Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37372e32382e302f32322d3232203d3e2034383437.roa
File:                     3130332e37372e32382e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          vKwURYO29V/idSwbJGJlUZZ+tWxs6as8Y7t32HvFqRM=
Subject key identifier:   F1:79:5C:2B:B4:83:6A:04:90:72:1C:AF:AD:AE:F9:78:30:9C:AF:3B
Certificate issuer:       /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial:       4FDF3A7750805A2E49DE63A576DD39384E1D174F
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37372e32382e302f32322d3232203d3e2034383437.roa
Signing time:             Mon 15 Jun 2026 06:52:23 +0000
ROA not before:           Mon 15 Jun 2026 06:47:23 +0000
ROA not after:            Mon 14 Jun 2027 06:52:23 +0000
asID:                     4847
IP address blocks:        103.77.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Jun 2026 09:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:3a:77:50:80:5a:2e:49:de:63:a5:76:dd:39:38:4e:1d:17:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
        Validity
            Not Before: Jun 15 06:47:23 2026 GMT
            Not After : Jun 14 06:52:23 2027 GMT
        Subject: CN=F1795C2BB4836A0490721CAFADAEF978309CAF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:ec:63:79:ed:15:4c:f7:5d:ea:c9:7d:2f:
                    7c:be:47:31:8b:9a:af:d9:c2:58:39:1f:c0:9d:31:
                    79:f6:a9:b8:d4:73:9b:a1:b9:0e:5e:71:cd:c0:27:
                    96:b5:f0:05:31:bf:a9:41:80:e3:f3:1e:29:a6:08:
                    69:27:4e:64:d6:a8:f9:df:19:a0:02:79:97:fd:20:
                    90:9f:d0:53:89:b1:83:c0:62:4d:ab:9d:ed:1a:f8:
                    92:79:07:e7:da:97:c8:07:bd:d2:8d:cd:d0:01:ee:
                    38:73:c7:ab:cb:e2:69:d1:05:ae:0e:e6:8a:67:fc:
                    63:8a:13:be:b9:c5:a6:2c:bc:df:20:97:89:54:5f:
                    dd:bc:4f:04:95:c2:3a:b8:e9:a5:91:34:29:d6:b3:
                    92:80:02:55:cb:c4:02:88:c5:f3:a1:a3:50:f3:3e:
                    a3:19:b1:ed:bb:65:58:9c:90:5d:78:b8:dc:e4:5a:
                    6a:7e:8f:53:93:ca:f7:aa:b0:40:0d:7d:37:66:4c:
                    f1:9d:8a:ab:88:ad:56:5e:75:f0:bb:b2:aa:db:c5:
                    17:40:9e:7d:76:45:f5:3d:c4:40:65:e4:95:28:3a:
                    11:69:79:37:cb:20:f6:43:a1:58:e7:96:4c:cd:c6:
                    3a:4b:3a:7c:2e:72:b4:c8:6e:41:8f:95:97:30:b1:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:5C:2B:B4:83:6A:04:90:72:1C:AF:AD:AE:F9:78:30:9C:AF:3B
            X509v3 Authority Key Identifier:
                keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37372e32382e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:1e:2c:83:22:ec:f7:7c:62:17:50:70:0c:3d:bf:30:4c:89:
         4b:1e:fb:48:c1:b3:ab:f2:a9:a4:58:02:bf:e7:ee:ed:05:d7:
         5f:4c:87:f9:98:4d:37:77:2f:9b:18:75:2d:f0:b3:12:0d:68:
         90:1a:2a:1c:e3:bf:41:8a:18:d5:ee:1f:cb:15:7e:ed:78:71:
         5f:6c:c0:d5:ee:85:f1:c9:b7:81:1f:dd:6a:c6:f8:6f:e4:c1:
         b3:a0:a2:25:d2:24:1e:4f:5d:6a:33:8b:ae:33:ab:7d:58:5b:
         eb:e8:7b:5e:67:c5:24:b3:1d:6e:72:bc:ac:15:4c:3c:d5:fd:
         2f:7e:4d:ec:ba:bc:e5:12:b9:36:d2:22:81:64:b0:f5:25:e6:
         5f:fd:39:57:46:be:c1:e3:1d:75:f0:24:f0:b4:6f:da:91:c7:
         5c:a0:25:bd:a0:d2:a0:19:73:74:37:a6:47:2e:dd:d0:ea:90:
         25:d4:d9:f5:89:22:70:81:be:77:d9:92:ec:ce:c8:3f:cb:65:
         c5:fc:36:c8:dc:4b:73:db:20:36:4f:ae:13:99:76:d5:c9:56:
         45:8a:9d:f5:2c:ea:14:b4:a3:78:fa:b3:7a:fd:07:46:02:24:
         be:56:2a:f4:84:ba:7f:63:9f:c0:2f:e2:df:da:1a:d6:b0:7c:
         45:49:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 18:14:39 2026 by rpki-client