Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa
File:                     3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa (raw, json)
Hash identifier:          fW0XDmPZUdQM2bQp/l3K+jPOu3T0QqmCbPxXrk2cD7Y=
Subject key identifier:   72:A9:F5:27:7D:85:B0:50:6B:16:A8:CD:93:53:CE:7F:EE:95:4C:1F
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       39C558FCB0C4DDD4134FE67A07C1B809F6D67E90
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa
Signing time:             Mon 11 May 2026 02:49:04 +0000
ROA not before:           Mon 11 May 2026 02:44:04 +0000
ROA not after:            Mon 10 May 2027 02:49:04 +0000
asID:                     133774
IP address blocks:        103.59.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c5:58:fc:b0:c4:dd:d4:13:4f:e6:7a:07:c1:b8:09:f6:d6:7e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 11 02:44:04 2026 GMT
            Not After : May 10 02:49:04 2027 GMT
        Subject: CN=72A9F5277D85B0506B16A8CD9353CE7FEE954C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:1f:b0:f2:f9:70:35:24:8d:cf:92:f6:cc:
                    02:57:59:f7:7a:e5:b5:d2:76:f4:b5:55:40:2c:d3:
                    e8:2c:c5:e8:8d:60:7a:e3:71:33:b6:5c:cc:2d:51:
                    9f:da:63:c3:c4:d2:05:d4:9f:2d:0f:e4:f0:5a:63:
                    e5:e7:8b:90:0e:f0:00:52:fc:fe:7f:b0:8e:9a:9b:
                    63:71:bf:29:9b:2e:91:9e:8a:9b:23:08:b5:cf:8c:
                    41:aa:a6:20:13:60:96:71:60:65:9b:96:ec:9b:e5:
                    86:3c:ec:61:c7:20:82:5a:f6:d4:2f:f5:31:b7:0f:
                    3c:9d:22:66:3f:32:bf:ab:da:96:64:e5:6b:5a:de:
                    55:db:44:93:d4:d8:f7:e6:22:53:55:5c:a2:a1:48:
                    80:6b:be:5b:37:c7:e8:ae:ca:aa:22:a9:0c:d9:5b:
                    99:ab:93:ee:3f:b6:97:cb:b7:27:73:5d:99:0e:7f:
                    e1:03:9c:6b:f0:5f:6e:71:59:88:a6:44:b2:69:65:
                    f9:a9:3f:d8:c4:eb:ef:58:24:91:43:a0:48:d8:ab:
                    e1:ff:7c:73:95:a1:20:38:cb:d1:49:55:c4:c5:27:
                    9f:b8:ba:91:7b:e8:12:82:bb:7f:16:f2:90:75:9f:
                    c2:09:54:46:7c:65:ee:a9:d2:49:f0:5f:1f:5b:46:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:F5:27:7D:85:B0:50:6B:16:A8:CD:93:53:CE:7F:EE:95:4C:1F
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3130332e35392e3131322e302f32322d3232203d3e20313333373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:68:4f:67:8e:e0:bd:4f:0c:5a:bb:31:d7:6b:37:37:ad:
         f5:3d:43:85:74:6e:77:92:54:ef:92:f2:d9:61:5c:19:91:d6:
         e1:11:00:05:ae:fe:d8:54:39:d8:06:a3:90:c5:02:b6:38:8f:
         24:37:9e:0d:83:c3:a2:67:7b:d9:6b:2e:bf:ea:d2:3d:b4:be:
         a6:d8:b8:a6:a8:e3:67:ae:e0:96:0c:88:40:eb:b8:c6:51:f5:
         0f:56:78:bd:55:a1:04:c9:d8:af:8c:36:a1:c0:1e:77:16:6f:
         88:5f:2c:f6:77:42:18:7d:48:fc:f8:dc:d2:0f:10:df:ec:df:
         48:5c:7e:34:ae:46:4a:fb:19:97:ad:d4:69:24:30:8d:27:9d:
         4e:b1:d7:78:74:00:2b:bf:99:ad:34:8a:3e:0e:38:74:de:61:
         b1:0c:e2:aa:e2:f7:d2:bf:d6:bc:23:29:12:e9:d0:71:a9:c7:
         04:79:14:f7:fa:03:b6:3b:89:74:94:30:78:a3:e9:08:6a:75:
         c0:f6:99:f9:3c:c2:a9:b9:24:df:f2:aa:b8:10:69:0e:77:4c:
         f3:b6:7c:f0:ba:29:fe:17:5f:3d:6b:0c:7c:46:1b:da:cb:18:
         ba:dd:11:c0:da:40:68:83:fe:35:cc:da:64:e9:64:63:28:fc:
         5b:d3:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:13 2026 by rpki-client