Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3234203d3e20313331353638.roa
File:                     3130332e3231392e3137382e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier:          OUTHABM9FZrtIJ2L1QhzleGkKynpJ85/5rfRfho5oZw=
Subject key identifier:   CB:94:58:C5:B2:86:29:06:A7:C5:00:5B:9A:DB:6C:AD:0A:2F:F6:4F
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       2C88DFFE541FA0B61046EC7D923D8F5A461B903A
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3234203d3e20313331353638.roa
Signing time:             Fri 29 May 2026 05:56:39 +0000
ROA not before:           Fri 29 May 2026 05:51:39 +0000
ROA not after:            Fri 28 May 2027 05:56:39 +0000
asID:                     131568
IP address blocks:        103.219.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:88:df:fe:54:1f:a0:b6:10:46:ec:7d:92:3d:8f:5a:46:1b:90:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:51:39 2026 GMT
            Not After : May 28 05:56:39 2027 GMT
        Subject: CN=CB9458C5B2862906A7C5005B9ADB6CAD0A2FF64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:15:72:e7:48:ef:f8:7a:1c:64:62:22:b8:
                    c9:aa:c4:88:64:27:bd:38:3b:a7:59:cd:ad:d7:36:
                    55:eb:50:dc:9a:c5:c0:f6:3b:a0:0a:fc:f0:2d:33:
                    34:ef:1c:8d:0f:6e:c8:3b:5e:4b:da:12:63:7b:94:
                    a3:10:27:be:02:62:d2:56:81:8c:33:a3:c7:35:70:
                    81:95:0b:af:9a:f3:06:6d:90:b3:01:f3:71:66:bd:
                    48:39:f1:d6:3c:80:c1:d0:43:3b:e8:8b:5d:e3:36:
                    9c:a3:39:a3:1c:65:1e:6a:a8:4d:1c:6e:78:6d:1c:
                    b8:3d:df:f0:dc:a1:10:6d:5b:a7:a5:43:42:f9:dd:
                    71:29:07:0f:63:b1:21:12:1b:4d:2f:a4:f7:82:50:
                    b9:7b:32:bb:92:34:90:f8:6d:77:f6:ed:b2:29:5d:
                    37:d4:9b:04:98:6c:ad:e6:7f:82:57:e5:7d:ac:d1:
                    8e:2e:a9:0a:d2:0b:5e:58:ef:8d:5a:86:63:6e:05:
                    17:65:18:e4:10:19:d9:c3:c6:df:26:44:77:90:d4:
                    48:df:14:62:f3:8d:8b:bd:53:94:54:48:8e:60:e2:
                    ec:6e:6f:15:8b:4c:bb:d1:77:39:07:00:e5:4f:54:
                    aa:78:00:da:22:1a:4f:d4:e4:d1:f3:5e:4f:72:59:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:94:58:C5:B2:86:29:06:A7:C5:00:5B:9A:DB:6C:AD:0A:2F:F6:4F
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3234203d3e20313331353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:57:8d:57:33:04:0c:a4:7a:a0:89:16:82:da:47:1d:39:7d:
         08:21:30:46:1f:bf:d8:44:34:88:be:0b:61:85:ec:4a:9e:25:
         71:5b:80:8c:98:5c:1c:92:da:04:12:c8:14:bd:df:66:b6:c6:
         c5:b8:0f:2e:ca:f9:22:df:52:56:cf:c7:00:f3:db:55:ef:fc:
         a1:43:6c:b2:ae:d8:e7:d0:44:a3:73:06:26:9a:e6:d2:6e:a1:
         ee:65:a7:9a:58:24:75:5c:4d:91:b3:a2:48:af:46:7d:f3:6d:
         63:5d:84:2e:0a:39:8b:9c:e3:0a:f8:be:3c:58:d5:00:ed:90:
         71:b1:45:14:1a:fc:f3:dd:46:b1:9e:f3:85:75:be:f1:d8:02:
         13:59:38:69:a5:dc:c0:c2:87:89:2e:63:4c:e2:d6:56:02:6d:
         42:af:26:a5:61:7f:c8:b8:54:63:fd:2a:f6:81:64:74:bf:51:
         f3:f0:8e:29:bb:df:f5:c1:05:1c:31:39:54:69:08:5f:f7:b6:
         bb:2d:ad:a3:9c:ca:ef:3f:76:f5:c8:e1:fb:a3:90:c4:c3:ce:
         15:0c:46:08:4f:9e:42:ee:d3:9f:74:10:b3:ad:93:54:2b:9b:
         39:eb:d1:00:d8:94:cc:86:d4:ef:8e:51:91:dc:bf:88:0d:b7:
         22:78:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:58:22 2026 by rpki-client