Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa
File:                     3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa (raw, json)
Hash identifier:          MvJKnCD7sL8SySR9xBlKJ3DRbjMddNvD18ZVitiePLU=
Subject key identifier:   0D:02:19:7B:A5:F5:2A:C7:3D:AF:77:D9:AB:4A:F3:AF:C4:BB:CC:43
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       7D8D950401251BD897932EDEB89DD4267707F8FB
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa
Signing time:             Mon 28 Sep 2026 01:00:34 +0000
ROA not before:           Mon 28 Sep 2026 00:55:34 +0000
ROA not after:            Mon 27 Sep 2027 01:00:34 +0000
asID:                     13378
IP address blocks:        103.205.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 09:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8d:95:04:01:25:1b:d8:97:93:2e:de:b8:9d:d4:26:77:07:f8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:34 2026 GMT
            Not After : Sep 27 01:00:34 2027 GMT
        Subject: CN=0D02197BA5F52AC73DAF77D9AB4AF3AFC4BBCC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:19:5a:5a:e5:a3:6d:bb:95:b8:fb:03:67:
                    fe:5d:7c:cf:e7:d9:58:ef:cb:3a:05:cd:0a:e3:8b:
                    b7:e5:33:46:73:f8:af:c3:82:7f:c8:58:d9:0f:b0:
                    74:bf:1f:c7:05:64:75:91:68:fc:41:c8:77:84:31:
                    a3:e7:d4:d1:e2:c3:0e:0b:90:a1:ad:e6:06:32:37:
                    11:74:90:7c:4f:62:13:f9:49:78:f5:ae:5a:24:b5:
                    52:67:3a:6f:e3:5d:db:44:b3:98:ca:cb:35:f3:06:
                    f0:fe:1d:c9:24:42:2c:4d:06:93:d4:20:b5:1b:86:
                    52:c3:cc:39:cf:8d:49:9f:84:2b:0a:cc:30:41:24:
                    cf:8d:3d:7b:44:1f:d0:54:b4:ed:55:90:09:b5:0e:
                    53:08:84:bc:d9:36:ec:69:7f:9f:2b:8c:f3:7e:45:
                    84:26:11:9e:e6:26:21:e3:8d:71:ad:a2:cd:21:d1:
                    9b:40:52:d5:9d:44:fa:78:a4:43:6e:13:96:90:55:
                    f8:eb:a9:e9:12:a9:bf:29:29:a5:71:b6:c0:48:b7:
                    4d:5d:89:15:48:82:d6:40:38:8c:9a:be:8e:96:52:
                    ee:53:a4:6d:45:f2:18:53:a6:0b:41:d9:a2:d5:4c:
                    b1:bf:81:61:d9:4a:53:3b:e2:70:8d:d0:f2:5c:b6:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:19:7B:A5:F5:2A:C7:3D:AF:77:D9:AB:4A:F3:AF:C4:BB:CC:43
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203133333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:39:01:c9:8e:ed:96:51:38:ff:2a:27:d2:80:cf:dc:1e:aa:
         58:3d:dd:c9:df:58:84:dc:30:49:24:85:1a:dd:e5:34:79:75:
         8b:66:b4:42:97:de:a7:94:d2:fd:66:cb:15:cc:5e:2c:9a:28:
         3f:c7:92:b2:82:68:ce:da:45:a4:33:b2:9d:a6:00:c7:ed:0e:
         e2:46:40:02:db:8a:02:a8:d1:6b:c5:7e:4d:06:d8:3d:f7:57:
         2a:29:d9:49:58:f9:10:2e:a1:d2:49:32:6b:2e:7c:ce:9b:c0:
         f6:f4:87:99:20:da:be:86:f2:ea:70:e7:ee:51:a6:d5:72:86:
         89:ab:4f:5c:e0:89:30:92:05:82:18:25:e4:ba:bf:84:95:cb:
         0c:c7:08:f0:c1:60:6f:f5:c3:4e:5d:1c:5e:2c:b8:65:b3:7e:
         3d:16:eb:19:00:13:63:66:93:33:fa:62:f3:fa:53:cc:16:ea:
         83:e3:01:ae:ae:6e:a5:06:af:a6:de:f5:ba:d2:1c:d0:20:db:
         af:cb:6b:f7:e3:8b:45:b2:df:ac:7f:2f:76:b7:07:12:9d:e8:
         b0:23:6d:00:e7:1d:0c:55:2d:9d:a4:57:8c:96:57:57:d0:75:
         cf:64:44:e3:7b:55:65:68:71:e0:28:3f:9a:a2:e3:73:d3:bd:
         8c:aa:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:51:52 2026 by rpki-client