Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034383337.roa
File:                     3130332e33372e34342e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          nDxrFvcAdQecKpM5UTGwZjuVLqDsv4l4hbdkDqjJ2Zg=
Subject key identifier:   6F:26:EF:57:55:EF:BA:6C:41:CF:30:75:0A:A1:23:3F:00:5F:F3:43
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       3219D333592390444704D4084DE79C63519EB8FA
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034383337.roa
Signing time:             Mon 28 Sep 2026 01:00:34 +0000
ROA not before:           Mon 28 Sep 2026 00:55:34 +0000
ROA not after:            Mon 27 Sep 2027 01:00:34 +0000
asID:                     4837
IP address blocks:        103.37.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:19:d3:33:59:23:90:44:47:04:d4:08:4d:e7:9c:63:51:9e:b8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:34 2026 GMT
            Not After : Sep 27 01:00:34 2027 GMT
        Subject: CN=6F26EF5755EFBA6C41CF30750AA1233F005FF343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:66:7f:4e:89:65:dc:ca:03:59:ae:f8:04:
                    fa:c4:18:6e:b6:b8:8d:78:a6:34:dc:c9:91:68:62:
                    f9:45:29:c9:05:c9:d3:5c:00:ff:4e:41:26:fa:85:
                    c4:89:ef:4c:bf:47:4a:e3:c6:e1:53:94:80:55:38:
                    bb:55:8d:61:ba:98:b0:0d:db:33:b8:c9:d9:2c:6d:
                    fb:ff:22:43:f6:e8:58:15:82:87:c1:1c:75:de:85:
                    fc:ba:99:79:2f:84:a3:01:4e:68:2c:26:bd:12:9a:
                    22:2c:4c:d1:80:65:1d:32:31:f1:3b:c1:6a:8e:96:
                    46:a4:f2:10:f0:84:2d:22:be:69:12:98:96:bd:84:
                    c9:32:2a:16:62:88:7c:3d:4d:52:59:c3:c4:9c:d8:
                    8e:ef:5e:1e:41:cb:a2:af:d9:84:fd:3f:37:82:d7:
                    e4:68:49:65:45:f1:41:d4:34:08:e1:db:b2:01:58:
                    76:33:75:e7:aa:f4:4b:2c:1f:cb:5b:93:7e:88:bc:
                    1b:14:38:ab:39:82:c8:0a:f6:22:12:f3:c6:da:f4:
                    60:7a:94:32:82:29:41:19:2a:6a:a8:5a:3f:d2:08:
                    62:fa:37:22:35:6c:24:9b:ee:21:81:12:81:3b:af:
                    00:63:82:88:14:5c:0c:6f:fd:00:37:7b:2d:73:cc:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:EF:57:55:EF:BA:6C:41:CF:30:75:0A:A1:23:3F:00:5F:F3:43
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:1b:dd:20:93:c2:22:a5:cf:07:80:50:bc:4c:58:e1:92:
         ed:2e:94:7d:bd:14:34:a0:90:55:8c:ca:73:71:1e:74:c2:b9:
         62:66:a5:02:94:22:0e:4f:8a:e3:4d:44:fd:c6:35:b6:e8:b4:
         ed:78:08:83:58:d0:2f:05:76:f6:06:ac:a3:2d:e3:b1:f1:4e:
         d6:0b:e8:d3:25:49:83:04:30:5c:47:78:c9:ad:e9:9c:47:00:
         b5:21:f9:b4:d5:d6:f0:5a:31:2c:7a:85:36:ac:1c:90:5c:09:
         da:45:36:34:45:16:ef:d1:02:37:4b:81:1f:81:46:8d:44:fd:
         d3:0a:cc:c3:0e:94:39:f0:8d:e3:89:8a:b1:0e:69:06:e9:01:
         41:e3:c0:b4:d8:21:36:3a:17:e6:05:c1:4e:e5:5c:0e:d2:90:
         1d:5c:6a:f3:63:42:6d:bb:3a:fb:12:be:06:4e:9c:26:0c:2d:
         cf:5b:3e:35:a2:80:8f:49:7b:09:f3:7c:87:b9:05:d3:55:65:
         df:7e:36:bc:61:20:e4:56:8b:e4:01:12:6a:22:d6:88:05:f1:
         26:23:c0:a2:dc:c0:ea:87:f9:f1:24:dd:69:b8:ab:1a:f7:c4:
         89:e2:ee:e2:f0:bf:f4:3f:f0:cf:42:c0:23:08:33:58:5a:61:
         4f:19:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:17:20 2026 by rpki-client