Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36302e302f32342d3234203d3e2034383038.roa
File:                     3130332e37362e36302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=
Subject key identifier:   6A:C8:8A:7C:CD:80:03:80:21:9B:14:B7:F2:B1:89:04:64:07:54:0B
Certificate issuer:       /CN=C979A435EE505D2600A38B057A1D127AADD915A7
Certificate serial:       12864EE3400EB5FCDC418819AF2C05076F02003A
Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36302e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 11 May 2026 02:53:06 +0000
ROA not before:           Mon 11 May 2026 02:48:06 +0000
ROA not after:            Mon 10 May 2027 02:53:06 +0000
asID:                     4808
IP address blocks:        103.76.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:86:4e:e3:40:0e:b5:fc:dc:41:88:19:af:2c:05:07:6f:02:00:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7
        Validity
            Not Before: May 11 02:48:06 2026 GMT
            Not After : May 10 02:53:06 2027 GMT
        Subject: CN=6AC88A7CCD800380219B14B7F2B189046407540B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:35:90:a1:f2:cd:bf:8b:ad:88:65:14:d0:
                    66:51:75:17:a8:fb:bf:80:f7:f0:a5:fc:60:db:d2:
                    20:8b:4f:23:2c:fa:76:81:91:9c:f3:a7:38:0f:1b:
                    97:e1:14:91:2d:cf:be:1d:0f:32:e1:7f:0a:45:2a:
                    22:bf:fd:cd:2c:d1:cc:4c:31:aa:c3:e8:5d:be:78:
                    58:aa:9a:cf:09:69:a9:dc:16:69:7f:de:39:c7:fc:
                    08:a1:e1:87:21:19:13:0b:f9:61:a7:c0:1f:9e:02:
                    3f:8a:b3:30:d2:77:6e:57:86:f7:1b:13:48:9e:68:
                    da:bc:73:1e:83:78:09:ab:50:e0:fe:f2:4e:15:fa:
                    65:c0:1f:6e:10:ab:d8:0c:10:e4:12:6c:75:20:9e:
                    35:ef:d6:ee:0a:e3:d5:33:fd:b9:0d:bb:38:6a:f0:
                    fb:6e:f8:e5:3e:79:45:14:7b:6a:f1:6f:25:f0:97:
                    0e:1c:20:be:c3:96:ca:fe:98:a7:43:b1:4b:3f:a4:
                    91:ea:71:f6:0b:0b:dc:26:0f:f4:c5:d4:af:30:4a:
                    19:07:21:1f:32:c8:df:69:64:a2:5f:b5:d0:f6:0d:
                    e5:58:82:53:ae:d7:c6:ef:04:ec:0b:05:a1:a6:3c:
                    a6:3d:f2:c8:a2:02:de:69:6d:f8:3e:cf:c9:35:71:
                    96:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C8:8A:7C:CD:80:03:80:21:9B:14:B7:F2:B1:89:04:64:07:54:0B
            X509v3 Authority Key Identifier:
                keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36302e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:3c:c2:75:a5:21:41:33:cc:77:c9:92:7c:3f:49:f2:b7:
         d2:d0:15:80:2b:26:60:10:db:83:b2:8d:0e:21:c8:0e:bb:27:
         b5:6e:e2:06:17:12:7d:db:e9:5e:2a:26:c8:3c:6c:2c:be:86:
         03:43:4e:28:2f:8b:c9:cf:dc:5f:a8:ff:20:33:65:0c:a1:a8:
         36:ed:3d:29:ea:8f:22:d3:61:ff:5e:56:b2:58:4e:39:f5:77:
         8f:75:21:21:09:1d:04:43:99:2a:dc:3b:6d:cf:c3:99:94:41:
         b2:d8:a0:3e:57:f6:b7:1f:7e:32:54:63:8c:cd:3a:bd:35:66:
         99:7a:3b:43:d8:fd:65:ba:bb:62:10:b0:ef:14:57:69:da:70:
         84:db:45:d1:10:ea:c4:31:7d:c0:11:24:d6:62:9b:e6:e6:a8:
         31:ca:b7:29:a2:41:11:1f:11:8a:72:c7:18:03:d4:b2:34:65:
         25:76:ba:f1:aa:21:3c:1b:95:40:19:c0:dd:d7:75:73:a9:7e:
         2f:2b:ad:32:8e:df:5c:9a:bd:d3:87:eb:de:cf:96:a2:47:3d:
         d2:3d:1f:6e:77:06:53:20:53:2f:72:d0:64:38:0a:b9:26:22:
         d6:09:a7:c5:22:80:3d:f3:c3:e8:8e:d2:54:fb:23:cb:79:76:
         fb:9c:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:10 2026 by rpki-client