Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa
File:                     3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (raw, json)
Hash identifier:          RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=
Subject key identifier:   87:57:C6:9E:64:B7:3E:94:46:93:A4:35:47:73:9B:E7:76:3F:DD:EA
Certificate issuer:       /CN=7E97B2869243296A265D98767FC04F1998D143DE
Certificate serial:       593ADA6942F2C50694CFB7FB86B647A78553BE22
Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa
Signing time:             Mon 27 Apr 2026 05:16:20 +0000
ROA not before:           Mon 27 Apr 2026 05:11:20 +0000
ROA not after:            Mon 26 Apr 2027 05:16:20 +0000
asID:                     63696
IP address blocks:        103.233.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3a:da:69:42:f2:c5:06:94:cf:b7:fb:86:b6:47:a7:85:53:be:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE
        Validity
            Not Before: Apr 27 05:11:20 2026 GMT
            Not After : Apr 26 05:16:20 2027 GMT
        Subject: CN=8757C69E64B73E944693A43547739BE7763FDDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:e5:67:d2:c6:c2:c3:f0:c8:23:a7:a2:3c:
                    29:d7:7b:ea:af:1d:02:48:34:c0:6c:4a:59:57:cb:
                    70:f9:e8:a9:b6:2e:83:87:02:57:81:90:87:12:14:
                    43:08:2b:f0:95:61:1e:7f:a0:4f:c6:42:7a:c0:d1:
                    39:e3:d6:bf:30:eb:6b:e3:6f:93:2d:30:a0:7d:b1:
                    44:81:2a:8d:0b:e5:8b:c2:a4:94:d6:64:1b:4c:7f:
                    bb:16:0b:a9:0e:ab:98:fd:5f:6f:34:e6:58:c3:f4:
                    5a:8a:7e:b4:7c:c5:d3:c3:0c:65:bc:bb:18:3d:66:
                    d1:d4:0b:ca:3b:80:bb:77:d8:21:23:3e:e4:ea:fa:
                    5d:4d:e1:42:2a:a9:32:a4:bf:3e:41:b7:c4:60:aa:
                    ce:70:2a:a6:fc:79:18:cc:c7:b1:b2:11:03:8c:6c:
                    68:04:3d:fb:d9:78:82:f5:bc:25:a7:40:ac:c7:14:
                    ad:68:ca:8d:7f:45:e7:77:d5:1f:d7:ed:85:fb:1b:
                    e6:b2:26:84:a3:8f:db:02:48:35:bf:7b:11:06:9e:
                    5c:b0:80:26:e0:70:aa:d7:8b:a2:eb:31:55:e6:d0:
                    95:c1:0b:41:12:b3:98:4a:07:fc:a3:72:f0:1f:e7:
                    fb:d9:60:c5:50:99:a4:0b:f7:16:26:ab:20:13:09:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:57:C6:9E:64:B7:3E:94:46:93:A4:35:47:73:9B:E7:76:3F:DD:EA
            X509v3 Authority Key Identifier:
                keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:3c:57:41:54:78:9c:b4:9a:0d:04:b8:a9:15:8a:a4:4a:
         43:a5:48:23:da:59:61:2f:fa:7e:9f:7b:d1:a2:ab:e9:58:e7:
         50:71:bd:49:49:24:b4:7e:81:54:e6:7c:13:fd:12:e6:40:50:
         29:84:35:9f:8d:ff:b4:08:57:29:32:6e:8e:7c:e1:f2:4e:5c:
         86:e8:0a:f1:e7:9f:b3:d1:93:cc:92:42:da:42:31:1b:63:22:
         97:48:ea:43:91:6d:48:25:0d:c7:01:25:c6:92:09:c5:d8:73:
         5b:f4:3f:29:83:1f:75:c0:d3:6d:52:c8:45:43:5e:f3:7f:ae:
         8f:ad:ad:5b:55:75:d3:ad:d5:9d:ef:9f:ba:ab:0f:a2:75:8c:
         22:63:1b:39:ea:1d:cb:5b:31:dc:b0:2d:73:f9:72:c4:63:5d:
         76:03:b8:e4:b4:c9:53:c4:02:35:18:ee:85:49:cd:e5:7b:d7:
         cc:3f:92:2c:03:a2:69:9f:6d:e6:d6:82:fa:12:52:0b:6a:2f:
         41:79:37:a8:f0:b9:65:19:60:52:92:ea:be:2a:b2:a6:1e:a9:
         dd:2e:51:6f:8d:67:ae:03:b0:6e:5c:e5:b9:03:10:a5:3e:a4:
         9e:7a:9e:a3:1e:52:4e:79:7b:30:a3:7a:24:8b:93:b6:1b:6b:
         3c:8b:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:25 2026 by rpki-client