Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37392e302f32342d3332203d3e20343031393232.roa
File:                     3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (raw, json)
Hash identifier:          HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=
Subject key identifier:   C1:1E:6C:73:FA:38:BD:D0:00:BF:31:23:CD:FD:06:F3:6E:62:E0:4E
Certificate issuer:       /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial:       4BA52F87C56BA419B26E2621652F70A1E893512A
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37392e302f32342d3332203d3e20343031393232.roa
Signing time:             Fri 20 Mar 2026 06:11:33 +0000
ROA not before:           Fri 20 Mar 2026 06:06:33 +0000
ROA not after:            Fri 19 Mar 2027 06:11:33 +0000
asID:                     401922
IP address blocks:        103.99.79.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 05:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a5:2f:87:c5:6b:a4:19:b2:6e:26:21:65:2f:70:a1:e8:93:51:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Validity
            Not Before: Mar 20 06:06:33 2026 GMT
            Not After : Mar 19 06:11:33 2027 GMT
        Subject: CN=C11E6C73FA38BDD000BF3123CDFD06F36E62E04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:26:04:bb:22:7a:11:a4:ca:bc:3e:82:2c:
                    de:2d:5f:08:9a:2c:fd:9d:46:4c:c7:89:4d:5f:e4:
                    7a:68:fb:da:b8:b4:0e:ef:16:6e:83:2f:a4:ac:64:
                    d2:fc:5c:bd:8c:37:50:36:9d:4b:e3:e3:15:de:22:
                    38:1c:03:a1:44:9b:c3:cc:f8:5b:d1:8f:2b:85:78:
                    51:83:8a:30:bb:eb:de:f3:06:65:4d:33:25:14:9a:
                    ec:24:56:87:81:46:54:d5:c8:cb:a4:08:de:2c:59:
                    88:59:f8:09:91:f7:cf:15:c2:97:6e:ae:eb:66:e9:
                    ba:d6:52:15:d9:14:44:72:aa:cf:90:28:c7:c9:8e:
                    80:11:b9:b4:92:23:b3:44:08:18:5f:a8:5a:72:2c:
                    45:aa:27:6e:c8:59:fa:b1:56:8c:97:11:d7:9a:d2:
                    52:30:54:ca:94:ac:6b:f7:bc:db:14:19:d5:64:23:
                    ba:d7:31:99:c9:b3:a6:0c:96:9d:d7:8d:d8:02:70:
                    11:c0:73:9f:8b:30:57:06:81:db:c6:bc:f0:7a:1f:
                    3c:73:99:04:1c:37:c7:fb:d7:3e:9a:5a:6f:3f:b0:
                    0b:50:e3:02:2c:e6:b2:14:be:fb:c2:4b:44:cc:cb:
                    53:8a:e2:58:b3:71:c3:40:31:b2:4e:10:55:13:a8:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1E:6C:73:FA:38:BD:D0:00:BF:31:23:CD:FD:06:F3:6E:62:E0:4E
            X509v3 Authority Key Identifier:
                keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/3130332e39392e37392e302f32342d3332203d3e20343031393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:95:f8:5b:e6:43:ee:4f:36:f9:e6:ed:c4:ba:8c:71:46:c6:
         c5:07:f8:41:a5:09:00:a0:4a:e1:1c:a9:b7:ca:eb:ef:99:25:
         d2:61:1e:7d:58:be:cc:29:64:97:e7:e8:6f:51:33:a1:f6:58:
         51:4e:68:75:a4:d2:1c:97:b0:cd:ed:04:92:b9:3b:fc:49:11:
         db:89:5b:36:d8:0b:3b:4d:49:83:11:33:8f:62:51:61:32:eb:
         0c:e4:bb:fc:f9:e3:07:61:0a:44:fb:f8:f1:cb:a6:45:b2:c4:
         2a:b4:40:a0:9c:f3:2f:a2:8a:57:05:20:32:59:6f:63:cb:72:
         89:36:66:6e:43:38:ff:1f:f9:6c:ba:6b:71:cd:ae:18:42:65:
         4c:52:b6:2b:09:9b:06:98:ea:0e:08:ff:dd:ec:28:ef:20:14:
         0b:d5:72:36:98:8c:1b:d1:2c:d4:87:6a:27:ea:41:fc:c9:c7:
         c9:a8:c0:ce:68:eb:9f:90:95:9b:50:f8:4e:67:2f:9c:81:34:
         ac:bc:84:5a:f5:23:cf:81:21:f2:9a:e4:fc:de:13:db:5f:ba:
         a5:6d:62:6d:d2:40:5d:61:b5:1c:fc:af:7e:f0:3f:dd:02:53:
         e3:f1:ee:b7:5d:11:0c:d1:e2:83:03:2d:69:5a:fb:28:3e:fa:
         24:c1:fb:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:33:37 2026 by rpki-client