Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136302e302f32342d3234203d3e2030.roa
File:                     3130332e33362e3136302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=
Subject key identifier:   D5:2E:87:64:E7:36:DF:E2:D1:45:6D:65:14:75:FF:FF:7F:E2:EB:95
Certificate issuer:       /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial:       77604B14C6186D40FD78147282450A3D208F3020
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136302e302f32342d3234203d3e2030.roa
Signing time:             Tue 12 May 2026 01:55:19 +0000
ROA not before:           Tue 12 May 2026 01:50:19 +0000
ROA not after:            Tue 11 May 2027 01:55:19 +0000
asID:                     0
IP address blocks:        103.36.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:60:4b:14:c6:18:6d:40:fd:78:14:72:82:45:0a:3d:20:8f:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
        Validity
            Not Before: May 12 01:50:19 2026 GMT
            Not After : May 11 01:55:19 2027 GMT
        Subject: CN=D52E8764E736DFE2D1456D651475FFFF7FE2EB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e3:54:9a:41:a1:e6:02:03:aa:35:cc:18:50:
                    44:03:db:6e:43:98:94:cd:cc:83:57:b2:49:b1:aa:
                    c7:5a:1b:42:b1:ef:7c:d7:d7:66:1a:0a:ef:9e:9c:
                    d5:9b:19:96:f2:c2:b2:20:5a:65:c4:a7:70:80:fa:
                    8c:5f:b2:89:ae:90:45:12:b3:59:99:81:5b:93:b7:
                    c4:4a:d3:be:91:7f:13:23:15:4c:d8:bd:63:1f:68:
                    29:a2:50:31:10:e5:f9:6e:d3:fd:f0:3f:34:55:b5:
                    99:c1:00:2a:28:b4:18:4a:88:ae:94:37:d7:a0:1e:
                    a0:73:db:ed:4b:80:cc:34:d4:0a:ca:8f:06:e4:04:
                    40:d7:61:3f:d6:62:3a:27:7d:17:36:4b:d4:0f:38:
                    d0:d4:c7:7d:28:7e:be:47:18:13:22:ff:c9:aa:29:
                    78:59:9b:c0:1b:93:f5:3f:b1:61:9e:b9:70:a6:7a:
                    80:81:e6:7d:ee:95:6e:8c:9a:71:d9:04:79:95:e3:
                    2e:d0:b4:de:53:db:41:82:65:01:5d:6b:8e:d9:57:
                    02:25:e7:51:03:a8:62:40:4a:b2:7d:29:1c:8d:9f:
                    5d:3a:62:c3:1e:db:f0:e8:39:96:3f:65:31:58:5f:
                    15:03:05:35:cc:28:8a:5f:31:e1:e1:1b:0a:da:3c:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2E:87:64:E7:36:DF:E2:D1:45:6D:65:14:75:FF:FF:7F:E2:EB:95
            X509v3 Authority Key Identifier:
                keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:53:52:f5:a1:7b:a7:ee:be:9f:c2:dc:dd:01:fd:74:38:07:
         f3:d8:4b:b2:21:4a:2f:57:84:82:4f:e7:df:87:03:af:78:15:
         e1:89:07:7f:23:84:06:c5:1d:10:fc:ef:0e:17:a6:0d:30:5f:
         b5:fe:95:0f:ea:05:6c:20:20:c2:3c:cc:9a:97:8c:bd:a2:fb:
         f1:33:23:a6:f2:4b:06:14:56:cb:ee:63:30:b3:86:fe:8f:a1:
         9e:d5:42:43:09:65:4e:96:8d:2d:f2:f4:88:5d:20:d0:58:ae:
         e7:ca:67:82:a8:cb:3e:65:fe:ce:7d:e0:20:a7:a1:12:b9:01:
         74:d5:4d:75:df:03:30:bb:be:a8:8b:93:38:76:43:01:d4:d9:
         9f:76:8d:32:0c:ac:c0:6b:36:1b:85:98:1e:cf:29:7b:03:7e:
         b4:00:cb:67:5e:88:bb:db:14:57:80:70:0a:ad:67:c2:d2:e7:
         65:00:0a:a2:31:81:fc:1d:12:34:81:0c:0a:0a:b4:3d:5a:1e:
         62:27:b1:dd:7c:5c:6d:54:09:91:81:16:e9:3c:34:49:c3:83:
         ac:5b:62:8d:3f:eb:36:54:fd:a4:c5:9d:a5:2e:2b:83:e0:91:
         9f:33:00:da:5e:86:b2:b5:fd:70:fe:63:f6:d2:71:2f:4d:05:
         74:af:49:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:51 2026 by rpki-client