Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203233363530.roa
File:                     3130332e33372e34352e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          HykfK9hFbZEVf21U/njhuwjnbfHN4yp3386LAzP6CJw=
Subject key identifier:   BC:D7:25:81:CE:6C:F9:72:13:4B:98:52:2F:82:D5:FE:EE:D6:79:A6
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       2A970D9A9DEF068AD937FA70B83B94228F998FE5
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203233363530.roa
Signing time:             Mon 28 Sep 2026 01:00:35 +0000
ROA not before:           Mon 28 Sep 2026 00:55:35 +0000
ROA not after:            Mon 27 Sep 2027 01:00:35 +0000
asID:                     23650
IP address blocks:        103.37.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:0d:9a:9d:ef:06:8a:d9:37:fa:70:b8:3b:94:22:8f:99:8f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:35 2026 GMT
            Not After : Sep 27 01:00:35 2027 GMT
        Subject: CN=BCD72581CE6CF972134B98522F82D5FEEED679A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:c9:56:01:68:72:25:0c:19:b6:25:2c:05:
                    d6:d0:c7:6f:12:a1:a0:4a:d4:bf:b0:5e:84:9f:47:
                    d5:7c:96:06:fb:fb:3d:4b:05:57:e5:c0:75:63:44:
                    36:a6:0a:d6:0c:bc:d9:c1:da:47:83:c2:02:97:fb:
                    94:fd:0d:79:7f:bc:37:28:32:14:16:ca:01:47:54:
                    f0:a5:b4:43:bd:0e:f3:36:ca:25:d5:63:95:d1:7a:
                    a0:b5:ca:be:c9:3d:25:0c:26:74:a5:a2:53:7d:54:
                    9b:1b:76:7e:76:0c:26:58:6e:0f:ee:ef:01:a4:d0:
                    f3:31:18:bd:0b:91:fd:57:6d:bf:9e:13:81:6b:52:
                    c3:c5:e2:3c:5c:b6:81:cb:c1:34:2e:e0:94:f1:60:
                    8e:b0:8d:f4:e5:03:57:c1:8f:02:45:bd:95:09:82:
                    85:09:81:18:bb:3d:6b:ad:10:5b:60:17:f2:a1:98:
                    80:89:42:25:1b:ed:e2:4d:d7:dc:63:e2:15:cd:55:
                    68:45:14:01:dc:55:14:23:0e:e2:c7:64:39:96:a5:
                    66:52:9f:8d:7f:7f:0f:29:47:c6:4c:83:8c:bd:b9:
                    bd:26:1b:c9:5c:6b:00:c2:80:a7:57:53:d2:d3:3f:
                    7f:4f:0c:8f:2a:bb:11:f4:b5:e6:c4:cf:29:54:20:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D7:25:81:CE:6C:F9:72:13:4B:98:52:2F:82:D5:FE:EE:D6:79:A6
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:c5:c8:50:48:cc:08:e1:90:6b:ee:36:4b:e3:36:26:60:
         06:b6:78:91:8e:7a:38:16:95:3f:15:12:9b:bf:8f:37:89:cd:
         94:53:0f:90:00:03:8e:c7:73:64:58:29:af:b9:6a:e4:90:ef:
         87:96:d1:72:a6:51:08:58:97:8d:e2:97:2d:1c:8c:71:f0:64:
         d6:9e:61:0c:5e:65:eb:71:b2:5b:ac:8b:87:2e:a1:18:88:5a:
         34:c5:52:55:ce:9f:65:c5:0a:ed:a0:f8:15:f0:21:24:97:3c:
         21:78:d3:80:42:32:2a:21:fe:b8:57:14:e2:7e:91:ea:1a:73:
         66:43:ca:bc:74:ad:65:36:d6:78:38:99:d1:c6:d4:2a:75:e9:
         15:6f:d8:fd:6a:6f:d3:3d:e0:63:a3:b0:44:16:0c:36:19:5e:
         e8:75:bd:ef:ff:2f:6c:35:43:0d:3b:04:b7:60:54:bd:5d:f2:
         20:e2:aa:b1:6f:65:ea:11:cd:69:a1:db:ce:51:81:eb:4b:9e:
         73:14:e1:24:09:89:28:2f:87:fe:1e:d0:bb:ae:54:f5:b7:ba:
         2a:4b:a6:43:a7:cb:77:18:40:61:4f:3e:48:31:ad:22:87:f6:
         1e:e6:32:13:86:f8:16:79:6c:a0:15:72:b3:7a:37:d2:65:af:
         5f:9e:38:e5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUKpcNmp3vBorZN/pwuDuUIo+Zj+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzVaFw0yNzA5MjcwMTAwMzVaMDMxMTAvBgNV
BAMTKEJDRDcyNTgxQ0U2Q0Y5NzIxMzRCOTg1MjJGODJENUZFRUVENjc5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwMlWAWhyJQwZtiUsBdbQx28S
oaBK1L+wXoSfR9V8lgb7+z1LBVflwHVjRDamCtYMvNnB2keDwgKX+5T9DXl/vDco
MhQWygFHVPCltEO9DvM2yiXVY5XReqC1yr7JPSUMJnSlolN9VJsbdn52DCZYbg/u
7wGk0PMxGL0Lkf1Xbb+eE4FrUsPF4jxctoHLwTQu4JTxYI6wjfTlA1fBjwJFvZUJ
goUJgRi7PWutEFtgF/KhmICJQiUb7eJN19xj4hXNVWhFFAHcVRQjDuLHZDmWpWZS
n41/fw8pR8ZMg4y9ub0mG8lcawDCgKdXU9LTP39PDI8quxH0tebEzylUIC1pAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUvNclgc5s+XITS5hSL4LV/u7WeaYwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3
MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGclLTANBgkqhkiG9w0BAQsFAAOCAQEAPsjFyFBIzAjhkGvuNkvjNiZgBrZ4
kY56OBaVPxUSm7+PN4nNlFMPkAADjsdzZFgpr7lq5JDvh5bRcqZRCFiXjeKXLRyM
cfBk1p5hDF5l63GyW6yLhy6hGIhaNMVSVc6fZcUK7aD4FfAhJJc8IXjTgEIyKiH+
uFcU4n6R6hpzZkPKvHStZTbWeDiZ0cbUKnXpFW/Y/Wpv0z3gY6OwRBYMNhle6HW9
7/8vbDVDDTsEt2BUvV3yIOKqsW9l6hHNaaHbzlGB60uecxThJAmJKC+H/h7Qu65U
9be6KkumQ6fLdxhAYU8+SDGtIof2HuYyE4b4FnlsoBVys3o30mWvX5445Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 07:53:10 2026 by rpki-client