Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136312e302f32342d3234203d3e2030.roa
File:                     3130332e33362e3136312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=
Subject key identifier:   2D:57:95:98:AF:78:C5:DF:E2:70:10:6C:79:C3:72:0E:2E:95:47:B7
Certificate issuer:       /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
Certificate serial:       6FFEFFEB240AACF73BB01DAF9D93322113FB64F9
Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136312e302f32342d3234203d3e2030.roa
Signing time:             Tue 12 May 2026 01:55:19 +0000
ROA not before:           Tue 12 May 2026 01:50:19 +0000
ROA not after:            Tue 11 May 2027 01:55:19 +0000
asID:                     0
IP address blocks:        103.36.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fe:ff:eb:24:0a:ac:f7:3b:b0:1d:af:9d:93:32:21:13:fb:64:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727
        Validity
            Not Before: May 12 01:50:19 2026 GMT
            Not After : May 11 01:55:19 2027 GMT
        Subject: CN=2D579598AF78C5DFE270106C79C3720E2E9547B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:dd:b7:a6:6c:74:49:ed:d7:2f:ea:af:2a:
                    20:48:4a:71:46:62:ce:30:9e:9e:24:e0:76:47:9b:
                    b8:fb:39:38:6c:b4:50:8b:d9:3c:1e:9f:b2:ee:ee:
                    c5:3c:68:de:36:d3:c5:1e:74:d4:0e:ab:c4:41:d8:
                    45:d3:a5:79:ea:fe:3f:9f:3b:f3:b2:4d:27:9f:ec:
                    03:18:c8:1e:8c:59:2f:ba:ac:89:1e:8c:7c:39:38:
                    8b:dc:ec:68:d6:9d:fe:38:32:ef:6e:35:c4:06:56:
                    19:13:21:a6:a9:fe:d3:2a:ce:eb:2e:06:56:b7:6d:
                    76:f0:47:19:75:b9:68:95:c0:b4:70:3b:30:63:27:
                    0a:aa:90:52:5b:3c:5b:49:76:dd:66:30:8c:74:bb:
                    75:ed:04:9d:0f:78:28:bb:4b:70:aa:85:3b:59:82:
                    1b:dc:6e:9a:56:07:fd:cd:8a:79:2b:e3:7f:c9:0a:
                    7c:fe:66:2b:50:58:50:88:39:78:40:fd:a2:c8:bb:
                    4a:87:cb:13:47:d1:a7:b9:b5:ea:7a:6b:a8:61:46:
                    00:43:d8:59:6b:00:f1:db:e5:8f:8a:74:40:ad:09:
                    74:e4:00:77:d1:e3:e9:ea:f0:cf:8c:c3:16:d5:0b:
                    a5:6b:4a:41:c0:9c:30:5a:64:5c:21:9d:2f:aa:8a:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:95:98:AF:78:C5:DF:E2:70:10:6C:79:C3:72:0E:2E:95:47:B7
            X509v3 Authority Key Identifier:
                keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/3130332e33362e3136312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:7b:a8:df:4b:7c:06:3c:69:52:4c:b1:ac:f0:09:1b:09:
         3a:8e:e9:af:1f:01:c1:96:7c:12:d2:67:6d:5f:a3:1b:9c:e1:
         7b:4c:30:a6:7f:69:96:42:9b:8f:72:a3:28:50:9f:c3:98:39:
         fd:f0:65:06:97:87:94:83:6f:33:bf:6b:0e:46:61:92:3f:3a:
         e4:50:2e:b8:66:a8:2a:0a:3f:d2:c1:f4:aa:cd:96:5d:29:e0:
         74:ca:9c:8d:e0:2d:4f:55:4d:d7:a0:32:65:76:9a:f7:c9:eb:
         7c:b1:20:ae:8c:c6:89:54:6e:7b:97:4a:2a:b2:07:bc:9d:68:
         d8:b9:44:74:34:e7:33:a5:04:45:22:b3:a9:84:20:79:7f:e9:
         30:a1:0d:b4:91:96:09:cf:60:62:17:af:67:13:74:92:9e:27:
         4b:79:aa:6a:5d:df:a8:1f:d5:97:ab:eb:11:e0:d9:4d:2f:23:
         cd:29:6d:ab:00:4d:07:59:69:f6:6f:69:e5:ee:0f:20:68:a7:
         78:00:0c:05:14:ce:bd:3f:5f:39:fe:3a:da:f8:c8:8c:3a:67:
         92:a5:ab:53:75:c6:71:2d:cc:07:20:12:91:94:fe:d1:dd:52:
         02:d4:8f:7f:bc:b6:70:39:63:09:51:56:a7:bb:68:52:25:5d:
         57:6d:03:59
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUb/7/6yQKrPc7sB2vnZMyIRP7ZPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy
Q0FBRjcyNzAeFw0yNjA1MTIwMTUwMTlaFw0yNzA1MTEwMTU1MTlaMDMxMTAvBgNV
BAMTKDJENTc5NTk4QUY3OEM1REZFMjcwMTA2Qzc5QzM3MjBFMkU5NTQ3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHt23pmx0Se3XL+qvKiBISnFG
Ys4wnp4k4HZHm7j7OThstFCL2Twen7Lu7sU8aN4208UedNQOq8RB2EXTpXnq/j+f
O/OyTSef7AMYyB6MWS+6rIkejHw5OIvc7GjWnf44Mu9uNcQGVhkTIaap/tMqzusu
Bla3bXbwRxl1uWiVwLRwOzBjJwqqkFJbPFtJdt1mMIx0u3XtBJ0PeCi7S3CqhTtZ
ghvcbppWB/3Ninkr43/JCnz+ZitQWFCIOXhA/aLIu0qHyxNH0ae5tep6a6hhRgBD
2FlrAPHb5Y+KdECtCXTkAHfR4+nq8M+MwxbVC6VrSkHAnDBaZFwhnS+qit8VAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQULVeVmK94xd/icBBsecNyDi6VR7cwHwYDVR0j
BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG
MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MjUwODg2Mzg2MDg5OTg3LzAvMzEzMDMzMmUzMzM2
MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGck
oTANBgkqhkiG9w0BAQsFAAOCAQEAcqB7qN9LfAY8aVJMsazwCRsJOo7prx8BwZZ8
EtJnbV+jG5zhe0wwpn9plkKbj3KjKFCfw5g5/fBlBpeHlINvM79rDkZhkj865FAu
uGaoKgo/0sH0qs2WXSngdMqcjeAtT1VN16AyZXaa98nrfLEgrozGiVRue5dKKrIH
vJ1o2LlEdDTnM6UERSKzqYQgeX/pMKENtJGWCc9gYhevZxN0kp4nS3mqal3fqB/V
l6vrEeDZTS8jzSltqwBNB1lp9m9p5e4PIGineAAMBRTOvT9fOf462vjIjDpnkqWr
U3XGcS3MByASkZT+0d1SAtSPf7y2cDljCVFWp7toUiVdV20DWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:15:17 2026 by rpki-client