Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37392e302f32342d3234203d3e203539303039.roa
File:                     3130332e3235342e37392e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier:          RU8rCpvDTOUN8aHCI6rbN3TTBH7hZij0BMfkPiGrNA4=
Subject key identifier:   68:0B:B5:62:9F:AA:8F:BD:1B:DF:B5:EA:2C:82:8F:C5:8C:E2:3B:8A
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       5DB798A0AC3A21A7F9AA8CDD00F3E5F147F74723
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37392e302f32342d3234203d3e203539303039.roa
Signing time:             Wed 01 Jul 2026 09:27:44 +0000
ROA not before:           Wed 01 Jul 2026 09:22:44 +0000
ROA not after:            Wed 30 Jun 2027 09:27:44 +0000
asID:                     59009
IP address blocks:        103.254.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b7:98:a0:ac:3a:21:a7:f9:aa:8c:dd:00:f3:e5:f1:47:f7:47:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul  1 09:22:44 2026 GMT
            Not After : Jun 30 09:27:44 2027 GMT
        Subject: CN=680BB5629FAA8FBD1BDFB5EA2C828FC58CE23B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:ca:2d:d6:0f:c5:53:4e:b2:7b:a2:52:65:
                    6e:4a:7b:07:e3:f9:83:69:2b:74:6e:79:11:97:fd:
                    91:d0:53:44:fd:20:26:1f:bd:db:dd:63:b3:4e:2c:
                    76:ee:54:ec:50:57:86:14:1f:e9:f5:e0:db:87:31:
                    ce:94:4f:58:95:b6:ad:a1:46:84:12:6c:e3:82:d7:
                    d3:07:6d:f3:ac:0d:c6:e5:43:94:04:c8:09:96:75:
                    76:11:2f:48:f1:54:03:03:b6:47:64:bd:25:82:0e:
                    78:81:25:65:67:33:55:7f:e9:0e:c0:fc:c0:c9:85:
                    df:3a:31:21:00:78:06:db:d0:e7:06:13:39:ad:3c:
                    cf:38:c6:20:96:6c:dc:5c:db:dd:b0:44:8a:37:62:
                    6e:95:52:43:9f:e0:55:c4:3d:a2:fb:2d:48:b0:9a:
                    41:3f:da:7a:65:9a:36:37:0d:6f:64:26:44:5f:cb:
                    6e:54:d1:ba:dd:08:7d:74:0c:41:9f:b4:95:eb:f6:
                    d0:28:4e:a3:d6:d0:7f:62:12:e1:d4:47:95:95:67:
                    8b:e6:f0:a8:7c:1a:4e:fa:33:f6:73:3f:ae:54:2e:
                    df:65:f8:9f:c5:09:44:d8:ba:b3:f8:95:39:29:8a:
                    4f:79:19:9a:91:f9:c3:2d:af:34:4a:db:e9:94:70:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:B5:62:9F:AA:8F:BD:1B:DF:B5:EA:2C:82:8F:C5:8C:E2:3B:8A
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3235342e37392e302f32342d3234203d3e203539303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:8c:d3:6e:72:8e:f0:0d:98:84:27:01:10:c1:c2:db:bd:
         1d:d2:06:e7:24:93:9b:9d:98:cb:ad:14:24:c7:fe:86:3b:5d:
         43:a2:a8:96:f7:37:cf:e3:fa:be:7d:37:d2:61:0f:e1:df:a3:
         b9:ee:f8:d0:f5:35:41:16:aa:14:98:69:91:f4:89:08:03:7a:
         7b:a8:b1:97:52:96:2f:c5:c7:26:84:04:ca:9a:1a:79:30:5b:
         38:41:84:a9:6c:0a:46:46:ea:d5:4e:d8:33:47:41:04:f8:72:
         4e:2c:a8:6e:07:83:07:c9:52:b3:91:76:57:b9:d9:23:70:52:
         9c:15:a3:80:e9:02:e6:9d:79:48:33:13:7d:56:52:0e:33:28:
         42:41:5e:3c:b5:36:df:1f:78:c7:56:20:c5:6a:c8:3c:fb:ff:
         d6:d8:19:c4:2d:d0:7b:c8:4b:84:dc:e6:62:1c:0f:f7:43:88:
         af:3f:71:b8:f6:0a:f1:59:39:e5:4c:14:5c:f1:88:e4:20:7d:
         fe:d6:90:33:e9:a7:03:cb:2e:1e:91:76:1b:d8:fa:c0:cf:6a:
         15:30:17:49:5c:0a:67:7a:af:d3:75:cc:a9:57:d2:ee:28:d7:
         dc:e0:7e:36:b3:d8:20:61:2f:4e:54:85:fe:b6:ca:86:53:71:
         dd:41:26:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:44 2026 by rpki-client