Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137392e302f32342d3235203d3e2034383337.roa
File:                     3130332e3231392e3137392e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          a27cjotgbOZJ8GI+1ltVwt8QrgUYENvhLq2OCF0A0m8=
Subject key identifier:   12:D5:0A:52:CD:93:70:97:11:60:C6:52:1A:83:DD:C0:4A:2B:63:49
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       564F2B4FABD4EC4CFAABFDEBAF78B71C6CD2485D
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137392e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 05:58:17 +0000
ROA not before:           Fri 29 May 2026 05:53:17 +0000
ROA not after:            Fri 28 May 2027 05:58:17 +0000
asID:                     4837
IP address blocks:        103.219.179.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:2b:4f:ab:d4:ec:4c:fa:ab:fd:eb:af:78:b7:1c:6c:d2:48:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:53:17 2026 GMT
            Not After : May 28 05:58:17 2027 GMT
        Subject: CN=12D50A52CD9370971160C6521A83DDC04A2B6349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:b8:c1:3e:2c:a8:93:85:f8:ed:ca:53:6b:
                    eb:87:51:8b:0f:f9:a2:4b:4a:e7:8d:01:63:af:43:
                    65:ae:17:d6:be:c7:4e:a1:31:98:34:07:7b:fe:ef:
                    27:fa:a9:fe:3f:f0:b6:f6:fd:61:af:55:4f:8d:a5:
                    23:3a:94:10:ad:56:ff:0c:98:c2:3e:51:51:52:9d:
                    e0:1b:28:e6:aa:a6:21:ce:bb:06:bf:3f:55:06:22:
                    b1:cc:10:06:8c:df:e0:f7:1b:8a:4c:d5:70:80:db:
                    32:bf:cc:20:16:e3:ca:eb:59:2e:33:2e:32:2b:fd:
                    0c:f0:c5:54:9e:9f:aa:79:d5:d5:ad:58:d3:25:56:
                    80:76:44:1b:c8:6b:f1:82:93:4b:92:3a:da:41:01:
                    f9:c0:5f:02:7f:b2:3b:02:13:4e:b7:38:fb:0c:00:
                    19:ff:d2:c1:40:b8:53:bb:e7:e5:0e:ef:e0:de:ba:
                    fa:f1:e7:a3:47:3e:f6:89:27:d3:0f:eb:8f:2e:f7:
                    f3:c0:fb:77:ea:ab:df:7d:d4:27:c5:5e:56:90:fb:
                    52:bb:cb:1a:10:27:98:61:59:5b:c0:79:a5:11:f8:
                    e7:e9:d2:ac:c4:06:bd:69:da:4d:84:fb:8f:c5:2e:
                    e8:f5:31:19:d2:93:0d:ca:62:bf:8b:50:e5:ff:96:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D5:0A:52:CD:93:70:97:11:60:C6:52:1A:83:DD:C0:4A:2B:63:49
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130332e3231392e3137392e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:31:da:ca:29:d9:d0:3a:bc:bd:5d:5c:2c:1c:2e:fa:c1:25:
         84:54:06:5e:6a:8a:36:81:40:5d:8f:72:1f:ac:3d:8b:86:b4:
         4a:e5:6d:05:17:bb:98:01:ad:93:35:8f:e6:1c:eb:86:ff:e3:
         96:a4:2a:62:be:65:a3:d7:8d:c8:32:5a:c6:b7:b7:cf:7c:91:
         eb:3b:6f:3a:92:0b:5a:88:29:db:53:cb:ad:5c:a7:8d:eb:d4:
         a1:a1:aa:a9:6b:4e:64:ad:e0:3a:a8:2b:6e:9e:f2:0e:3f:04:
         eb:f8:b6:74:72:46:f3:19:2c:be:5c:7a:71:a8:5a:02:f8:d8:
         20:56:e2:c4:aa:d4:45:f1:96:f0:d7:b4:d0:6c:22:5e:17:ff:
         41:b8:38:6d:91:8f:03:ee:f2:ac:f9:07:68:bf:4c:ea:68:b3:
         2b:1d:42:c2:12:67:4e:ab:31:4f:82:7b:17:62:26:17:7c:25:
         84:52:dc:0c:c3:a6:ea:f2:5a:f8:16:34:8a:ed:48:a9:9d:b7:
         fb:68:3a:72:18:5d:63:7d:39:67:34:cd:06:d2:04:7b:55:d5:
         c6:6c:31:ba:4c:99:b7:59:94:e9:77:f6:32:57:fd:53:ee:49:
         3c:c1:c6:4d:41:50:d2:9e:c6:35:47:dd:83:71:d7:08:1a:50:
         e0:91:c2:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:13 2026 by rpki-client