Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa
File:                     3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa (raw, json)
Hash identifier:          sjhYlFRils7TGbe4yrQB1MXoq74ExmSHsG4znfKuu7I=
Subject key identifier:   76:09:6C:57:AD:AD:FA:EF:D1:CB:A6:EC:E9:B2:04:D2:23:D9:AD:60
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       7B1A00771A88E43FB62E0E3CD29BFD15149592A7
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa
Signing time:             Mon 27 Apr 2026 01:23:32 +0000
ROA not before:           Mon 27 Apr 2026 01:18:32 +0000
ROA not after:            Mon 26 Apr 2027 01:23:32 +0000
asID:                     63654
IP address blocks:        103.116.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1a:00:77:1a:88:e4:3f:b6:2e:0e:3c:d2:9b:fd:15:14:95:92:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Apr 27 01:18:32 2026 GMT
            Not After : Apr 26 01:23:32 2027 GMT
        Subject: CN=76096C57ADADFAEFD1CBA6ECE9B204D223D9AD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:e1:75:ff:27:8a:d5:3a:e5:e4:07:9e:91:
                    48:98:9e:3b:c2:ea:18:64:fe:38:f1:42:36:fd:82:
                    7c:74:46:b7:02:64:a7:40:e7:86:41:59:d7:1a:58:
                    97:0e:c1:38:a7:c2:f6:50:d2:c4:c1:d8:a0:d8:2c:
                    bb:2c:c4:8e:ac:8b:28:11:a3:ff:19:f1:7a:b4:25:
                    c5:da:2b:d4:5d:14:16:b2:9f:f6:c3:53:18:fa:cd:
                    25:5f:91:01:fd:47:88:f3:41:93:11:6c:39:a6:02:
                    f1:0d:81:98:25:e4:f1:91:42:b8:b4:68:27:aa:b1:
                    ff:6d:07:56:46:c8:f9:c8:9a:c2:2b:84:3a:60:ba:
                    8e:84:84:ca:a7:d7:c1:90:7b:1b:41:d8:fb:95:20:
                    68:ad:ca:ff:93:4b:a1:b5:0e:b2:c2:5d:a7:e3:7a:
                    3b:42:ce:d3:90:65:b4:55:06:ad:21:b0:5a:7d:63:
                    30:57:a4:6f:b4:2b:8c:ed:e1:1a:78:ec:c1:c8:42:
                    05:fc:df:a3:68:e4:29:9a:15:1a:d5:3f:b5:3f:7b:
                    57:ed:85:0d:d3:64:fb:d2:f3:3d:8b:7b:8d:b8:81:
                    83:ae:c4:66:e4:ad:02:be:d7:3d:76:c2:bd:2f:be:
                    74:37:ca:ba:6b:e1:4e:52:a1:ea:db:f8:a4:96:38:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:09:6C:57:AD:AD:FA:EF:D1:CB:A6:EC:E9:B2:04:D2:23:D9:AD:60
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32342d3234203d3e203633363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:95:46:50:31:a0:fa:e6:4b:90:50:1f:bf:5f:f9:c2:35:
         48:16:d0:c1:6d:f4:f2:9c:b9:b9:ce:c0:d8:ab:47:3e:31:f9:
         cf:e0:27:e0:c3:80:cf:7e:a0:5f:6c:14:f5:95:9c:d3:b9:6a:
         4f:80:a1:06:10:ca:56:c5:8c:ea:5e:5a:ae:37:2c:f4:f1:ea:
         b7:81:6a:44:af:c9:8e:d6:f7:d4:fb:b6:cc:0b:b7:a8:ee:5b:
         04:f9:23:2f:3f:70:1a:54:7a:79:fb:98:94:b1:ab:e7:ed:5e:
         6d:7d:af:9e:47:88:7f:40:3f:43:b9:86:6c:67:da:13:fc:60:
         97:fa:ec:7a:3d:a3:69:22:0c:ac:b6:99:30:8a:c8:ae:18:b5:
         0c:28:ed:83:15:b0:eb:7a:8f:3a:b6:d6:83:56:04:51:36:7e:
         27:31:78:98:fa:06:17:df:50:b8:0a:43:13:1b:87:28:ea:b6:
         f3:fc:0d:2c:c2:26:e3:f8:25:de:dd:8f:14:21:82:fc:7b:7b:
         22:b3:fa:ce:69:42:81:cd:88:34:5e:a4:53:7d:f9:3d:c5:75:
         e3:d1:9d:7d:0e:52:3f:4e:70:89:ab:1c:18:b3:5c:0b:c9:96:
         15:11:1d:52:71:c2:25:89:f5:ad:f2:fb:95:cb:4c:ff:92:c9:
         61:90:6a:e4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUexoAdxqI5D+2Lg480pv9FRSVkqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3
RkFEMjVGOTAeFw0yNjA0MjcwMTE4MzJaFw0yNzA0MjYwMTIzMzJaMDMxMTAvBgNV
BAMTKDc2MDk2QzU3QURBREZBRUZEMUNCQTZFQ0U5QjIwNEQyMjNEOUFENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzOF1/yeK1Trl5AeekUiYnjvC
6hhk/jjxQjb9gnx0RrcCZKdA54ZBWdcaWJcOwTinwvZQ0sTB2KDYLLssxI6siygR
o/8Z8Xq0JcXaK9RdFBayn/bDUxj6zSVfkQH9R4jzQZMRbDmmAvENgZgl5PGRQri0
aCeqsf9tB1ZGyPnImsIrhDpguo6EhMqn18GQextB2PuVIGityv+TS6G1DrLCXafj
ejtCztOQZbRVBq0hsFp9YzBXpG+0K4zt4Rp47MHIQgX836No5CmaFRrVP7U/e1ft
hQ3TZPvS8z2Le424gYOuxGbkrQK+1z12wr0vvnQ3yrpr4U5Soerb+KSWOI5pAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUdglsV62t+u/Ry6bs6bIE0iPZrWAwHwYDVR0j
BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3
MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8zMTMwMzMyZTMx
MzEzNjJlMzEzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzUzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd0eDANBgkqhkiG9w0BAQsFAAOCAQEAcZ2VRlAxoPrmS5BQH79f
+cI1SBbQwW308py5uc7A2KtHPjH5z+An4MOAz36gX2wU9ZWc07lqT4ChBhDKVsWM
6l5arjcs9PHqt4FqRK/Jjtb31Pu2zAu3qO5bBPkjLz9wGlR6efuYlLGr5+1ebX2v
nkeIf0A/Q7mGbGfaE/xgl/rsej2jaSIMrLaZMIrIrhi1DCjtgxWw63qPOrbWg1YE
UTZ+JzF4mPoGF99QuApDExuHKOq28/wNLMIm4/gl3t2PFCGC/Ht7IrP6zmlCgc2I
NF6kU335PcV149GdfQ5SP05wiascGLNcC8mWFREdUnHCJYn1rfL7lctM/5LJYZBq
5A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 20:38:22 2026 by rpki-client