Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37372e302f32342d3234203d3e20313336393538.roa
File:                     3130332e35362e37372e302f32342d3234203d3e20313336393538.roa (raw, json)
Hash identifier:          cVniIZILY94j+lzh7lZSt/NcMs8j0gEL6bcjdqkUZts=
Subject key identifier:   84:C2:74:C0:06:06:C3:28:08:78:C1:A5:DD:FE:57:A3:4E:81:DE:7F
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       7AA24EBF0881175649267334BB4FADACB58A1B3D
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37372e302f32342d3234203d3e20313336393538.roa
Signing time:             Sat 09 May 2026 01:50:11 +0000
ROA not before:           Sat 09 May 2026 01:45:11 +0000
ROA not after:            Sat 08 May 2027 01:50:11 +0000
asID:                     136958
IP address blocks:        103.56.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:4e:bf:08:81:17:56:49:26:73:34:bb:4f:ad:ac:b5:8a:1b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: May  9 01:45:11 2026 GMT
            Not After : May  8 01:50:11 2027 GMT
        Subject: CN=84C274C00606C3280878C1A5DDFE57A34E81DE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:c6:65:3e:2e:9e:65:78:4e:b9:f9:4e:8d:
                    04:52:d6:9b:cc:bd:b6:b5:ba:b2:86:8d:5f:d7:f8:
                    cd:93:0b:fe:04:de:ef:78:a9:99:d5:3e:8d:28:e9:
                    34:10:23:30:2a:5c:84:83:9e:43:bf:b2:f4:4a:5b:
                    5a:32:8f:4d:e8:cb:97:2e:65:78:06:f9:2a:2d:f1:
                    25:f2:a9:ce:19:20:eb:13:d9:a2:90:71:2c:e3:54:
                    1d:a9:2e:cd:9d:0b:ba:76:ce:20:79:6c:8f:89:4d:
                    ce:6b:03:46:a8:14:58:2b:6a:ba:fe:92:91:58:8c:
                    96:ae:18:3e:19:53:6e:54:d0:38:25:62:10:f7:8e:
                    d0:9f:1b:27:de:a4:5b:2a:66:3a:81:64:ef:66:d9:
                    6e:fb:2e:04:5b:40:5a:e7:dc:da:2e:e5:6f:13:a1:
                    3b:7c:30:30:48:aa:1d:ac:62:fe:da:b5:aa:a8:f2:
                    83:62:a5:1a:64:d3:65:81:b7:c0:1b:77:69:7f:a1:
                    46:42:77:28:87:c1:0e:38:4c:b0:a0:fa:6b:04:58:
                    1e:db:fd:68:78:ea:0f:02:af:04:54:84:9a:6b:40:
                    5f:72:df:c9:90:a9:91:d9:54:fb:cd:ca:b5:95:3d:
                    f9:18:38:f2:59:2a:73:8e:ca:04:94:d4:5a:fc:c3:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C2:74:C0:06:06:C3:28:08:78:C1:A5:DD:FE:57:A3:4E:81:DE:7F
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37372e302f32342d3234203d3e20313336393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:76:30:12:45:ef:3f:3c:e3:cd:5b:3e:51:41:f8:e4:51:6a:
         1a:78:ef:cf:18:b2:5c:3c:54:ed:d8:6b:fa:00:dc:85:5d:1d:
         1c:b7:c3:50:15:18:56:10:a6:19:c5:55:68:d3:f1:69:98:83:
         81:ae:f3:a5:c9:c0:51:14:59:fa:cb:0a:f2:3e:4a:32:58:56:
         08:39:b3:2a:da:e9:dc:b5:ec:a7:46:16:52:75:4d:62:f6:7f:
         cc:70:d8:e6:85:f3:ef:6e:08:a3:f6:db:0e:8d:98:29:aa:a4:
         05:d3:ef:ce:54:6b:aa:51:58:97:22:f6:f2:46:4f:00:54:45:
         90:17:26:82:bf:37:d1:90:ee:7a:5d:1f:9c:43:4c:89:b2:0c:
         e1:ad:a5:a5:6b:ee:b1:d2:c5:ca:a1:06:0a:e4:00:64:6a:e2:
         39:be:fb:a2:6a:4c:3a:9d:62:e7:fa:ab:ce:ee:3c:ab:78:da:
         3c:f2:88:3e:5a:81:a6:82:5c:38:12:06:47:aa:75:dd:34:52:
         7d:0e:4d:c1:0b:0f:dd:4a:31:e3:df:21:1a:f0:3d:77:10:fc:
         bd:72:6f:af:9b:fb:58:9e:a1:8d:a3:d0:29:d3:d0:c3:3b:3e:
         76:37:e6:63:06:f2:a4:5b:c8:eb:26:5f:ba:09:c7:11:d2:1a:
         55:e1:78:f7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeqJOvwiBF1ZJJnM0u0+trLWKGz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB
QjIxMzUxQTAeFw0yNjA1MDkwMTQ1MTFaFw0yNzA1MDgwMTUwMTFaMDMxMTAvBgNV
BAMTKDg0QzI3NEMwMDYwNkMzMjgwODc4QzFBNURERkU1N0EzNEU4MURFN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxacZlPi6eZXhOuflOjQRS1pvM
vba1urKGjV/X+M2TC/4E3u94qZnVPo0o6TQQIzAqXISDnkO/svRKW1oyj03oy5cu
ZXgG+Sot8SXyqc4ZIOsT2aKQcSzjVB2pLs2dC7p2ziB5bI+JTc5rA0aoFFgrarr+
kpFYjJauGD4ZU25U0DglYhD3jtCfGyfepFsqZjqBZO9m2W77LgRbQFrn3Nou5W8T
oTt8MDBIqh2sYv7ataqo8oNipRpk02WBt8Abd2l/oUZCdyiHwQ44TLCg+msEWB7b
/Wh46g8CrwRUhJprQF9y38mQqZHZVPvNyrWVPfkYOPJZKnOOygSU1Fr8w7p9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUhMJ0wAYGwygIeMGl3f5Xo06B3n8wHwYDVR0j
BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF
OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzMxMzAzMzJlMzUz
NjJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM5MzUzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGc4TTANBgkqhkiG9w0BAQsFAAOCAQEAYHYwEkXvPzzjzVs+UUH45FFq
GnjvzxiyXDxU7dhr+gDchV0dHLfDUBUYVhCmGcVVaNPxaZiDga7zpcnAURRZ+ssK
8j5KMlhWCDmzKtrp3LXsp0YWUnVNYvZ/zHDY5oXz724Io/bbDo2YKaqkBdPvzlRr
qlFYlyL28kZPAFRFkBcmgr830ZDuel0fnENMibIM4a2lpWvusdLFyqEGCuQAZGri
Ob77ompMOp1i5/qrzu48q3jaPPKIPlqBpoJcOBIGR6p13TRSfQ5NwQsP3Uox498h
GvA9dxD8vXJvr5v7WJ6hjaPQKdPQwzs+djfmYwbypFvI6yZfugnHEdIaVeF49w==
-----END CERTIFICATE-----
Generated at Wed May 13 15:07:08 2026 by rpki-client