5b:95:7b:b7:2c:26:2a:0e:00:2a:
         92:cb:23:bc:42:f6:7c:9b:9d:de:ed:8b:91:d7:30:1a:97:0e:
         c7:52:52:dd:76:e6:1c:10:87:14:6b:f6:4b:ed:9f:c3:9f:d1:
         5d:39:73:26:f5:cd:72:00:76:9e:75:d0:df:83:c9:da:26:a0:
         d3:3a:71:b4:76:f3:8e:54:20:c7:a4:7c:a8:8b:2e:53:8d:53:
         cb:0e:bb:11:d8:db:4b:ab:8e:18:21:19:d8:f8:f8:80:d7:da:
         b7:9d:35:69:58:84:fa:20:8c:cb:bd:d2:ee:56:d0:1d:7b:7c:
         b9:c0:9b:26:4b:34:84:38:df:15:bb:a0:8b:54:17:32:3a:42:
         36:e7:6a:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:24 2026 by rpki-client