Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e33372e3130332e302f32342d3234203d3e203538353431.roa
File:                     3130332e33372e3130332e302f32342d3234203d3e203538353431.roa (raw, json)
Hash identifier:          y4hSD9GZdk1NzuSwHtDexP3OH3v6UdEqpQpNWgUtVAY=
Subject key identifier:   0C:44:8A:55:E0:0A:A7:E8:01:E5:33:86:2A:64:90:4C:89:DE:62:0B
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       1739D887D9B32AF2CBBD9A2ACEDE879C9094E204
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e33372e3130332e302f32342d3234203d3e203538353431.roa
Signing time:             Mon 29 Jun 2026 07:28:48 +0000
ROA not before:           Mon 29 Jun 2026 07:23:48 +0000
ROA not after:            Mon 28 Jun 2027 07:28:48 +0000
asID:                     58541
IP address blocks:        103.37.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:39:d8:87:d9:b3:2a:f2:cb:bd:9a:2a:ce:de:87:9c:90:94:e2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jun 29 07:23:48 2026 GMT
            Not After : Jun 28 07:28:48 2027 GMT
        Subject: CN=0C448A55E00AA7E801E533862A64904C89DE620B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:60:a6:63:03:31:15:2f:05:37:7c:55:2a:86:
                    0c:6b:6e:4e:f0:d9:ca:3d:49:12:18:9d:e4:f7:8f:
                    85:ca:b4:e6:30:28:cb:de:5d:3f:1c:f6:7b:34:39:
                    4c:10:63:c3:b0:8d:4d:b3:43:e0:0d:52:3a:8d:d0:
                    bb:82:d3:d7:f9:08:6f:25:f9:ba:cb:65:a3:04:27:
                    2c:3c:f5:bf:9f:96:b0:ec:1c:20:e4:ed:74:55:f7:
                    8c:e3:8c:2b:68:80:2d:ec:92:41:fb:59:d8:28:0d:
                    3d:8e:ad:d9:67:de:ac:14:03:86:00:98:54:09:44:
                    92:e2:e2:0b:cd:c4:60:58:88:22:20:16:cf:87:b4:
                    10:af:6b:21:b9:e8:25:d7:29:49:6b:60:00:44:2d:
                    23:8e:49:88:50:ea:1e:cd:e8:4e:9d:87:b2:47:05:
                    1a:76:28:97:40:b6:e5:e9:4d:90:3a:af:2d:23:21:
                    78:44:85:8a:5a:04:a6:26:b5:e8:81:46:4c:c2:1f:
                    dc:f4:7c:5a:56:81:08:8c:04:6e:a2:05:82:80:83:
                    12:f3:35:05:bd:d9:07:99:d8:ca:95:93:18:cb:6a:
                    87:a9:ae:98:44:50:1c:83:ae:3f:03:0c:e5:6b:6d:
                    60:3b:89:e2:6e:2a:22:60:e2:0a:cf:65:e3:80:66:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:8A:55:E0:0A:A7:E8:01:E5:33:86:2A:64:90:4C:89:DE:62:0B
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e33372e3130332e302f32342d3234203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:37:76:af:9d:f0:9f:76:bc:b9:71:a1:7a:d1:b4:66:15:d9:
         59:05:76:cf:f3:0e:28:cf:99:79:16:31:5b:21:ee:0d:da:08:
         1c:d4:1e:1f:b9:07:58:b9:1b:00:37:13:a0:0c:95:f0:df:7d:
         4c:e5:bd:03:ad:7e:15:a1:bd:a1:e2:9f:12:9a:f5:14:13:10:
         d9:e4:11:80:dc:59:0c:45:9d:ba:26:d9:38:a3:37:a9:79:f8:
         17:84:d3:5d:71:5e:5b:8d:fe:7c:47:b9:5c:77:5c:58:5e:a4:
         d1:c6:5e:8d:8e:cf:2d:31:d1:c8:b8:9a:46:7f:9c:22:3f:8e:
         00:ef:f7:0c:24:ef:05:f0:ec:e4:56:c9:69:e5:62:e9:ab:09:
         b7:c9:51:c7:60:b6:99:a7:6e:18:55:f6:0e:94:dc:d0:47:81:
         9a:3a:9c:ae:a3:61:76:21:c4:ba:88:ac:f1:f1:40:67:90:6e:
         11:f5:8b:74:0a:04:40:18:6c:09:e1:32:a1:4b:ff:0a:54:f3:
         25:90:d1:33:8a:d2:d2:f4:e5:35:7d:5e:f2:32:88:37:d2:ca:
         4f:af:40:bf:70:9b:33:7e:97:24:78:f8:1e:94:b7:5b:0f:ff:
         dd:07:b5:4e:92:af:64:f6:5a:2f:2e:cd:68:59:8f:46:7e:99:
         b4:31:90:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:14 2026 by rpki-client