Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32322d3232203d3e203137383136.roa
File:                     3130332e32372e32342e302f32322d3232203d3e203137383136.roa (raw, json)
Hash identifier:          P2KcOVKOydMCjngRdPy4Tn008MSdLHu108oEH+lqhxU=
Subject key identifier:   76:F8:B5:28:15:24:1A:E9:A7:40:5B:B5:8B:B2:C8:EE:F2:35:F5:FD
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       0C4D0F120316D37F2AE66FD9D290EAB2238DF93E
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32322d3232203d3e203137383136.roa
Signing time:             Fri 24 Apr 2026 03:16:00 +0000
ROA not before:           Fri 24 Apr 2026 03:11:00 +0000
ROA not after:            Fri 23 Apr 2027 03:16:00 +0000
asID:                     17816
IP address blocks:        103.27.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4d:0f:12:03:16:d3:7f:2a:e6:6f:d9:d2:90:ea:b2:23:8d:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 24 03:11:00 2026 GMT
            Not After : Apr 23 03:16:00 2027 GMT
        Subject: CN=76F8B52815241AE9A7405BB58BB2C8EEF235F5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ce:9e:63:97:18:29:5e:1c:c4:94:91:7b:0f:
                    49:5a:88:8d:f2:34:8f:30:99:5c:a1:79:b0:bc:b5:
                    de:b2:2d:ff:b1:29:ab:9e:35:83:2a:d8:07:d5:16:
                    fa:41:35:20:16:6e:1a:ad:a6:a4:98:3b:c3:98:7b:
                    a3:c5:08:51:e9:99:54:4a:fa:c6:46:31:22:b7:39:
                    d5:1b:9c:79:9a:74:be:72:7b:79:63:9d:ab:f7:37:
                    62:2d:7a:58:18:12:74:b0:91:45:f2:aa:eb:a7:d8:
                    17:2c:39:9a:b1:f1:fe:bb:6b:0d:51:b5:2f:7b:f0:
                    55:4a:8f:d3:73:a8:d2:85:03:12:b9:b0:78:ff:b5:
                    5b:77:9c:fc:6b:03:f6:76:c2:f2:27:5a:a3:51:23:
                    70:a1:32:d8:18:b7:8a:e9:65:a4:d7:f7:21:1b:0a:
                    e3:ce:b8:0c:11:e3:ee:fd:94:eb:bd:7e:23:d3:e9:
                    6f:3e:e7:45:d6:cb:ad:1b:65:3c:34:b7:b5:20:ba:
                    78:24:7c:96:0e:f6:22:9c:b0:30:26:80:d6:a0:f7:
                    91:6f:37:1c:1a:5e:d1:b2:f7:fc:59:27:22:98:98:
                    bd:7f:ec:f8:02:9d:81:f3:60:48:ba:c8:8d:64:19:
                    c1:03:99:98:c0:1b:c5:c4:ac:f6:dd:69:c3:d1:e2:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:B5:28:15:24:1A:E9:A7:40:5B:B5:8B:B2:C8:EE:F2:35:F5:FD
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3130332e32372e32342e302f32322d3232203d3e203137383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:c2:76:e0:6d:0a:01:72:9c:40:d0:e5:d5:8b:8f:5d:e1:
         f5:74:6a:3c:ac:82:7d:b3:a4:04:ed:1a:58:16:e2:17:23:4c:
         bf:a2:58:0b:74:a5:02:fc:04:af:9a:37:8c:e2:1c:5d:58:4a:
         51:b8:dc:18:b5:06:f7:0f:b6:bb:0c:3b:ab:1e:71:1c:ab:1a:
         37:1b:f5:e5:03:2f:fb:2e:60:80:51:1c:c7:d8:c5:01:2a:d6:
         4a:96:7f:11:cc:f1:2a:4f:69:ce:c2:dd:a0:ca:a9:24:b8:bd:
         03:74:28:3b:54:77:ce:aa:eb:8b:8c:51:62:41:e3:55:a2:c9:
         0f:2b:a6:7b:0d:83:5f:60:eb:8b:46:ea:af:a4:e3:99:b2:7b:
         c6:6e:eb:d8:cf:d6:61:f9:b5:57:17:94:6d:10:7e:fc:88:47:
         9f:2f:e7:8f:41:40:93:51:40:dc:d1:47:3a:b3:df:01:a3:96:
         81:1c:56:78:49:cc:89:82:a8:35:f9:db:c4:be:89:5f:02:08:
         71:9d:f1:bf:e5:be:f8:3a:19:90:41:bd:be:ab:9f:3c:58:66:
         41:f6:93:e0:ce:3c:17:12:08:ed:56:06:6a:29:e6:a9:6e:9c:
         dc:6a:47:95:da:d2:d3:e3:b1:3b:e9:d3:30:5b:4c:40:34:7e:
         2c:19:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:58 2026 by rpki-client