Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203233363530.roa
File:                     3130332e33372e34342e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          dzZLqpkRhQqcmzCFB5VoPcO+/Bop+btZLhrg7EPAgxU=
Subject key identifier:   48:40:85:1A:61:20:71:5B:A2:5A:4A:38:DE:E8:0D:E6:0D:58:E6:E3
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       54EABD7741EB78CBAB60A5F28E245AA5D2237D7F
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203233363530.roa
Signing time:             Tue 28 Apr 2026 02:21:52 +0000
ROA not before:           Tue 28 Apr 2026 02:16:52 +0000
ROA not after:            Tue 27 Apr 2027 02:21:52 +0000
asID:                     23650
IP address blocks:        103.37.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ea:bd:77:41:eb:78:cb:ab:60:a5:f2:8e:24:5a:a5:d2:23:7d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 28 02:16:52 2026 GMT
            Not After : Apr 27 02:21:52 2027 GMT
        Subject: CN=4840851A6120715BA25A4A38DEE80DE60D58E6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:8f:8e:4a:ec:bc:22:7b:b7:e6:82:fa:71:
                    41:bb:ee:43:db:61:f3:b6:17:9b:85:27:d8:bf:08:
                    26:36:e2:8c:fc:80:01:5b:ff:81:c2:d1:a2:2c:00:
                    b6:a6:9c:6e:32:d7:a6:cf:e1:69:b4:67:b0:6c:27:
                    b4:2f:0e:d9:8c:99:bd:3b:ce:eb:21:89:99:51:5a:
                    84:fa:a7:ff:14:0b:8f:8e:e6:d4:58:4f:8c:7e:11:
                    93:c0:af:cb:cb:33:e3:df:b7:4a:d9:a2:f3:42:e0:
                    71:f2:98:d1:7e:dd:5f:9c:e4:99:7c:d1:33:d7:d3:
                    e9:fe:8b:2c:aa:e5:0b:b1:81:4c:9b:d6:a6:1e:b7:
                    2c:27:22:c5:a1:19:6b:79:17:2b:a2:87:c3:bd:3e:
                    6f:8b:39:d0:0c:5b:11:f4:85:17:8f:2b:41:f8:d2:
                    92:48:26:a4:41:97:b0:f6:c8:ae:77:ef:23:5e:97:
                    75:49:ac:79:33:f5:0e:82:5a:12:bc:87:a6:a0:70:
                    a0:e3:5d:58:83:56:ca:28:5e:f1:ff:60:bd:92:27:
                    b4:be:67:df:ef:f6:d5:7c:dd:bf:bc:fd:57:55:1c:
                    bc:2d:70:14:77:bc:5f:4d:7e:e5:f8:a8:a7:a7:98:
                    9d:b8:b3:59:0d:2b:b4:b7:99:c3:3a:98:81:7b:02:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:85:1A:61:20:71:5B:A2:5A:4A:38:DE:E8:0D:E6:0D:58:E6:E3
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:7e:60:44:4d:56:02:c0:93:ac:5a:0e:85:9a:df:c2:6f:
         9a:e4:16:5a:1a:05:4c:4e:e3:7a:9a:2d:e8:16:2a:e9:db:60:
         cb:4f:81:c4:df:ea:53:53:c7:68:66:1e:c3:3c:52:d8:5f:c0:
         a8:9e:9c:16:dc:db:29:25:88:36:a8:36:9a:91:c2:9d:49:e6:
         11:0f:58:7a:c1:96:98:82:de:c1:17:36:07:dd:6c:ac:53:53:
         bf:8a:6e:ef:1e:2f:ec:8f:3f:fa:f1:60:92:3c:d7:5b:67:f7:
         c3:0f:ab:15:bd:73:f0:98:3a:e2:88:72:23:1f:19:4f:ee:e0:
         3e:fa:0d:68:80:5d:94:c7:bc:81:b9:05:ae:4e:43:a2:71:8b:
         6c:93:66:04:4d:de:8f:cb:0d:90:64:0d:67:ea:4e:89:1a:44:
         6d:87:eb:6d:e4:d4:bb:a6:e3:09:b9:83:6e:89:61:6f:2e:70:
         13:b9:4b:0c:82:8e:3a:e9:90:ef:32:e7:b6:ee:f5:92:b6:0d:
         16:5f:af:cc:23:4b:a5:64:ea:88:44:38:93:31:41:7e:bd:bb:
         5b:2b:27:4d:aa:02:d1:b8:f7:f9:19:31:b9:fd:4b:28:69:27:
         f0:22:ce:30:ad:65:e1:b7:06:b6:2e:de:84:27:72:d3:5f:d6:
         b7:1d:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:21 2026 by rpki-client