Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3234203d3e20313333373735.roa
File:                     3130332e3231392e3137362e302f32342d3234203d3e20313333373735.roa (raw, json)
Hash identifier:          r6HCYUs6m4uN5ckrTmwTBPrWYF9J6LpMXhbcOiCmktE=
Subject key identifier:   E6:CE:B2:EC:0C:9C:5F:3F:2F:6B:FF:B5:1D:78:0A:16:78:ED:A2:AA
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       703340C513709A03BC1ACF57D5D3F7E2E57D876C
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3234203d3e20313333373735.roa
Signing time:             Fri 29 May 2026 05:54:37 +0000
ROA not before:           Fri 29 May 2026 05:49:37 +0000
ROA not after:            Fri 28 May 2027 05:54:37 +0000
asID:                     133775
IP address blocks:        103.219.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:33:40:c5:13:70:9a:03:bc:1a:cf:57:d5:d3:f7:e2:e5:7d:87:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:49:37 2026 GMT
            Not After : May 28 05:54:37 2027 GMT
        Subject: CN=E6CEB2EC0C9C5F3F2F6BFFB51D780A1678EDA2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:ac:cd:ed:6e:14:8a:23:ad:c8:20:93:79:
                    af:aa:f5:a2:0d:a9:1f:7b:d9:c3:18:5a:92:33:6e:
                    96:0a:9d:ed:ba:84:98:8e:01:36:0a:40:da:94:8d:
                    7c:97:79:7e:d1:d3:14:49:91:3b:d6:23:5d:50:8f:
                    b0:14:5a:0f:e0:74:2c:88:c3:48:5b:2f:1a:42:c2:
                    91:ac:4b:96:d9:5d:56:12:76:93:5e:0b:1e:68:5a:
                    6e:3c:85:51:cf:e6:2e:86:39:c9:4a:13:2f:5d:2f:
                    9d:8f:e3:bc:37:73:fc:43:c6:7b:01:0a:94:6e:c8:
                    ef:ca:fa:cd:67:da:75:eb:4a:6a:ec:d0:17:cf:c1:
                    e5:f2:b8:0f:af:ed:5a:34:b6:50:0c:f7:c1:e8:c6:
                    d3:22:bb:4a:52:62:50:e2:a3:2d:44:1c:95:15:c2:
                    52:48:c0:ea:04:ca:a2:0b:e1:82:0c:53:8e:63:4b:
                    92:96:b8:7e:4f:24:f7:4b:b1:39:08:01:42:f9:6a:
                    74:63:55:27:90:5c:18:24:59:97:d2:cb:e9:e0:07:
                    23:b2:c6:61:26:72:f3:0c:f6:46:35:d1:e9:1d:e0:
                    e2:5a:a5:8a:29:aa:f7:88:57:62:10:78:9f:a4:8c:
                    cc:ae:e0:96:0d:ae:85:38:7c:31:b5:11:e5:84:f5:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CE:B2:EC:0C:9C:5F:3F:2F:6B:FF:B5:1D:78:0A:16:78:ED:A2:AA
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3234203d3e20313333373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:63:52:3a:5b:e9:53:bc:c3:48:42:c4:b4:19:ff:7b:cc:11:
         57:7b:89:a8:50:ef:e0:e4:ec:0c:6c:5a:ae:a4:2d:7c:47:f4:
         f9:2a:e3:53:97:b1:9b:fb:a6:a0:e7:be:88:78:a6:f1:b1:ff:
         08:55:03:69:dc:7d:20:86:aa:4c:fb:33:ab:4d:a6:7f:b4:2b:
         e3:74:a6:4c:bc:26:a4:8e:a9:33:99:5a:e2:c5:2b:e6:0b:da:
         f7:19:09:3f:2e:63:65:5e:de:b7:74:ba:59:33:8d:d6:4a:1f:
         a3:7b:f3:e6:fd:22:2a:3a:9b:a3:5c:b7:4e:a8:af:5a:5f:1e:
         54:47:fb:9c:cc:e6:a9:3d:7a:8a:91:a0:c0:90:60:df:83:ac:
         8d:4a:2b:fd:d3:0d:1e:87:54:ac:9d:61:7d:c0:19:3a:5b:ea:
         57:71:cb:01:9c:19:8a:39:ae:c8:b8:4a:50:38:52:91:4d:e4:
         eb:62:bb:35:9c:38:59:4e:0f:de:c2:d4:5f:21:80:22:30:85:
         91:34:42:5e:28:20:5b:cc:f9:5c:1a:46:46:12:9b:d5:09:fd:
         84:ab:1e:96:23:fb:06:56:2f:c2:c9:e4:ac:e9:47:34:dc:a1:
         4a:2b:6f:41:4e:b5:7d:86:a0:d3:69:35:20:8b:96:b2:ab:18:
         52:c1:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:58:08 2026 by rpki-client