Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3235203d3e2034383337.roa
File:                     3130332e3231392e3137382e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          m7pYWRijEs3I3oRb+eQoNGv93k/AwFgYCdp8DiI4U00=
Subject key identifier:   C4:44:0E:43:F4:5F:00:C7:9B:08:6E:83:08:8F:F1:50:C2:F9:A8:42
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       4FEF9B582992755BF7886DCBB3B849E063ED5E86
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 05:56:39 +0000
ROA not before:           Fri 29 May 2026 05:51:39 +0000
ROA not after:            Fri 28 May 2027 05:56:39 +0000
asID:                     4837
IP address blocks:        103.219.178.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ef:9b:58:29:92:75:5b:f7:88:6d:cb:b3:b8:49:e0:63:ed:5e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:51:39 2026 GMT
            Not After : May 28 05:56:39 2027 GMT
        Subject: CN=C4440E43F45F00C79B086E83088FF150C2F9A842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:b0:40:0a:1c:f0:c0:af:9a:39:c8:3c:5c:
                    d9:4f:f2:38:6d:a5:a1:96:9f:14:2a:1e:a5:15:63:
                    3b:15:52:04:60:ba:c9:79:b6:19:f9:85:6d:fb:7b:
                    2f:e7:03:8d:ab:02:0e:35:90:7e:b7:fe:16:29:6c:
                    c7:d8:23:b8:c8:0f:44:77:34:47:e7:73:c2:ab:45:
                    3a:b5:c6:0f:40:f6:ac:6a:a9:c0:f7:97:4d:e9:77:
                    0d:8d:e7:0b:67:4a:d3:aa:30:e9:7e:0a:20:17:85:
                    58:ba:3e:b7:d6:12:89:24:b1:6c:0a:f3:7c:53:02:
                    76:91:5b:69:f0:51:40:23:10:98:b2:0f:5a:76:bd:
                    eb:03:0d:f0:b5:3e:68:a5:e6:7a:f7:c5:7a:f6:b0:
                    eb:a4:a5:31:34:88:af:dc:04:6a:19:e1:66:b7:b0:
                    80:d4:33:65:3b:66:9e:8b:84:c1:36:ae:4b:81:f6:
                    69:61:b7:1a:92:f0:95:ae:a4:47:12:af:5f:b3:3c:
                    2a:3e:66:bd:1a:1a:69:b2:e1:c5:10:c3:2a:4b:84:
                    e6:a4:9f:2a:32:06:19:e8:2e:aa:04:cd:fa:6e:29:
                    0b:66:5f:d9:6b:b4:76:b4:96:d1:7c:64:4b:9c:80:
                    06:69:a1:1c:64:c0:f6:75:8f:0c:a5:07:52:d7:1f:
                    54:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:0E:43:F4:5F:00:C7:9B:08:6E:83:08:8F:F1:50:C2:F9:A8:42
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137382e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:67:3e:3b:db:2c:2e:d7:6e:26:fc:38:30:d7:07:d1:11:32:
         e1:41:b1:14:6e:12:ae:11:e5:4f:b8:ec:82:77:10:48:fd:75:
         0b:8c:3e:1e:ea:b9:bf:e8:95:f9:d6:5d:77:9b:0b:76:f6:47:
         f3:45:94:50:70:a5:ba:91:60:09:d1:8b:14:b3:bc:ed:74:98:
         b0:43:f2:59:ed:1a:24:ba:fc:09:aa:23:86:e3:15:ee:75:b3:
         ef:e2:af:ee:64:5c:3b:36:71:3a:ed:be:82:05:53:5e:8e:af:
         61:11:ff:99:11:8d:48:68:f3:b1:e8:7b:1d:94:89:87:8d:4e:
         08:7f:f4:42:53:bd:c1:ee:64:72:f7:61:63:2b:73:52:42:91:
         15:1d:a1:97:f7:1d:e2:df:25:3c:7e:fb:9b:7d:20:63:33:37:
         4c:9e:e9:70:b2:4f:ad:72:4f:06:be:fb:10:a3:ef:87:f3:22:
         b7:d5:35:f8:5d:4e:28:61:97:4c:ae:5e:31:12:28:8f:55:8e:
         8d:4d:cd:ed:81:40:65:b4:85:fd:43:9d:1d:4d:62:2e:c4:ea:
         01:f4:e5:51:a3:17:b2:47:d9:88:f1:ae:f4:cc:b5:5e:b9:89:
         78:23:a2:b7:30:e6:3d:3a:cf:44:8a:3c:0a:bc:78:46:5c:8c:
         ec:27:3e:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:25 2026 by rpki-client