Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034313334.roa
File:                     3130332e33372e34362e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier:          Fzr+hJ6wyrbIfRk1VdkvB+wXB4+s0XBXNrSgeSZfrOc=
Subject key identifier:   92:3F:70:FC:72:02:21:60:68:17:5D:94:EF:96:1D:3E:3D:84:AB:B2
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       4C28FE9BDEED6971752B4D749017BB63F3F6A948
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034313334.roa
Signing time:             Mon 28 Sep 2026 01:00:37 +0000
ROA not before:           Mon 28 Sep 2026 00:55:37 +0000
ROA not after:            Mon 27 Sep 2027 01:00:37 +0000
asID:                     4134
IP address blocks:        103.37.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:28:fe:9b:de:ed:69:71:75:2b:4d:74:90:17:bb:63:f3:f6:a9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:37 2026 GMT
            Not After : Sep 27 01:00:37 2027 GMT
        Subject: CN=923F70FC7202216068175D94EF961D3E3D84ABB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:58:58:dc:eb:4c:64:ed:82:b4:75:8b:fd:
                    e9:ca:8d:b3:06:81:16:77:24:75:98:a6:ee:f8:61:
                    61:27:4f:8c:7b:ef:78:86:e1:2c:bb:97:e4:33:c1:
                    b5:90:82:6f:6f:1e:5f:07:4b:b7:e8:e8:ad:10:db:
                    50:2a:ff:44:58:b9:45:ad:50:28:01:99:69:0a:53:
                    00:46:15:78:a2:86:c7:f7:75:ab:ee:e1:22:3f:b8:
                    7f:db:cf:0f:ba:e1:3c:0e:cf:c1:7e:b4:63:2d:36:
                    01:08:54:8b:36:d9:af:49:66:ca:a8:db:dc:1e:05:
                    e7:90:d5:22:f1:8a:6c:fa:62:77:f4:93:cf:e7:92:
                    bc:a3:5b:ed:82:10:8d:25:da:56:0b:33:4d:d3:f0:
                    f0:48:16:72:30:1c:74:c0:f0:cf:c6:0a:4a:35:83:
                    b8:67:50:dc:74:07:2e:d0:8b:49:b7:7d:4e:83:b7:
                    8f:3a:03:e0:5e:ab:1b:00:11:92:dc:7e:59:14:a0:
                    f0:cb:31:ee:6a:e9:10:1c:0c:7f:20:d8:55:8f:b8:
                    ca:0c:17:10:e8:67:8b:c5:8c:18:99:c7:da:81:d6:
                    61:ea:94:30:2b:48:85:88:1b:3b:34:45:75:05:07:
                    03:ef:84:61:15:49:d5:04:ca:41:55:13:21:af:65:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:70:FC:72:02:21:60:68:17:5D:94:EF:96:1D:3E:3D:84:AB:B2
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:1c:d9:f9:03:ca:32:16:48:0f:42:c6:61:ab:7e:99:3e:
         b6:dc:b1:2e:69:e8:5f:e9:b2:0b:87:93:dd:a7:5b:8e:34:f5:
         31:cc:69:39:c7:fa:34:34:6e:c9:6e:39:7c:89:4f:7d:00:c2:
         07:70:87:a9:cc:a3:68:18:bc:4c:9a:f6:e1:1f:dc:b7:c5:2d:
         6f:d5:2d:03:8b:49:13:70:3b:6e:1a:d8:37:5f:58:2a:f8:b7:
         92:52:31:8e:0a:a6:43:e6:37:2e:ea:b2:bb:07:08:70:4c:0c:
         c3:52:22:df:e2:25:50:b0:2f:d8:a7:c7:fe:62:57:09:32:fa:
         48:63:27:59:1b:1a:bc:e2:dc:11:ac:16:a2:f7:dc:23:90:65:
         66:70:8d:5a:aa:6b:18:97:63:65:c0:de:f3:3f:73:e1:55:ae:
         a9:ff:90:69:51:6b:d9:99:55:ae:5f:49:26:13:10:3f:dd:50:
         f1:cc:98:68:1d:83:60:84:eb:9e:7c:db:2b:2a:1a:b7:b6:ec:
         f1:b0:6b:c9:28:7b:88:a3:ac:d1:de:a5:7a:d2:a2:7b:01:59:
         2a:35:e2:31:73:be:b3:d1:c9:f0:ba:ea:02:00:9a:38:f8:8c:
         94:ba:c7:96:12:a0:66:fa:8b:25:c6:9e:d8:ea:f2:a6:e4:a6:
         f6:dd:e1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:59:55 2026 by rpki-client