Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203536303436.roa
File:                     3130332e33372e34342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          A76ZcG6aAW4SRmzsEzeNninbjE+xpq8+BiQabGuUndw=
Subject key identifier:   BE:4D:85:ED:E7:9E:B5:D8:A0:C0:A1:67:9F:6B:12:E2:2D:78:71:F2
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       7CCEDDE0E4E0736CC7AFB5FF877B28B4A42A95BA
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 28 Apr 2026 02:21:52 +0000
ROA not before:           Tue 28 Apr 2026 02:16:52 +0000
ROA not after:            Tue 27 Apr 2027 02:21:52 +0000
asID:                     56046
IP address blocks:        103.37.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:dd:e0:e4:e0:73:6c:c7:af:b5:ff:87:7b:28:b4:a4:2a:95:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 28 02:16:52 2026 GMT
            Not After : Apr 27 02:21:52 2027 GMT
        Subject: CN=BE4D85EDE79EB5D8A0C0A1679F6B12E22D7871F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:d9:d6:81:75:4a:5a:21:a5:d2:32:a4:35:
                    25:0d:2d:55:77:b6:90:e3:4d:20:f7:d0:8b:ef:4d:
                    4f:3d:55:3a:2d:0e:5b:51:45:e1:6c:2b:30:e7:3d:
                    80:42:93:7f:a4:3a:c4:d0:59:12:a9:68:40:21:d7:
                    73:58:b4:85:30:fc:70:f9:a2:be:2e:e4:a4:49:81:
                    43:ed:d4:12:72:c8:b5:46:1b:7c:e9:c0:40:34:6a:
                    37:d3:4d:58:36:53:6a:ab:ed:83:bc:00:15:ef:10:
                    6f:34:98:6d:81:22:34:48:c1:76:13:7b:97:d9:6d:
                    b4:0f:31:b8:e5:0f:0d:71:4d:ce:27:bc:c0:8e:1b:
                    3c:61:13:da:cd:7f:06:9e:be:a1:6c:01:2e:ed:62:
                    5f:59:1d:99:94:e8:c1:13:17:1d:69:6a:58:f7:60:
                    bc:43:db:99:39:cb:a4:9c:6e:73:a4:44:51:57:30:
                    64:46:cb:89:ac:46:84:03:c4:66:16:f7:f7:c5:b7:
                    bb:3f:75:e8:88:7c:a5:64:ec:19:50:55:72:70:5a:
                    f4:87:d3:66:c5:9e:bc:2a:1a:2b:07:cc:e2:2c:63:
                    97:5c:25:cf:3d:f8:33:ed:57:42:59:21:0f:93:5b:
                    99:65:ed:0f:a3:46:ee:05:ca:ae:7a:d6:f8:7d:ca:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4D:85:ED:E7:9E:B5:D8:A0:C0:A1:67:9F:6B:12:E2:2D:78:71:F2
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:63:99:73:f1:9a:6d:c8:19:1f:33:91:5f:8e:55:2e:02:3a:
         3e:0c:e1:cf:55:d5:9d:45:97:2a:97:9c:5d:d2:c5:c2:e5:76:
         95:f2:d2:4b:66:cb:dc:1b:57:d0:54:21:5e:6d:ad:6b:a4:3c:
         ae:80:94:00:c1:f1:99:78:8a:79:4d:a5:c4:72:40:54:89:ce:
         7b:33:31:c9:c3:70:dc:9d:9f:13:b7:37:ee:9e:a2:78:c5:c5:
         15:b6:4c:3c:2a:87:fc:d4:89:97:d5:55:bc:be:b4:ca:16:c0:
         dc:8b:35:21:d8:b0:e8:a1:9c:59:d2:1f:0d:3f:5d:31:d1:24:
         10:26:e4:a5:b1:43:3a:d2:b9:48:98:ba:f8:8a:7d:be:5e:85:
         7d:7b:f8:e8:89:60:4a:5f:ed:41:90:68:4d:ef:c0:e3:e4:db:
         bf:da:38:18:36:76:75:1d:08:9a:df:6d:32:bb:c5:4c:76:80:
         ae:92:ef:fa:8e:df:7f:c6:f6:81:78:83:53:29:24:8d:b5:fa:
         0d:10:0e:92:e7:f7:43:7b:1f:62:8b:ce:a9:d8:ac:89:85:d5:
         a2:bc:66:22:b6:fa:f9:e6:61:b1:00:7b:f9:8b:63:47:eb:e5:
         9e:10:93:d9:56:c0:a7:4e:7a:f9:09:3c:46:68:e3:15:13:d8:
         91:d9:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:32 2026 by rpki-client