Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
File:                     AS13378.roa (raw, json)
Hash identifier:          OPyi8mTllKWBTmPe21LoqwD2zrSCH/8SJK7Z44pkkFs=
Subject key identifier:   E4:D1:C7:23:88:FF:0D:A3:A0:B9:9B:40:44:5B:DB:12:E3:D8:DD:21
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       6F31FF0515A9D03C92DF492C00DF76A5A0B3CD13
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa
Signing time:             Tue 14 Jul 2026 07:19:54 +0000
ROA not before:           Tue 14 Jul 2026 07:14:54 +0000
ROA not after:            Tue 13 Jul 2027 07:19:54 +0000
asID:                     13378
IP address blocks:        43.248.184.0/21 maxlen: 24
                          103.40.12.0/22 maxlen: 22
                          103.45.160.0/22 maxlen: 24
                          103.205.252.0/22 maxlen: 24
                          103.239.244.0/22 maxlen: 24
                          111.223.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:31:ff:05:15:a9:d0:3c:92:df:49:2c:00:df:76:a5:a0:b3:cd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Jul 14 07:14:54 2026 GMT
            Not After : Jul 13 07:19:54 2027 GMT
        Subject: CN=E4D1C72388FF0DA3A0B99B40445BDB12E3D8DD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:03:21:f1:bb:33:ca:5e:9c:36:f4:70:f1:
                    ec:91:ca:33:4a:93:64:b5:8f:20:23:39:8a:a6:45:
                    c5:ee:8f:87:22:c7:72:56:54:91:c8:5e:ef:e3:91:
                    39:7f:0b:ee:2b:05:22:3c:ca:b8:f7:d6:9a:47:94:
                    f1:8f:21:b2:3e:b4:e0:7f:16:cf:d0:7e:ba:d9:93:
                    ef:0f:dc:67:13:ad:46:f0:5d:37:70:0a:dc:d0:e4:
                    f5:15:24:cd:42:93:c8:9f:78:6f:6f:07:dd:65:d2:
                    92:bf:06:fd:ea:88:45:ba:2f:dd:e4:80:29:ce:7b:
                    5d:93:52:b6:d4:9d:a8:18:7f:9e:96:e1:02:5f:df:
                    c7:ce:ac:ab:83:36:26:dc:75:03:03:bd:eb:63:fa:
                    5a:e8:ab:41:c1:76:8d:88:30:96:8b:4d:ab:85:c6:
                    bc:cf:a0:e5:a8:37:80:b0:95:f1:06:f3:27:20:29:
                    b9:ef:3a:50:61:86:71:6d:9a:20:99:67:86:50:20:
                    f4:4c:6f:4a:f2:d4:8d:55:a2:ad:e2:03:61:d3:b3:
                    9a:10:76:c6:5f:a3:a6:0a:3a:24:45:07:ac:77:fc:
                    d0:1b:8c:42:10:8d:d7:ae:f6:e0:43:a3:3b:ee:ca:
                    b4:94:37:f5:1d:ff:bd:62:aa:9d:0b:e1:32:57:15:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D1:C7:23:88:FF:0D:A3:A0:B9:9B:40:44:5B:DB:12:E3:D8:DD:21
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS13378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.184.0/21
                  103.40.12.0/22
                  103.45.160.0/22
                  103.205.252.0/22
                  103.239.244.0/22
                  111.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:72:42:67:e5:74:89:ff:fa:a4:8d:76:e7:4b:ee:29:65:
         bb:0b:98:42:b6:5d:a7:f4:5a:11:63:28:09:f5:01:de:d3:d3:
         0b:37:82:e0:ba:1f:68:5c:55:2a:c3:29:90:df:af:fa:e8:7d:
         db:68:7c:cb:aa:ab:ab:7b:63:be:98:37:41:03:96:87:71:d2:
         71:31:69:84:4a:a9:47:d5:1f:9f:48:5d:4e:fc:33:2a:f2:d7:
         8e:d0:b1:de:6e:11:64:6d:70:d3:e5:7f:bf:91:d2:c3:35:5a:
         8c:38:0a:78:1f:4a:9c:b4:ac:16:a4:a1:ca:c6:26:b5:7d:40:
         43:76:e4:c9:28:7e:f1:e8:87:a4:12:77:84:bb:80:e1:a9:2f:
         12:0a:42:e1:5f:c0:90:cc:29:6f:96:22:36:b8:fc:e7:a7:1a:
         03:96:82:10:1e:f6:a1:9a:7a:b3:d8:d7:7b:5b:98:b8:d4:c3:
         c2:b7:5c:b7:93:f2:ba:bd:5d:d6:d6:cf:fd:4e:c8:1e:09:6a:
         6f:ab:3d:4b:bb:79:53:d2:44:85:77:e1:92:4a:87:b8:90:bd:
         06:3c:f7:40:f8:e4:f1:f5:ec:9b:32:17:08:f0:e0:92:3e:ec:
         3a:cd:f4:21:ed:d7:48:88:40:b5:97:b5:cf:51:d0:f2:f7:7e:
         4b:3a:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:24 2026 by rpki-client