Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203633353637.roa
File:                     3130332e3230352e3235322e302f32322d3232203d3e203633353637.roa (raw, json)
Hash identifier:          YeVxfZ6qjJb3nmmlY5byDfaOo3plOWyLvLOhyEWmG2c=
Subject key identifier:   45:8C:9D:C8:DD:4F:9B:EA:35:11:35:2F:D7:99:93:0B:EC:4B:92:F4
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       60D3F99EC41E350564FE47C64F43E69BE73E1684
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203633353637.roa
Signing time:             Mon 28 Sep 2026 01:00:34 +0000
ROA not before:           Mon 28 Sep 2026 00:55:34 +0000
ROA not after:            Mon 27 Sep 2027 01:00:34 +0000
asID:                     63567
IP address blocks:        103.205.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 22:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:f9:9e:c4:1e:35:05:64:fe:47:c6:4f:43:e6:9b:e7:3e:16:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:34 2026 GMT
            Not After : Sep 27 01:00:34 2027 GMT
        Subject: CN=458C9DC8DD4F9BEA3511352FD799930BEC4B92F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:38:a7:38:fe:f0:25:df:62:61:36:0d:95:
                    9a:55:27:a0:f3:26:51:92:97:45:0d:a4:44:f4:63:
                    9e:47:41:22:d9:37:54:4d:4c:98:ee:28:78:80:87:
                    33:cc:5f:04:92:6f:5a:0a:be:74:46:e3:c2:42:7d:
                    54:66:55:ba:76:08:0a:4d:47:0e:04:eb:7a:0c:11:
                    38:e7:6a:e2:ca:5a:bc:1e:83:30:5d:25:24:46:fa:
                    24:93:9b:f2:f2:15:b1:2b:76:90:1a:a1:65:de:50:
                    90:2d:e8:82:04:4d:f7:5d:b1:64:1f:08:03:ec:2a:
                    83:e1:fc:c9:d6:14:27:27:8e:10:56:68:37:19:12:
                    1e:6c:cb:2b:ad:1b:6a:cb:87:1e:3a:92:89:e6:52:
                    74:bf:d7:a1:ab:9f:8c:fd:fc:5a:d9:4d:8d:06:e2:
                    73:29:19:f2:95:12:a2:0b:c8:5b:69:51:44:e6:4e:
                    fe:08:4c:68:53:ae:9a:be:6b:08:ce:6f:60:43:69:
                    f1:1e:52:e1:1f:cb:51:9a:9d:f1:a0:e6:29:d5:c9:
                    f7:98:96:c2:ba:53:e9:7e:d7:29:78:fb:3c:a2:07:
                    0d:bc:58:00:55:1b:66:b7:ed:09:2b:a0:4f:48:7c:
                    11:5f:41:09:17:36:16:f0:a5:09:ce:ba:09:d3:cb:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8C:9D:C8:DD:4F:9B:EA:35:11:35:2F:D7:99:93:0B:EC:4B:92:F4
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e203633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:87:d1:d2:51:1b:59:24:bf:79:4e:31:82:c4:d9:9c:ec:
         7c:86:ec:a1:7a:77:1b:7b:ba:92:9c:82:14:f2:e8:6f:ea:71:
         50:8a:d5:33:95:26:f5:2d:04:ee:b6:a7:3e:45:ad:c3:54:db:
         2e:d1:af:d4:1e:55:81:89:40:5f:30:e3:61:14:13:dd:d6:d6:
         1f:ce:aa:dd:38:87:83:bc:97:24:44:6d:40:d8:97:c8:f1:b5:
         25:d3:e8:a6:c5:8d:7d:d4:c0:66:97:10:11:00:45:79:05:ec:
         07:9a:23:cb:4d:82:98:f3:be:24:43:ee:cd:08:7c:4a:88:3b:
         00:ae:ea:1b:07:1d:88:b0:cf:a4:e9:cb:c2:1a:f3:d8:b7:2c:
         6b:52:cd:0f:dc:18:97:34:3f:c7:e0:7d:57:13:96:82:88:61:
         fc:12:45:c2:32:8a:e7:e9:a6:1d:8b:f4:23:3f:61:7e:b0:cd:
         c0:b6:80:a7:19:30:5c:de:db:a1:66:37:02:69:71:d5:d1:a9:
         c9:48:81:1f:2d:b8:ee:5f:4c:b9:59:41:8c:0c:82:9c:fc:be:
         39:03:88:82:de:9c:dd:b3:58:ac:42:b0:c8:21:ba:0f:39:32:
         4e:cc:6d:07:c8:56:79:7f:98:00:a9:b8:41:6c:f1:97:8d:51:
         8c:ad:6a:77
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUYNP5nsQeNQVk/kfGT0Pmm+c+FoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV
BAMTKDQ1OEM5REM4REQ0RjlCRUEzNTExMzUyRkQ3OTk5MzBCRUM0QjkyRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpjinOP7wJd9iYTYNlZpVJ6Dz
JlGSl0UNpET0Y55HQSLZN1RNTJjuKHiAhzPMXwSSb1oKvnRG48JCfVRmVbp2CApN
Rw4E63oMETjnauLKWrwegzBdJSRG+iSTm/LyFbErdpAaoWXeUJAt6IIETfddsWQf
CAPsKoPh/MnWFCcnjhBWaDcZEh5syyutG2rLhx46konmUnS/16Grn4z9/FrZTY0G
4nMpGfKVEqILyFtpUUTmTv4ITGhTrpq+awjOb2BDafEeUuEfy1GanfGg5inVyfeY
lsK6U+l+1yl4+zyiBw28WABVG2a37QkroE9IfBFfQQkXNhbwpQnOugnTy4n5AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQURYydyN1Pm+o1ETUv15mTC+xLkvQwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC8zMTMwMzMyZTMy
MzAzNTJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzYzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfN/DANBgkqhkiG9w0BAQsFAAOCAQEAbhiH0dJRG1kkv3lOMYLE
2ZzsfIbsoXp3G3u6kpyCFPLob+pxUIrVM5Um9S0E7ranPkWtw1TbLtGv1B5VgYlA
XzDjYRQT3dbWH86q3TiHg7yXJERtQNiXyPG1JdPopsWNfdTAZpcQEQBFeQXsB5oj
y02CmPO+JEPuzQh8Sog7AK7qGwcdiLDPpOnLwhrz2Lcsa1LND9wYlzQ/x+B9VxOW
gohh/BJFwjKK5+mmHYv0Iz9hfrDNwLaApxkwXN7boWY3Amlx1dGpyUiBHy247l9M
uVlBjAyCnPy+OQOIgt6c3bNYrEKwyCG6DzkyTsxtB8hWeX+YAKm4QWzxl41RjK1q
dw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 15:23:52 2026 by rpki-client