Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034383337.roa
File:                     3130332e33372e34372e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          m7vofrNd28FCU9PnZsuqYLWoFJn5sf/kQz33y/NiASA=
Subject key identifier:   FE:00:E3:E8:C3:83:D6:54:E1:40:FB:7C:50:4F:14:E9:E2:91:B6:B3
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       14A910348F94230F5BB3D1AABAD091BBB316E993
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034383337.roa
Signing time:             Mon 28 Sep 2026 01:00:35 +0000
ROA not before:           Mon 28 Sep 2026 00:55:35 +0000
ROA not after:            Mon 27 Sep 2027 01:00:35 +0000
asID:                     4837
IP address blocks:        103.37.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:10:34:8f:94:23:0f:5b:b3:d1:aa:ba:d0:91:bb:b3:16:e9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:35 2026 GMT
            Not After : Sep 27 01:00:35 2027 GMT
        Subject: CN=FE00E3E8C383D654E140FB7C504F14E9E291B6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:b6:e3:d1:2e:69:4a:8f:76:69:58:00:38:
                    8e:f1:18:40:01:18:3e:51:57:48:54:42:b8:08:43:
                    a1:ce:9a:73:73:c4:bf:37:c7:1c:6a:9d:3e:55:cf:
                    11:17:ba:4f:89:7e:50:80:43:c5:9b:04:bd:5e:be:
                    14:66:d1:e8:f9:d3:8b:93:a7:72:fa:19:33:12:61:
                    60:97:a9:0b:80:9a:57:9a:0f:47:e6:a5:95:58:72:
                    ed:62:48:5a:d5:04:fa:20:90:ed:cc:aa:10:a4:82:
                    c7:41:bc:e8:ae:c7:bb:d3:a1:b0:8b:98:ce:ed:cf:
                    d8:54:c5:b7:94:90:b2:59:44:d1:c5:52:24:d5:d9:
                    b3:a4:cb:88:4e:4a:06:48:d6:ff:84:c4:99:f4:0c:
                    e6:94:f0:30:47:a4:4b:f6:fc:47:0d:8b:38:80:81:
                    11:a4:3a:25:a9:b8:ef:14:3d:b4:7a:c5:62:cf:1f:
                    6c:2e:60:ff:fc:83:a2:3a:7f:1b:57:a7:2d:37:6d:
                    8f:b9:f9:21:74:7c:41:8a:87:14:2a:23:64:03:74:
                    c1:76:63:b9:f3:0b:92:9a:72:7d:ca:1a:62:dd:b8:
                    e2:5e:d5:1a:94:ee:9f:6c:f6:66:da:61:ac:18:e3:
                    b9:a0:9c:ff:f6:03:bf:55:e6:42:5b:54:89:5a:1e:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:00:E3:E8:C3:83:D6:54:E1:40:FB:7C:50:4F:14:E9:E2:91:B6:B3
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34372e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:9b:16:53:41:db:f9:ed:a1:7d:28:57:28:62:55:3e:b1:a4:
         4f:dc:d2:be:bf:43:84:46:0a:5b:50:ad:c5:f0:c7:16:85:80:
         7b:89:52:77:01:c7:20:92:a0:23:df:fc:8f:96:7b:fd:42:bc:
         f9:a1:f6:f3:01:13:8f:e8:6a:d3:b3:03:ad:a2:67:5a:13:5f:
         da:89:ae:21:b1:d2:32:3a:84:ce:48:46:1e:fb:59:fb:e3:71:
         b1:6b:06:50:af:86:5d:f4:0a:b0:98:d3:6a:53:0f:1e:2e:a3:
         d0:c9:e5:cd:28:22:76:79:ab:91:3c:93:9a:af:7d:6c:c3:25:
         fb:bc:0e:be:65:a5:1b:45:4d:25:c3:9a:a7:4d:bc:d4:6e:24:
         12:de:6b:b2:89:41:4f:4d:30:5b:b8:24:57:c5:d9:de:dd:dc:
         7d:34:44:e2:92:bc:af:e7:4d:d2:b2:2b:4c:7a:27:54:24:47:
         62:8b:39:b3:84:00:b8:2d:bb:fe:9e:30:9b:89:7b:ec:e3:8d:
         35:56:80:e1:43:1d:ee:e5:a3:01:f7:55:3d:9a:4a:3e:e1:df:
         9e:76:db:34:ca:1f:d5:0a:15:a5:3e:43:61:34:30:c6:99:a5:
         41:d2:76:08:d8:77:e5:49:c4:d2:4e:06:bf:ae:ff:00:71:4f:
         37:76:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:54:07 2026 by rpki-client