Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32342d3234203d3e203435303937.roa
File:                     3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (raw, json)
Hash identifier:          ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=
Subject key identifier:   96:9B:8B:E1:AF:B9:83:BD:00:65:AC:67:20:B9:5C:D4:F4:A8:AD:04
Certificate issuer:       /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial:       7DD345B7D131407BEBE6BA6D78A4F71AB4B73D19
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32342d3234203d3e203435303937.roa
Signing time:             Mon 15 Jun 2026 01:52:43 +0000
ROA not before:           Mon 15 Jun 2026 01:47:43 +0000
ROA not after:            Mon 14 Jun 2027 01:52:43 +0000
asID:                     45097
IP address blocks:        103.79.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:45:b7:d1:31:40:7b:eb:e6:ba:6d:78:a4:f7:1a:b4:b7:3d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
        Validity
            Not Before: Jun 15 01:47:43 2026 GMT
            Not After : Jun 14 01:52:43 2027 GMT
        Subject: CN=969B8BE1AFB983BD0065AC6720B95CD4F4A8AD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:6e:18:a0:40:08:b2:dd:5e:1c:1e:55:f1:
                    f5:a6:87:fd:f7:22:c4:9f:1c:88:12:a3:c6:f8:20:
                    65:00:c3:38:22:0a:2f:f9:c3:90:02:6b:73:5c:e3:
                    c2:87:bf:f5:c7:e5:61:fc:bd:45:d0:f2:14:a3:12:
                    43:3b:05:c6:6e:22:f6:0c:49:0f:3f:04:2a:d0:45:
                    84:ac:ae:91:40:12:5e:7d:c3:b0:eb:2c:3c:11:c1:
                    bd:e1:1a:c5:5c:0f:89:98:1f:66:e8:a8:c3:ec:26:
                    db:3f:81:35:5d:cf:01:37:26:49:c1:b8:4d:1e:8b:
                    18:a6:24:24:c5:cd:33:0a:19:f8:3e:c0:44:7d:7c:
                    5c:91:e1:67:fe:ae:1b:bf:32:38:93:ef:f7:7e:39:
                    44:ed:7e:f8:9c:6a:b4:3e:8f:80:b8:ae:92:da:c6:
                    4a:7a:a1:c9:3c:63:49:32:79:a5:9b:eb:f5:a0:09:
                    56:7d:89:58:a5:d9:8a:80:2d:6c:ec:63:e4:f5:ab:
                    b0:09:b3:6d:e7:19:b7:0b:53:ff:8b:41:67:34:70:
                    4c:f5:ed:ce:fc:05:4b:e6:20:c6:93:be:89:ff:88:
                    ca:c4:c5:43:68:be:4a:bd:d2:53:70:3e:7c:06:0d:
                    dc:f0:a9:56:eb:b7:e1:6b:35:5e:72:6a:1f:88:5d:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9B:8B:E1:AF:B9:83:BD:00:65:AC:67:20:B9:5C:D4:F4:A8:AD:04
            X509v3 Authority Key Identifier:
                keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/3130332e37392e3230302e302f32342d3234203d3e203435303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:2c:e3:32:9f:64:c6:7c:a2:ba:1d:fd:bd:b0:38:38:0a:
         68:a8:5e:2a:92:46:17:b5:f8:25:13:5c:22:23:73:97:53:9a:
         0d:cd:d4:7c:61:53:eb:16:ec:03:9b:94:95:14:96:0a:e4:51:
         97:ad:9f:d7:db:29:86:3c:64:1a:0b:6d:3a:c0:e5:d3:03:79:
         51:08:71:c5:00:dc:7e:9e:f6:65:76:53:ac:1e:b9:c9:53:a2:
         30:43:16:94:6e:4a:88:ad:c9:a2:87:43:59:ab:3c:78:bf:bb:
         54:99:48:55:bc:24:db:80:21:b2:d5:fd:2d:c1:c9:b0:03:73:
         c8:21:b8:8d:33:cd:33:72:3f:d2:40:08:fd:7f:eb:4b:ea:a6:
         7b:b4:db:1e:08:98:99:b4:08:3f:a8:88:e7:72:df:e3:4a:de:
         52:aa:8f:d8:46:bb:4a:e7:b5:03:de:8b:8e:f1:c3:3a:63:04:
         9d:b0:aa:b7:03:c2:e8:59:86:58:f3:5b:e2:8a:33:9b:cc:82:
         d8:8f:72:10:76:7a:09:e8:ee:ec:25:3e:ad:b5:69:e8:0c:ac:
         59:b7:46:7a:25:cf:d7:d7:e7:20:b9:ac:52:bf:ab:23:7b:64:
         a3:f3:88:f7:b9:f8:03:10:89:af:07:72:6b:da:a1:99:e8:04:
         1d:fa:f3:01
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUfdNFt9ExQHvr5rpteKT3GrS3PRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0
ODFDQzdEOTAeFw0yNjA2MTUwMTQ3NDNaFw0yNzA2MTQwMTUyNDNaMDMxMTAvBgNV
BAMTKDk2OUI4QkUxQUZCOTgzQkQwMDY1QUM2NzIwQjk1Q0Q0RjRBOEFEMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsm24YoEAIst1eHB5V8fWmh/33
IsSfHIgSo8b4IGUAwzgiCi/5w5ACa3Nc48KHv/XH5WH8vUXQ8hSjEkM7BcZuIvYM
SQ8/BCrQRYSsrpFAEl59w7DrLDwRwb3hGsVcD4mYH2boqMPsJts/gTVdzwE3JknB
uE0eiximJCTFzTMKGfg+wER9fFyR4Wf+rhu/MjiT7/d+OUTtfvicarQ+j4C4rpLa
xkp6ock8Y0kyeaWb6/WgCVZ9iVil2YqALWzsY+T1q7AJs23nGbcLU/+LQWc0cEz1
7c78BUvmIMaTvon/iMrExUNovkq90lNwPnwGDdzwqVbrt+FrNV5yah+IXTJpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUlpuL4a+5g70AZaxnILlc1PSorQQwHwYDVR0j
BBgwFoAUwikPL2FZ8cjBRq6cZGm/vEgcx9kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUxNjExNDk2OTQ2MDc1NS8wL0MyMjkwRjJGNjE1OUYxQzhDMTQ2QUU5QzY0NjlC
RkJDNDgxQ0M3RDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjUxNjExNDk2OTQ2MDc1NS8wLzMxMzAzMzJlMzcz
OTJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMwMzkzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGdPyDANBgkqhkiG9w0BAQsFAAOCAQEAii4s4zKfZMZ8orod/b2wODgK
aKheKpJGF7X4JRNcIiNzl1OaDc3UfGFT6xbsA5uUlRSWCuRRl62f19sphjxkGgtt
OsDl0wN5UQhxxQDcfp72ZXZTrB65yVOiMEMWlG5KiK3JoodDWas8eL+7VJlIVbwk
24AhstX9LcHJsANzyCG4jTPNM3I/0kAI/X/rS+qme7TbHgiYmbQIP6iI53Lf40re
UqqP2Ea7Sue1A96LjvHDOmMEnbCqtwPC6FmGWPNb4oozm8yC2I9yEHZ6Ceju7CU+
rbVp6AysWbdGeiXP19fnILmsUr+rI3tko/OI97n4AxCJrwdya9qhmegEHfrzAQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:11 2026 by rpki-client