Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36332e302f32342d3234203d3e20313334373731.roa
File:                     3130332e33362e36332e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier:          u7z58nWlWiDRubuwIx6Q3OblARyxG5pc0EGoNiPOh4I=
Subject key identifier:   17:3A:05:6D:3F:23:2E:FA:0B:A1:EA:48:34:1D:F6:F7:D5:91:B1:DC
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       579F08689BAB663225938B33018C7E12A7D7A1E9
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36332e302f32342d3234203d3e20313334373731.roa
Signing time:             Tue 21 Apr 2026 02:26:28 +0000
ROA not before:           Tue 21 Apr 2026 02:21:28 +0000
ROA not after:            Tue 20 Apr 2027 02:26:28 +0000
asID:                     134771
IP address blocks:        103.36.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9f:08:68:9b:ab:66:32:25:93:8b:33:01:8c:7e:12:a7:d7:a1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: Apr 21 02:21:28 2026 GMT
            Not After : Apr 20 02:26:28 2027 GMT
        Subject: CN=173A056D3F232EFA0BA1EA48341DF6F7D591B1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:e8:af:e0:51:33:27:cc:16:9d:df:8a:a8:
                    da:05:3a:5d:2a:8a:f2:df:0e:40:e7:47:c4:85:85:
                    a8:5d:c2:f9:a0:a6:d5:99:f1:a2:a8:ce:69:97:15:
                    e4:9f:93:13:09:47:70:a6:00:0f:d9:9f:83:e3:46:
                    81:bc:c1:42:46:bb:9c:b0:b2:ee:eb:27:22:c5:4f:
                    0c:c4:4b:a7:13:e4:48:dd:88:f1:5c:46:38:a1:d3:
                    bf:2e:42:6d:cf:eb:83:b4:d3:f8:fe:9e:10:b2:dc:
                    e9:e7:b6:8a:dc:6e:4b:07:35:fb:c2:6c:d3:29:91:
                    ad:22:ba:40:c9:e9:43:4f:09:03:11:56:d0:be:40:
                    71:11:6f:85:92:38:46:d5:08:55:bf:5b:1f:d7:b2:
                    9a:c7:ee:3b:7e:4f:b5:92:67:1a:f7:63:e4:3d:03:
                    58:01:35:6b:ee:5a:c2:37:f8:a2:a6:8a:7a:8f:1f:
                    84:e3:20:8d:5a:d1:9c:bc:56:e4:1e:63:7a:66:3a:
                    53:2b:b5:ea:13:2f:bf:1c:a5:9f:3a:70:84:3e:8f:
                    f9:aa:ce:a0:32:2e:bd:4e:3b:c6:ae:f2:47:fe:a0:
                    a1:54:aa:cc:f5:d3:e3:cb:17:07:db:6f:9a:2c:d1:
                    e6:b8:0f:5d:5c:8f:2a:3e:a1:6e:35:ef:cf:d0:93:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3A:05:6D:3F:23:2E:FA:0B:A1:EA:48:34:1D:F6:F7:D5:91:B1:DC
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36332e302f32342d3234203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:94:c9:f8:bf:b1:ba:d0:00:d1:b6:a5:67:37:b9:18:82:
         8c:4f:0e:77:45:ed:b6:62:4d:81:9e:b0:92:7f:ea:f8:ee:29:
         b0:bd:74:51:cb:d9:8f:68:0b:e0:1d:88:1c:de:dc:fe:4d:f0:
         8d:fd:6a:e0:95:0a:d0:2f:f0:33:0d:78:ba:0e:56:d6:4f:48:
         c8:60:48:9c:f2:04:34:c3:61:6e:e2:98:56:b6:8c:33:d5:f0:
         ee:86:d1:0d:db:18:1c:5b:a3:a8:da:8f:99:7e:8e:d4:78:7b:
         6c:df:57:a0:b1:1f:88:f7:06:ec:bb:27:e1:62:5d:0c:72:21:
         21:05:52:58:d9:3a:c3:2c:9a:88:d5:95:46:9c:de:e5:11:49:
         26:1c:df:70:d7:a9:17:13:3e:73:5b:36:13:88:44:73:00:21:
         fe:cf:72:7b:f2:08:c2:41:f8:71:b5:35:27:c6:11:cc:bd:ce:
         25:a0:45:ef:e9:32:20:74:a7:df:d4:20:17:af:53:9e:73:e3:
         53:0d:3e:3d:fa:ec:54:5c:47:03:4b:95:1e:f2:86:a5:e1:fc:
         da:c4:6c:d2:1f:9a:1e:6e:33:9c:64:fa:bb:3e:a1:fe:75:f2:
         14:05:42:33:7a:5a:d7:32:0e:44:36:ff:af:6f:e2:a8:c2:c5:
         5a:79:51:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:31 2026 by rpki-client