Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3234203d3e203536303430.roa
File:                     3130332e3231392e3137382e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          iHNTLpbOgKatvCvW+EOpfArBTuwYGNSMmeqfsvIFBzc=
Subject key identifier:   BC:4A:9E:02:90:55:1B:86:A7:05:59:6A:42:3F:51:43:EA:69:83:6A
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       7AB2B2520892A8EF4EC3F23F5A7CA4DF2516598E
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 05:56:39 +0000
ROA not before:           Fri 29 May 2026 05:51:39 +0000
ROA not after:            Fri 28 May 2027 05:56:39 +0000
asID:                     56040
IP address blocks:        103.219.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b2:b2:52:08:92:a8:ef:4e:c3:f2:3f:5a:7c:a4:df:25:16:59:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:51:39 2026 GMT
            Not After : May 28 05:56:39 2027 GMT
        Subject: CN=BC4A9E0290551B86A705596A423F5143EA69836A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:6c:0c:25:44:b9:d2:9b:6b:c7:ae:bc:d9:
                    cb:78:5d:ff:45:c7:1c:6f:8c:ea:87:4a:d1:99:2d:
                    47:dd:3e:0e:a4:66:bb:fe:51:25:90:35:6e:ea:71:
                    ca:94:26:48:b4:db:4c:62:f6:5a:f9:46:fe:7f:fb:
                    18:f2:be:66:27:ec:ff:17:eb:bd:90:e8:2a:76:6a:
                    d1:b8:3d:11:aa:b3:cd:d4:2e:6e:4a:36:b0:cc:12:
                    9d:bf:06:c0:91:60:33:b2:b4:5e:78:13:8c:43:16:
                    7d:5e:f2:24:e5:ef:73:a2:a1:2e:26:e7:57:4e:39:
                    9f:7a:bb:a2:05:27:a7:f1:32:07:90:e7:79:69:f0:
                    78:c2:c4:cd:2a:2d:46:5b:75:55:83:78:4b:f4:26:
                    dc:1c:8f:ce:e9:e4:94:85:33:63:c6:9a:51:a6:ab:
                    33:44:87:36:72:b3:c4:ea:13:f5:fb:44:d2:1d:a7:
                    04:1e:a4:d0:61:a8:3f:14:dc:28:d4:54:8f:5a:88:
                    d0:2f:c3:f1:db:26:c3:35:cb:a8:d0:e1:dd:e6:9e:
                    77:24:41:b1:ed:c1:99:41:48:c2:29:ae:90:5b:c6:
                    f2:0f:5e:80:2b:09:94:85:88:80:7a:63:42:e9:74:
                    4c:25:9c:44:54:5f:81:8e:84:31:07:26:1b:cd:2c:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4A:9E:02:90:55:1B:86:A7:05:59:6A:42:3F:51:43:EA:69:83:6A
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:a9:51:ab:60:fa:12:2b:ac:f7:65:12:30:ec:33:ab:78:
         6d:95:f3:94:0d:81:a2:75:60:51:2b:1c:bc:6d:a8:1d:e6:cc:
         dd:92:8c:26:39:f3:30:54:ad:81:81:f8:76:f6:14:96:e2:c9:
         8f:40:cb:e7:5b:d0:e9:3e:f8:88:c1:29:ef:bd:8e:0b:3b:90:
         10:2d:31:e6:0a:fd:5d:34:bd:f0:1a:d9:c7:e5:85:f1:ee:86:
         57:d3:9e:bf:e3:4f:0a:66:ac:5f:96:29:91:12:6d:ff:18:01:
         8a:3e:cf:18:96:ce:74:b7:cb:09:87:b6:31:0e:de:4d:02:5c:
         cf:87:b1:9d:73:d3:37:45:fc:04:88:c6:ef:df:59:b4:6c:da:
         fe:b3:81:6d:dc:df:85:a1:6c:53:93:d2:f7:c7:cf:16:c9:45:
         fb:4e:70:61:e3:42:85:97:a4:b6:dc:58:e3:11:af:0d:74:7e:
         e7:99:ad:4e:cc:b1:29:3a:17:cb:80:4a:85:80:c8:24:fb:ce:
         a6:9d:91:63:ec:75:d4:f2:b4:fc:50:77:33:02:7d:5c:22:ef:
         4f:6f:42:2b:bc:81:c2:6e:6f:ed:5c:71:4b:d2:77:f7:b5:31:
         0a:6d:51:9d:92:be:2e:16:7d:d3:84:9d:fa:d2:f7:ce:0d:1a:
         21:4e:16:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:59 2026 by rpki-client