Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e33372e3130322e302f32342d3234203d3e203538353431.roa
File:                     3130332e33372e3130322e302f32342d3234203d3e203538353431.roa (raw, json)
Hash identifier:          XsDI8jG/4n38EJFhjvI1vKivDIUlwHF9QzH9fIfMqx4=
Subject key identifier:   AC:90:F1:58:BD:A8:83:AC:B2:D3:55:43:E8:FF:7B:25:03:7C:93:57
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       2A82F52E83F8E0C1BA1AF6AF01A8E13629BB74AC
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e33372e3130322e302f32342d3234203d3e203538353431.roa
Signing time:             Mon 29 Jun 2026 07:28:48 +0000
ROA not before:           Mon 29 Jun 2026 07:23:48 +0000
ROA not after:            Mon 28 Jun 2027 07:28:48 +0000
asID:                     58541
IP address blocks:        103.37.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:82:f5:2e:83:f8:e0:c1:ba:1a:f6:af:01:a8:e1:36:29:bb:74:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jun 29 07:23:48 2026 GMT
            Not After : Jun 28 07:28:48 2027 GMT
        Subject: CN=AC90F158BDA883ACB2D35543E8FF7B25037C9357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:dc:3f:7d:f6:8e:09:ed:7d:23:1c:9f:ad:53:
                    cb:7b:4d:99:a8:4e:7c:e9:b9:83:b6:4d:3b:af:f1:
                    07:ab:eb:87:d5:7f:a1:c6:fc:32:39:3b:9e:7d:bd:
                    70:07:44:8d:13:10:1f:a6:8d:e3:30:af:a9:53:80:
                    2b:c9:e5:c4:56:28:7b:7d:12:f5:4a:20:e9:7a:d3:
                    ca:68:04:6f:1f:14:a8:2b:f3:84:da:fd:33:c8:27:
                    1f:fd:ce:5d:8d:3e:65:0b:3e:7a:51:04:f4:91:0e:
                    af:6b:4f:5f:30:32:6e:2d:7e:f4:8d:ae:63:5c:6c:
                    a1:dd:fd:9d:3e:da:35:d3:09:39:e0:1d:a8:6a:19:
                    36:31:57:7c:4d:20:9b:54:78:3d:ef:09:40:8a:8b:
                    84:2a:0f:34:4f:11:3f:31:b7:19:00:31:5e:38:6b:
                    00:ef:28:3f:84:95:79:3b:67:12:50:a9:96:4f:70:
                    0e:21:df:3d:61:8d:d8:99:e9:c3:41:be:79:d3:2b:
                    d7:db:0f:e9:35:f0:57:c2:a1:c1:4c:6c:05:70:5f:
                    ff:5b:85:5e:06:a0:67:97:f1:0d:2c:93:5b:9a:e6:
                    1f:14:c2:4e:3c:49:f5:09:b4:02:a7:33:08:c9:97:
                    91:4a:d1:2a:f0:2b:a2:9f:6a:70:3f:54:e9:8b:ec:
                    66:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:F1:58:BD:A8:83:AC:B2:D3:55:43:E8:FF:7B:25:03:7C:93:57
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e33372e3130322e302f32342d3234203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:ef:a1:89:e7:42:0b:99:67:f5:4a:13:33:71:56:b9:cc:
         8b:cf:4d:29:ea:b1:d9:d1:1a:df:5a:50:33:16:e5:0a:43:95:
         86:1c:87:91:6f:a9:58:8d:ab:3a:c1:48:1b:7d:9e:6c:25:1e:
         59:95:e9:a3:f9:d7:50:ce:73:cb:c8:51:19:59:19:35:37:40:
         97:e4:75:af:cc:33:1f:42:51:13:2f:19:d2:b5:0a:13:12:7a:
         b9:5f:66:88:29:62:31:14:ed:1c:c0:41:63:52:e1:5b:e9:6d:
         1a:48:57:85:81:0e:ce:4c:9d:b1:3a:7c:74:76:22:10:d8:c5:
         21:5b:e3:b9:d3:90:ad:af:85:b5:dd:b1:63:a0:0d:32:7b:b7:
         52:f9:ab:a9:62:e6:71:7e:3a:6a:79:ec:e1:6b:39:19:7c:0f:
         87:fc:2f:9b:02:9b:88:11:f4:36:16:cc:0d:41:24:d9:bf:79:
         6b:95:f5:93:97:48:67:0a:da:91:78:2d:f2:39:f5:33:6c:a1:
         38:34:3c:2f:a4:7b:91:b7:94:db:5e:85:1c:18:46:c9:9f:02:
         c5:28:a9:1c:a6:d6:56:2f:2d:14:4b:7a:6d:b0:f2:c6:d0:74:
         09:93:53:4c:0d:b0:82:17:16:c8:1d:51:cc:1e:af:f0:7b:08:
         6b:ed:d7:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:50 2026 by rpki-client