Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137372e302f32342d3234203d3e203536303430.roa
File:                     3130332e3231392e3137372e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          q8sEVcg3ePfZ8JAS6m7+3x1JxuT+0BXupJIezXrCVXE=
Subject key identifier:   DF:32:59:6D:E5:CF:A5:1C:04:82:AB:4B:9F:03:35:A3:4B:F9:05:8C
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       69D974127796C0C040573CE1335A6B6A32B74581
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137372e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 05:55:34 +0000
ROA not before:           Fri 29 May 2026 05:50:34 +0000
ROA not after:            Fri 28 May 2027 05:55:34 +0000
asID:                     56040
IP address blocks:        103.219.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d9:74:12:77:96:c0:c0:40:57:3c:e1:33:5a:6b:6a:32:b7:45:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:50:34 2026 GMT
            Not After : May 28 05:55:34 2027 GMT
        Subject: CN=DF32596DE5CFA51C0482AB4B9F0335A34BF9058C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:f8:43:6e:b4:5e:b4:4c:06:76:89:68:bd:
                    36:87:a6:17:6f:90:83:96:ed:68:99:ef:2c:15:5e:
                    fb:6a:5d:b8:bb:95:bf:b3:29:c7:3f:69:33:5e:a6:
                    84:02:53:b3:c0:0e:bc:64:15:08:1c:ba:97:0d:e2:
                    91:33:5b:38:d5:b1:bb:67:23:cf:73:2c:ff:92:d6:
                    9f:49:79:09:3c:77:82:71:a8:13:3e:d1:b3:7e:83:
                    57:c8:ef:28:17:7d:b8:5c:b3:77:17:9e:7c:47:30:
                    74:95:51:f4:ca:ee:53:45:dc:05:7a:0d:3b:07:ce:
                    2b:39:b7:86:c7:fe:b6:7f:14:90:fe:20:13:6d:be:
                    20:bd:3d:dd:e3:6b:db:73:25:b6:5a:6f:b1:c3:f4:
                    a9:e4:77:d6:6c:2a:f5:a0:69:74:24:e7:7e:c5:de:
                    d5:3c:6f:4e:ad:64:40:85:a4:3c:85:34:00:90:39:
                    6f:13:52:df:10:77:25:5e:65:2f:ee:55:7c:86:6a:
                    55:eb:b2:b6:6f:58:95:4f:c0:d4:27:1b:e4:23:cb:
                    0c:5d:c6:73:c7:c6:77:8a:59:c8:4d:f4:7a:d5:33:
                    04:70:6f:80:57:0f:b9:1a:09:64:10:94:a1:b7:ce:
                    9b:22:c2:ab:b9:da:28:a4:e4:f0:13:ff:11:2f:3c:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:32:59:6D:E5:CF:A5:1C:04:82:AB:4B:9F:03:35:A3:4B:F9:05:8C
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137372e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:07:94:81:bc:fc:bf:8e:21:8a:2e:6f:be:6d:aa:9c:79:
         d8:b1:d3:70:e3:a4:82:2c:47:79:68:56:20:4c:db:7f:f6:e3:
         b8:98:d7:fd:bf:a3:64:99:d9:66:d9:4a:be:ab:3c:59:56:2c:
         f7:29:c8:c1:ce:33:b1:b4:9d:91:f2:00:96:75:b5:6c:9f:17:
         ee:fb:d1:f5:98:c1:50:8e:e6:a2:37:d3:18:35:7b:29:b5:6d:
         f4:0f:f2:c8:e6:4f:ad:dc:7c:87:3b:1c:bc:ba:99:2c:ef:cf:
         d2:57:79:05:6a:84:56:02:01:89:db:7c:01:c0:11:d8:be:dc:
         a7:da:fd:8a:81:46:78:dc:f1:ef:03:43:fd:9b:4b:85:7a:69:
         99:14:a2:45:c9:20:b5:1a:35:ee:e7:ae:0c:a3:76:b8:ec:b3:
         ad:f0:cd:2c:a7:b0:73:9d:d2:7f:7e:f6:35:d6:8b:b3:61:80:
         84:3d:25:72:65:9f:ae:e9:cf:76:11:3f:c5:ad:4c:90:c0:30:
         ff:07:fc:1b:04:09:fe:fd:09:14:74:a1:ce:3e:cb:0c:bb:1b:
         cc:c2:09:20:38:80:3f:28:9e:73:9b:03:29:4d:a1:b8:0b:db:
         8e:61:03:0e:61:e5:50:f3:d5:a2:9c:1a:55:c1:7c:fa:77:1b:
         9e:a3:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:16 2026 by rpki-client