Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37312e302f32342d3234203d3e203233363530.roa
File:                     3130332e37312e37312e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          qE+HB/jL/dZZaPj/SB367pzcLZMK04ZRnLQNWi1ZLY0=
Subject key identifier:   AE:44:0F:E8:9C:B3:4B:67:CF:80:4A:0E:98:73:F5:BB:4D:B6:EB:2B
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       6739A982C6130FC18B65D906ABF5F0DED43ACE5A
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37312e302f32342d3234203d3e203233363530.roa
Signing time:             Tue 16 Jun 2026 02:24:13 +0000
ROA not before:           Tue 16 Jun 2026 02:19:13 +0000
ROA not after:            Tue 15 Jun 2027 02:24:13 +0000
asID:                     23650
IP address blocks:        103.71.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 16:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:a9:82:c6:13:0f:c1:8b:65:d9:06:ab:f5:f0:de:d4:3a:ce:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Jun 16 02:19:13 2026 GMT
            Not After : Jun 15 02:24:13 2027 GMT
        Subject: CN=AE440FE89CB34B67CF804A0E9873F5BB4DB6EB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:f0:db:13:97:8d:44:13:8f:65:c7:66:46:
                    31:a3:33:1d:72:42:0e:27:94:9f:5a:e8:6f:76:96:
                    67:60:7a:f9:06:b5:1e:bc:ee:7d:02:29:8b:83:4a:
                    69:ee:57:7b:9d:ab:ec:1a:4e:63:99:24:2f:ec:5e:
                    a1:2d:dc:05:f5:50:cc:9d:d8:ed:34:85:91:c7:ac:
                    2e:a1:80:12:85:a2:a1:40:41:45:9e:f3:27:59:65:
                    de:32:ec:7a:af:98:61:65:ff:b2:ff:8a:98:27:b9:
                    d5:0d:b7:39:f5:83:51:10:ec:a4:22:12:e8:ff:f4:
                    34:a1:84:59:7f:5d:8a:4f:42:f9:d1:73:7c:63:92:
                    9b:23:76:52:dc:2a:e3:72:f3:3b:ab:22:99:ed:15:
                    c7:ae:6f:3d:9e:fa:dc:95:ff:10:c6:ed:47:cf:39:
                    65:7d:9a:a0:06:77:69:eb:65:d5:02:03:be:78:ae:
                    fd:d1:17:6d:22:2c:94:55:6b:2d:8d:47:fb:34:f8:
                    24:c0:5f:bf:da:09:a0:a6:17:58:37:e8:72:cd:b1:
                    1c:72:63:a1:76:c5:a5:14:cd:cc:86:18:4b:59:7a:
                    db:8f:42:01:56:ea:c3:32:38:66:b1:cd:58:64:2f:
                    84:10:7b:08:85:e7:de:ef:1b:8d:45:40:90:dc:67:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:0F:E8:9C:B3:4B:67:CF:80:4A:0E:98:73:F5:BB:4D:B6:EB:2B
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e37312e37312e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:17:08:06:da:30:10:69:ec:04:24:66:d3:6d:bc:d7:d6:
         33:62:6f:75:d9:fe:a6:2c:56:ad:c8:1c:77:4b:9e:f2:4a:f9:
         ba:9b:bb:8e:d7:b9:ce:f3:7c:a6:93:8e:9a:a9:89:01:81:28:
         25:a8:3b:83:80:a9:7b:80:ae:98:8d:4e:e8:96:20:3e:79:d3:
         17:af:b6:b5:b5:2d:6e:ca:33:07:e9:0c:4c:5a:02:1f:67:0a:
         67:d9:d2:a1:09:47:88:56:3c:3e:cf:51:66:99:2d:a3:a8:da:
         6c:71:e7:9c:ce:97:21:19:c4:86:43:13:c1:00:5d:6b:16:b0:
         6b:d7:1e:ee:ed:8a:1c:27:6c:ed:cb:53:6c:53:8e:57:5f:22:
         7d:ee:75:ed:7f:7f:11:19:73:6c:7d:84:80:62:b5:7e:cb:22:
         0e:c8:b3:01:4e:32:c0:25:9e:65:79:2b:f1:dd:ee:49:63:ba:
         b6:0a:ba:68:1e:a3:a7:a4:04:17:ac:65:0c:e6:fe:f0:a1:ee:
         05:c4:12:59:b3:30:32:56:25:98:e3:77:8d:7a:01:71:cd:8c:
         7e:1c:b6:07:96:f8:00:bf:29:b4:bd:38:78:bc:83:52:ef:98:
         a9:65:da:b5:b2:a6:62:04:29:06:0c:5c:83:fe:ca:c9:f2:fb:
         d4:63:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:16 2026 by rpki-client