Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa
File:                     3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa (raw, json)
Hash identifier:          alaniBa6bbZmc+gGIynjeiPDfQMhD7b92Y7CzxBYnts=
Subject key identifier:   F0:46:BB:C2:12:82:20:3B:F1:A7:B2:9C:F0:07:97:44:59:82:15:04
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       64E0245434EA63C883D43BC1E17F47446B2102B9
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa
Signing time:             Mon 28 Sep 2026 01:00:38 +0000
ROA not before:           Mon 28 Sep 2026 00:55:38 +0000
ROA not after:            Mon 27 Sep 2027 01:00:38 +0000
asID:                     4837
IP address blocks:        103.239.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 07:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e0:24:54:34:ea:63:c8:83:d4:3b:c1:e1:7f:47:44:6b:21:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:38 2026 GMT
            Not After : Sep 27 01:00:38 2027 GMT
        Subject: CN=F046BBC21282203BF1A7B29CF007974459821504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:d5:35:4e:2e:2d:66:64:06:6d:a6:5f:ec:
                    bc:d1:97:5c:68:40:5f:4a:90:17:e7:17:68:43:61:
                    c9:dd:a9:80:eb:cd:d6:7b:1d:35:13:69:76:be:a7:
                    a7:b8:80:b8:39:51:b0:af:da:71:14:2b:12:c8:3d:
                    eb:f0:34:03:c2:6c:f8:15:1c:fd:1e:cc:b9:27:ab:
                    b3:f8:89:13:ed:c5:07:6d:4f:25:d5:96:8f:37:ca:
                    25:7f:62:cd:1c:1e:79:f2:6a:16:d1:15:a4:0a:8b:
                    f0:36:9a:be:8f:60:be:80:ac:fc:e3:c9:e0:c1:3b:
                    1d:8a:00:9a:ea:f9:99:f5:52:2d:cc:8a:87:a2:41:
                    17:0d:59:41:92:63:25:5d:f0:cd:68:f8:5a:ca:5b:
                    4e:cb:4d:5c:8f:c7:98:c1:59:95:c5:05:39:ec:ff:
                    1c:bb:de:53:42:6a:e4:8a:46:88:95:2f:ae:97:4f:
                    be:d5:8a:5b:7c:3b:96:3e:b6:03:07:18:6a:2d:57:
                    7a:e0:43:97:5b:28:b0:5a:60:95:1a:49:f7:13:23:
                    05:ed:03:d5:d2:f0:4b:66:73:58:d4:bd:33:bd:ee:
                    fa:41:8f:e8:7b:e3:bb:e5:85:90:57:b2:ac:50:69:
                    fa:19:2a:35:86:47:ec:d8:80:fd:25:79:a7:05:dd:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:BB:C2:12:82:20:3B:F1:A7:B2:9C:F0:07:97:44:59:82:15:04
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32322d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:d1:b1:b9:e4:51:ea:fb:36:1f:e0:df:4d:52:a5:52:ab:
         fb:d0:a4:cd:9c:1a:a6:27:85:0e:68:33:26:f7:ac:47:53:4a:
         3c:77:c4:c3:4a:b3:e0:67:3c:e6:50:a8:e5:dd:b1:f4:ae:94:
         86:8c:2f:52:5e:b9:c6:3a:5e:ad:29:99:df:bc:ed:6e:8f:7f:
         51:83:d8:eb:45:ef:2b:23:16:a0:e1:b3:63:81:45:7c:4c:ab:
         c8:b5:e7:09:61:ec:6e:b5:ed:00:ca:e0:19:c0:79:27:29:7c:
         df:0e:0d:22:59:0a:bf:b8:49:97:77:cf:bc:2b:30:34:14:57:
         9c:04:c3:b4:9c:a2:cf:ac:bb:05:2b:4d:aa:c0:aa:50:e1:5e:
         af:39:1b:a3:15:f3:85:e7:17:db:93:89:d4:84:63:bc:9e:0c:
         32:bc:61:3a:76:36:b8:03:d4:5c:b5:19:4b:e7:7e:a9:b6:be:
         0e:5b:e0:90:ab:04:63:35:b2:79:70:18:93:7d:77:3f:ee:5d:
         0b:c2:88:9e:d0:15:a0:09:bd:49:df:f5:2b:56:4f:45:db:1e:
         cb:f1:fd:a4:08:08:dc:7f:c5:81:5f:fe:30:f7:d5:a2:e5:79:
         88:77:91:74:b9:e8:9c:9f:fd:d7:ac:33:83:36:3f:71:29:24:
         3a:85:7f:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:30:56 2026 by rpki-client