Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37382e302f32342d3234203d3e203539303039.roa
File:                     3130332e3235342e37382e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier:          +om2kCoIA/Gr26k/OsjMy4to5IENayXX/WLw2XAhylg=
Subject key identifier:   DF:0B:93:95:C5:2F:08:DE:8B:AB:BB:AD:D8:70:11:EB:24:A6:4F:89
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       18F444F6533A79814C18DFAC03B5F84D32D24918
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37382e302f32342d3234203d3e203539303039.roa
Signing time:             Wed 01 Jul 2026 09:27:44 +0000
ROA not before:           Wed 01 Jul 2026 09:22:44 +0000
ROA not after:            Wed 30 Jun 2027 09:27:44 +0000
asID:                     59009
IP address blocks:        103.254.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f4:44:f6:53:3a:79:81:4c:18:df:ac:03:b5:f8:4d:32:d2:49:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul  1 09:22:44 2026 GMT
            Not After : Jun 30 09:27:44 2027 GMT
        Subject: CN=DF0B9395C52F08DE8BABBBADD87011EB24A64F89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:48:1e:e7:c0:b9:ae:9e:5e:d1:23:c5:b7:
                    c3:4b:c3:08:2f:ea:72:e2:6f:ef:a1:17:75:c7:1b:
                    33:43:3a:06:73:fd:a0:63:f5:b7:16:5c:55:ef:c1:
                    ad:3b:b9:02:20:69:b6:58:1c:b8:d0:0c:47:14:2b:
                    cf:6c:96:11:8c:88:9d:fe:b7:ed:03:f8:3a:9f:04:
                    a1:15:8f:08:22:bc:1e:36:10:4b:d2:c5:18:14:05:
                    51:2b:b6:59:c9:d2:92:99:45:91:4f:b2:35:9f:56:
                    3d:5e:cb:e8:15:47:bd:1d:aa:b7:45:40:5a:cb:65:
                    1e:f5:e4:58:b7:02:9c:a5:64:42:1c:99:49:db:68:
                    b5:88:87:4d:93:35:73:6d:0f:9d:a4:1e:b0:de:8e:
                    21:c9:ed:0b:4f:fd:12:9f:2f:38:31:f7:5e:e3:05:
                    a8:65:84:6f:d0:5f:62:16:3c:4a:d8:f5:5d:73:60:
                    cc:ab:84:cb:d1:4d:ac:ae:40:3d:51:16:ae:f3:c7:
                    14:d8:c0:3c:a7:6a:5b:f3:00:66:f4:4f:6d:ed:b1:
                    c4:7c:21:f1:94:75:0e:51:36:0a:ea:ec:15:45:39:
                    9e:15:c1:c5:b7:bd:5f:1c:33:28:08:2d:2e:db:14:
                    05:e5:7a:0d:23:6b:ae:9b:0a:2e:66:86:42:f6:8d:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:93:95:C5:2F:08:DE:8B:AB:BB:AD:D8:70:11:EB:24:A6:4F:89
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37382e302f32342d3234203d3e203539303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:7a:91:0a:7b:c0:96:16:ed:91:cf:0d:79:36:53:0f:d1:
         f7:4a:7c:b2:c4:2e:c2:f3:9d:9b:19:7a:75:8a:9e:2a:55:ee:
         7a:c5:69:a8:0c:24:76:31:77:78:51:e3:3c:a3:d1:51:5e:ca:
         f7:02:82:4d:80:6c:2b:f5:e4:3a:cd:d5:54:2e:37:64:2c:c6:
         8b:49:a9:37:9a:60:63:ed:3e:05:1e:6b:bb:f0:16:dc:5d:9c:
         87:c4:d8:81:dd:4c:0d:e7:7e:5e:c9:8e:d3:7f:ad:e9:d6:3f:
         ab:14:48:85:a5:2e:da:91:45:30:ad:8e:a8:0b:67:7a:cd:e1:
         d0:69:1a:38:d1:26:cb:60:14:16:58:dd:1f:12:5f:8e:1f:63:
         e9:17:8e:eb:c5:48:fa:04:d0:c5:5d:cb:2e:ba:80:4e:c7:93:
         eb:70:a7:06:d7:c0:5f:74:6e:9e:45:45:70:1d:c8:69:c4:32:
         aa:f5:15:70:e4:e4:9f:4c:f8:46:b3:c5:90:65:ed:77:2a:b3:
         3a:84:df:44:a4:e1:24:a9:61:10:de:40:cc:c4:b5:b8:16:09:
         46:fa:82:d6:d5:0f:6f:68:d8:b1:70:5d:06:d9:13:9f:67:ea:
         78:8d:66:2d:01:11:92:56:86:1e:06:f4:41:d3:af:70:d7:bb:
         92:6d:a7:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:46 2026 by rpki-client