Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36322e302f32342d3234203d3e2034383038.roa
File:                     3130332e37362e36322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=
Subject key identifier:   FF:87:81:F4:6B:2B:C6:FB:BF:AA:71:22:4C:BE:A7:37:A0:79:97:66
Certificate issuer:       /CN=C979A435EE505D2600A38B057A1D127AADD915A7
Certificate serial:       45512FB4CD1A7D9E1F646F45AC24CB0BD85F415C
Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36322e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 11 May 2026 02:53:07 +0000
ROA not before:           Mon 11 May 2026 02:48:07 +0000
ROA not after:            Mon 10 May 2027 02:53:07 +0000
asID:                     4808
IP address blocks:        103.76.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:51:2f:b4:cd:1a:7d:9e:1f:64:6f:45:ac:24:cb:0b:d8:5f:41:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7
        Validity
            Not Before: May 11 02:48:07 2026 GMT
            Not After : May 10 02:53:07 2027 GMT
        Subject: CN=FF8781F46B2BC6FBBFAA71224CBEA737A0799766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:71:25:4e:8b:f6:de:69:f0:4f:bc:83:62:
                    d7:f5:3a:ce:90:1c:ee:37:10:66:4a:4a:5d:47:a2:
                    33:d4:0a:3a:c8:fb:a0:ee:04:1b:ba:d4:34:57:84:
                    ce:76:19:1d:a4:cf:8e:81:87:ec:dc:38:d8:5b:ef:
                    e2:6a:fe:cc:30:b3:06:97:04:e4:08:10:1d:96:40:
                    30:0b:d5:a3:bc:82:87:a4:d1:3f:4f:e8:5c:3b:cd:
                    46:36:83:53:96:f8:3c:a6:ff:47:62:b0:0b:3a:b7:
                    6a:c5:65:e7:e8:5f:3a:09:bc:4e:b5:67:77:8f:a0:
                    2b:fd:78:8f:4a:18:3c:45:c2:a1:4d:2b:20:78:ae:
                    2d:d2:c2:3f:80:a0:a1:42:28:91:01:cc:e4:ad:8a:
                    8d:c4:6b:9a:be:0b:5a:12:04:ed:2d:3d:2c:ef:65:
                    b1:e0:23:a4:da:ef:27:f6:e3:2f:42:f5:ae:b7:d9:
                    6d:59:df:30:df:7b:82:44:97:55:f8:a2:ee:85:60:
                    9e:53:94:ce:96:24:20:f7:94:12:2c:34:6d:0a:44:
                    db:d7:64:63:20:00:79:8b:48:fd:db:7a:7b:d3:01:
                    3e:28:fc:0c:23:e8:3d:4f:e9:47:7f:35:d0:f0:3a:
                    1a:28:07:c9:41:db:25:38:56:03:11:55:66:19:c1:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:81:F4:6B:2B:C6:FB:BF:AA:71:22:4C:BE:A7:37:A0:79:97:66
            X509v3 Authority Key Identifier:
                keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/3130332e37362e36322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:ca:5a:95:5b:82:94:0d:dc:a3:0a:05:ab:7e:b2:fe:88:
         1c:88:91:69:a4:44:9f:09:7d:4d:28:09:f3:14:67:f4:5b:7f:
         81:6c:24:9e:56:ba:a1:6c:e2:00:1f:ff:b6:2c:9e:d8:7c:10:
         8d:9f:e1:e2:22:7b:8a:d1:9c:c7:5b:c9:e5:dd:4d:a4:d8:e8:
         77:7d:2f:a3:3c:4f:f9:79:50:f5:a8:01:a1:e1:4e:46:1e:ee:
         60:f9:cd:0b:5c:2e:30:cb:25:02:ff:27:af:3e:92:bf:20:40:
         3c:c3:27:8e:92:dd:17:45:b2:c0:83:0a:26:05:2c:d8:8f:7b:
         c3:0f:20:36:6d:7c:3a:a3:30:67:1a:fd:60:56:dc:be:8a:f0:
         9a:c0:08:ac:a9:66:e8:db:6f:c8:3b:6b:2c:01:f7:ff:f9:2a:
         cf:49:43:0d:01:9d:65:a0:b3:a4:fc:7f:a0:6e:bc:2a:4c:b6:
         6a:33:28:ef:24:a1:e1:77:ab:12:d4:86:f9:0b:72:a8:a9:3c:
         b4:4c:36:33:5e:4f:26:0e:5d:ea:45:fa:a3:51:de:b8:41:37:
         49:ba:33:2c:ae:88:1c:67:80:ea:4c:ae:23:27:72:14:40:0b:
         b8:6b:48:b3:6e:ae:37:d2:60:45:93:0c:93:e6:80:1d:fa:28:
         55:6e:fc:c8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIURVEvtM0afZ4fZG9FrCTLC9hfQVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB
REQ5MTVBNzAeFw0yNjA1MTEwMjQ4MDdaFw0yNzA1MTAwMjUzMDdaMDMxMTAvBgNV
BAMTKEZGODc4MUY0NkIyQkM2RkJCRkFBNzEyMjRDQkVBNzM3QTA3OTk3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6XElTov23mnwT7yDYtf1Os6Q
HO43EGZKSl1HojPUCjrI+6DuBBu61DRXhM52GR2kz46Bh+zcONhb7+Jq/swwswaX
BOQIEB2WQDAL1aO8goek0T9P6Fw7zUY2g1OW+Dym/0disAs6t2rFZefoXzoJvE61
Z3ePoCv9eI9KGDxFwqFNKyB4ri3Swj+AoKFCKJEBzOStio3Ea5q+C1oSBO0tPSzv
ZbHgI6Ta7yf24y9C9a632W1Z3zDfe4JEl1X4ou6FYJ5TlM6WJCD3lBIsNG0KRNvX
ZGMgAHmLSP3benvTAT4o/Awj6D1P6Ud/NdDwOhooB8lB2yU4VgMRVWYZwXDtAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU/4eB9Gsrxvu/qnEiTL6nN6B5l2YwHwYDVR0j
BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx
MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MDAyNzE4MTcyMDUzNTA1LzAvMzEzMDMzMmUzNzM2
MmUzNjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnTD4wDQYJKoZIhvcNAQELBQADggEBAI65ylqVW4KUDdyjCgWrfrL+iByIkWmk
RJ8JfU0oCfMUZ/Rbf4FsJJ5WuqFs4gAf/7Ysnth8EI2f4eIie4rRnMdbyeXdTaTY
6Hd9L6M8T/l5UPWoAaHhTkYe7mD5zQtcLjDLJQL/J68+kr8gQDzDJ46S3RdFssCD
CiYFLNiPe8MPIDZtfDqjMGca/WBW3L6K8JrACKypZujbb8g7aywB9//5Ks9JQw0B
nWWgs6T8f6BuvCpMtmozKO8koeF3qxLUhvkLcqipPLRMNjNeTyYOXepF+qNR3rhB
N0m6MyyuiBxngOpMriMnchRAC7hrSLNurjfSYEWTDJPmgB36KFVu/Mg=
-----END CERTIFICATE-----
Generated at Wed May 13 10:29:53 2026 by rpki-client