Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3235203d3e2034383337.roa
File:                     3130332e3231392e3137362e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          HhhF/DL0osETKb2GCOxIHfvu9Xy7fpZZlfMaz55x6wc=
Subject key identifier:   91:3C:92:D1:AD:BF:35:AB:F0:E4:5A:62:16:81:8A:C2:5D:D4:39:01
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       0C7D7DEA62CCA578F1B4D20FA51C54687E54D103
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 05:54:38 +0000
ROA not before:           Fri 29 May 2026 05:49:38 +0000
ROA not after:            Fri 28 May 2027 05:54:38 +0000
asID:                     4837
IP address blocks:        103.219.176.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7d:7d:ea:62:cc:a5:78:f1:b4:d2:0f:a5:1c:54:68:7e:54:d1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:49:38 2026 GMT
            Not After : May 28 05:54:38 2027 GMT
        Subject: CN=913C92D1ADBF35ABF0E45A6216818AC25DD43901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:d7:3b:98:98:43:46:08:c0:01:1e:26:3a:
                    29:33:89:29:38:1f:c5:f4:2f:56:d4:ad:c2:2e:34:
                    ea:12:51:05:1d:10:cf:d5:1c:5b:7f:a5:b7:94:07:
                    e7:38:a8:e9:12:a1:02:98:25:96:8a:7d:fb:8c:2f:
                    d8:53:f8:e5:bf:9b:2f:d3:18:d2:a1:5e:34:8c:5c:
                    39:aa:67:70:89:47:a4:22:e3:3b:94:7c:b9:eb:3d:
                    e1:3b:26:b8:80:e5:0a:7b:c2:f2:8d:74:05:1c:cf:
                    24:fb:5b:37:87:f0:2d:f5:79:8b:11:9c:bf:14:e1:
                    29:3d:15:b6:9f:d7:e0:71:88:45:bf:62:b8:30:8e:
                    1b:2e:cd:39:1f:52:a9:a3:84:02:b9:6c:6c:0d:82:
                    43:1e:84:5f:71:b4:f8:c2:03:52:73:03:fb:c7:33:
                    0b:bf:1b:90:cd:e5:44:82:6d:2f:7d:bd:0f:df:fc:
                    93:d3:68:f0:51:0e:fa:81:b6:8f:54:bf:89:c1:c9:
                    55:f9:d3:8d:fb:97:49:e5:98:71:9f:24:4d:29:21:
                    7b:1c:5e:b5:bd:41:2e:1b:69:fc:dd:56:9c:48:d2:
                    e0:07:4d:21:17:ee:06:ea:d1:98:9e:78:dd:89:56:
                    f8:30:00:c3:62:3a:6d:dc:5b:01:6d:d3:d1:2b:51:
                    02:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3C:92:D1:AD:BF:35:AB:F0:E4:5A:62:16:81:8A:C2:5D:D4:39:01
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137362e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:48:a7:3b:83:12:29:19:65:a5:aa:54:52:dc:f5:46:8a:24:
         b4:3d:0a:e8:6f:70:95:88:ad:0b:e5:db:a0:e2:1e:36:c7:94:
         b7:01:3c:2c:8c:59:5b:ba:be:46:d3:d2:0a:85:92:15:2b:e6:
         9a:58:ae:85:1d:4a:1b:43:19:a0:46:2f:13:a6:a7:34:7a:66:
         df:61:b0:e9:ef:63:e0:0d:d6:87:c3:52:9e:24:bd:b2:56:54:
         96:d3:e4:79:0c:23:2d:d0:08:8b:a0:14:55:11:c4:54:6c:df:
         b6:95:00:3c:f3:5d:1a:f9:b1:64:2b:f7:1c:2a:09:3b:4e:ba:
         f2:62:2e:c9:c6:5e:6c:45:1f:80:be:11:89:32:99:30:fa:40:
         e9:ca:71:5e:d9:a0:7e:ed:6b:12:e9:c1:91:19:71:ca:b2:80:
         38:0c:43:a4:a3:2c:7b:44:ad:e6:92:56:38:73:7b:7e:b9:17:
         4c:15:99:e8:53:53:60:50:d5:d3:f6:5c:3d:5b:9f:d8:52:ba:
         31:fd:b9:59:42:fc:35:3f:93:46:86:df:c8:20:6e:b0:8f:12:
         51:7a:38:01:2b:d5:a9:e0:ff:13:8c:cf:72:76:04:9a:57:e1:
         98:e9:98:a2:a8:ff:1b:c5:47:c7:08:2e:11:49:92:1d:dc:0c:
         e0:94:d6:be
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDH196mLMpXjxtNIPpRxUaH5U0QMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjkwNTQ5MzhaFw0yNzA1MjgwNTU0MzhaMDMxMTAvBgNV
BAMTKDkxM0M5MkQxQURCRjM1QUJGMEU0NUE2MjE2ODE4QUMyNURENDM5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICtc7mJhDRgjAAR4mOikziSk4
H8X0L1bUrcIuNOoSUQUdEM/VHFt/pbeUB+c4qOkSoQKYJZaKffuML9hT+OW/my/T
GNKhXjSMXDmqZ3CJR6Qi4zuUfLnrPeE7JriA5Qp7wvKNdAUczyT7WzeH8C31eYsR
nL8U4Sk9Fbaf1+BxiEW/YrgwjhsuzTkfUqmjhAK5bGwNgkMehF9xtPjCA1JzA/vH
Mwu/G5DN5USCbS99vQ/f/JPTaPBRDvqBto9Uv4nByVX50437l0nlmHGfJE0pIXsc
XrW9QS4bafzdVpxI0uAHTSEX7gbq0ZieeN2JVvgwAMNiOm3cWwFt09ErUQKNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUkTyS0a2/Navw5FpiFoGKwl3UOQEwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3NDI1MjE5NDEwMzI5Ny8wLzMxMzAzMzJlMzIz
MTM5MmUzMTM3MzYyZTMwMmYzMjM0MmQzMjM1MjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfbsDANBgkqhkiG9w0BAQsFAAOCAQEAhkinO4MSKRllpapUUtz1Rook
tD0K6G9wlYitC+XboOIeNseUtwE8LIxZW7q+RtPSCoWSFSvmmliuhR1KG0MZoEYv
E6anNHpm32Gw6e9j4A3Wh8NSniS9slZUltPkeQwjLdAIi6AUVRHEVGzftpUAPPNd
GvmxZCv3HCoJO0668mIuycZebEUfgL4RiTKZMPpA6cpxXtmgfu1rEunBkRlxyrKA
OAxDpKMse0St5pJWOHN7frkXTBWZ6FNTYFDV0/ZcPVuf2FK6Mf25WUL8NT+TRobf
yCBusI8SUXo4ASvVqeD/E4zPcnYEmlfhmOmYoqj/G8VHxwguEUmSHdwM4JTWvg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:29 2026 by rpki-client