Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa
File:                     3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=
Subject key identifier:   31:AF:0E:0E:16:CE:62:2D:1B:EC:B3:98:E7:50:00:A6:CF:8D:80:DD
Certificate issuer:       /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial:       E15338AA4D586AC18CC2D3416679CCCB50818E
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 07:29:25 +0000
ROA not before:           Tue 14 Apr 2026 07:24:25 +0000
ROA not after:            Tue 13 Apr 2027 07:29:25 +0000
asID:                     56046
IP address blocks:        203.135.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e1:53:38:aa:4d:58:6a:c1:8c:c2:d3:41:66:79:cc:cb:50:81:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
        Validity
            Not Before: Apr 14 07:24:25 2026 GMT
            Not After : Apr 13 07:29:25 2027 GMT
        Subject: CN=31AF0E0E16CE622D1BECB398E75000A6CF8D80DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:70:8a:e3:ca:41:52:cb:7f:2b:53:60:a8:
                    a1:dc:37:58:4d:e7:f6:ef:15:30:c3:b0:23:25:09:
                    12:b3:36:b2:a6:5f:94:11:b2:91:e5:d9:d1:2c:b4:
                    70:e8:18:99:c7:0b:f4:6e:f5:f3:25:07:c8:93:29:
                    91:4c:e8:7d:d1:f8:e0:fd:5d:36:92:ff:1c:7d:06:
                    31:98:65:3c:a6:53:fb:3a:84:48:97:c4:f2:13:c6:
                    08:51:a9:d5:6f:cc:0f:fd:0d:0d:e4:fe:ad:a8:5f:
                    b8:6f:ad:72:df:ca:80:3e:1f:6b:68:6c:ce:f8:53:
                    e5:f6:5d:57:e8:cf:eb:62:89:07:53:6f:cc:e1:25:
                    e5:4a:d7:0f:59:26:65:03:db:25:71:9e:e7:82:af:
                    0a:b6:b7:14:6a:1c:03:0f:53:9e:47:95:99:00:8d:
                    fd:71:4d:1b:f5:f8:e1:e5:c6:f8:ce:78:86:fc:11:
                    a1:4e:35:bd:00:46:8d:43:1d:5f:96:d2:be:44:e5:
                    53:b7:70:87:c7:ec:f7:f3:a7:13:5a:9d:d8:7e:e6:
                    ec:71:06:ae:f3:87:bb:cc:42:e5:da:07:c4:39:7a:
                    57:53:7a:f0:93:fb:64:3e:7e:e9:78:97:aa:0c:d5:
                    61:df:eb:6e:78:7a:95:64:cc:8a:86:dc:69:a2:e7:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:0E:0E:16:CE:62:2D:1B:EC:B3:98:E7:50:00:A6:CF:8D:80:DD
            X509v3 Authority Key Identifier:
                keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:b8:eb:8c:83:b9:6e:a1:f4:84:04:38:e7:ce:a3:13:7c:8c:
         78:75:45:8e:6e:4d:40:4f:af:a6:2e:10:90:2a:5e:21:d2:d8:
         00:aa:76:3a:03:8d:3b:ff:ac:60:e0:49:56:fa:2e:42:5a:76:
         ea:18:9a:22:7e:73:5e:42:10:54:75:ef:80:a4:77:f5:e1:e9:
         e1:c1:18:21:de:75:42:e3:e1:bf:9f:16:bb:ec:1c:24:78:25:
         6c:f3:16:a7:08:15:1a:76:a8:2c:bb:6f:6e:24:e8:7f:23:c8:
         1d:57:b2:33:ff:f7:64:64:44:29:8d:23:6a:56:48:d0:7b:1a:
         da:5b:f7:93:b4:1f:d5:4c:35:7d:ff:12:4a:07:d6:e7:de:f9:
         08:e8:68:25:93:16:ff:f8:2e:1c:e0:e7:49:9e:4f:49:cc:a3:
         d2:30:3c:97:2d:9b:39:42:bf:45:56:f4:24:df:22:07:26:14:
         da:84:c7:6b:bc:49:85:61:d7:e3:cc:85:cc:48:88:87:41:8c:
         54:2f:85:b4:e1:21:81:fc:17:d8:7d:86:74:b9:16:28:62:00:
         c3:69:1c:fd:21:22:08:53:88:21:eb:94:2b:b8:51:1d:6a:af:
         bc:60:c9:2e:b6:80:a6:7a:cb:ca:89:b0:ec:af:72:76:83:99:
         8f:d9:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:24 2026 by rpki-client