Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
File:                     3130332e38332e37322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          cnY1aHAojPeqSMyk5Q1wGLtN0lWS6GO/+znWMKM+jcI=
Subject key identifier:   DE:13:D6:61:54:FF:E0:57:3E:CF:F5:90:2E:87:1E:A4:6F:2C:AD:D4
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       5DE47AA40AA7710C144F0821AE4F643BC29C646B
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa
Signing time:             Mon 28 Sep 2026 01:00:36 +0000
ROA not before:           Mon 28 Sep 2026 00:55:36 +0000
ROA not after:            Mon 27 Sep 2027 01:00:36 +0000
asID:                     4837
IP address blocks:        103.83.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e4:7a:a4:0a:a7:71:0c:14:4f:08:21:ae:4f:64:3b:c2:9c:64:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:36 2026 GMT
            Not After : Sep 27 01:00:36 2027 GMT
        Subject: CN=DE13D66154FFE0573ECFF5902E871EA46F2CADD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:a7:91:4b:3f:02:60:55:c8:79:07:7b:22:
                    25:cd:44:31:fe:a8:72:79:00:9e:27:79:e0:71:bf:
                    5e:1a:b0:78:64:9d:89:2a:7b:b3:ae:cb:c5:89:bb:
                    06:97:86:9e:6e:5d:88:8b:16:32:8b:74:50:28:35:
                    50:47:e4:c1:a2:db:ce:fe:b7:b6:76:48:8d:9e:fc:
                    71:ad:83:b0:99:5a:eb:7b:8f:b6:e6:49:6b:41:be:
                    83:0e:4b:39:8c:6b:cb:68:90:37:53:79:34:86:80:
                    61:8c:a6:c8:f4:4b:02:71:53:88:df:d1:31:7c:97:
                    45:13:50:ad:a7:f4:41:a9:5a:b1:ab:81:6f:bf:81:
                    d9:99:f2:78:0a:89:3d:fd:34:00:e3:69:99:e3:18:
                    14:f6:e6:28:80:bd:b7:e0:3b:26:5c:0c:fe:99:e5:
                    69:36:38:a3:9f:b0:87:0b:8f:eb:e4:de:27:12:3f:
                    2d:9c:a3:d2:a9:53:d6:e2:21:5f:62:0a:d4:4b:c5:
                    0c:7d:d2:8a:ca:83:4b:a1:af:a4:c4:91:2e:a5:95:
                    3a:da:44:d5:ba:5f:12:39:4b:06:e7:80:83:0e:2f:
                    b5:20:e7:a6:ab:33:c6:5e:b4:30:af:07:06:a3:52:
                    9b:74:ad:1f:3f:26:6c:ba:65:b6:af:0d:95:5c:b1:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:D6:61:54:FF:E0:57:3E:CF:F5:90:2E:87:1E:A4:6F:2C:AD:D4
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e38332e37322e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:b4:7d:25:de:27:a1:c9:9f:e6:d4:e5:4a:73:e0:b9:29:
         12:4c:bf:82:86:fa:17:48:59:b9:ad:60:56:1c:0a:ba:61:ce:
         83:ba:24:36:13:f8:af:c6:5b:f3:0a:9e:c8:93:f0:b1:4e:67:
         ee:47:7b:36:d5:16:2d:11:de:1c:b2:86:56:69:63:e1:ad:fa:
         34:79:ac:02:59:9b:60:81:d7:e2:f6:f6:8c:33:86:e9:ff:ba:
         da:29:e7:c4:a2:7c:ab:5b:65:39:31:28:95:92:94:c7:ec:00:
         f8:a8:c0:15:f6:b9:72:97:76:38:d6:8b:e5:21:a3:e8:76:fd:
         af:44:5a:ae:d1:4c:d7:c2:f7:1a:e4:81:40:ca:29:d2:08:9e:
         a1:b6:33:a2:b7:71:86:80:c9:63:b3:a1:14:84:e4:53:e1:f9:
         11:3d:a8:95:e8:4c:3b:8e:9a:f0:54:7c:c5:d6:fe:a6:59:8c:
         78:ad:3b:ac:59:a2:ab:6d:f0:f3:21:d0:85:2a:44:e5:91:30:
         6d:82:31:ba:03:d9:7f:1a:62:c0:99:31:72:f2:b0:49:a7:79:
         60:7c:1b:17:13:00:20:e2:9b:56:66:cd:5c:a6:53:79:40:a8:
         79:9f:a0:3c:94:78:ea:a9:73:ec:78:2f:50:a2:dc:ce:67:b1:
         37:b7:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:42:46 2026 by rpki-client