Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/3130332e3130302e36392e302f32342d3234203d3e203334383036.roa
File:                     3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (raw, json)
Hash identifier:          YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=
Subject key identifier:   62:25:45:A0:9B:EB:7E:66:13:D2:E7:BC:74:3D:5E:C6:11:35:6C:E4
Certificate issuer:       /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
Certificate serial:       7AC08F576870B169D2EEA94CFDD97050A45F5013
Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/3130332e3130302e36392e302f32342d3234203d3e203334383036.roa
Signing time:             Wed 15 Apr 2026 08:25:29 +0000
ROA not before:           Wed 15 Apr 2026 08:20:29 +0000
ROA not after:            Wed 14 Apr 2027 08:25:29 +0000
asID:                     34806
IP address blocks:        103.100.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c0:8f:57:68:70:b1:69:d2:ee:a9:4c:fd:d9:70:50:a4:5f:50:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
        Validity
            Not Before: Apr 15 08:20:29 2026 GMT
            Not After : Apr 14 08:25:29 2027 GMT
        Subject: CN=622545A09BEB7E6613D2E7BC743D5EC611356CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:88:7e:a2:d3:bc:bc:79:f9:00:19:52:ae:
                    d3:ca:76:dc:0c:d4:fb:d3:5c:40:78:0a:03:d1:92:
                    67:18:9a:cc:36:e1:66:91:07:e9:00:f3:2e:92:46:
                    b0:4b:7b:34:5e:ae:d9:ba:69:f4:b3:da:8a:56:35:
                    4e:de:08:84:34:a2:66:4d:29:74:d2:7f:fd:6a:77:
                    3e:6e:ed:96:0a:7a:34:cb:b3:7a:e1:eb:15:f5:b4:
                    67:98:52:c7:85:16:ef:5a:5c:ac:4f:52:01:34:eb:
                    bb:70:4f:08:d7:b7:47:31:87:85:49:b1:1c:5f:5b:
                    1e:6c:00:47:54:bc:7d:ff:87:01:03:ff:e6:9d:6e:
                    5d:04:71:36:48:68:94:bc:b5:5a:aa:1e:96:16:0b:
                    8a:4e:51:47:41:26:13:f7:9d:28:a7:71:b5:4f:7a:
                    e1:25:b4:b1:2e:30:00:f9:97:f4:21:c5:37:79:d7:
                    5b:c5:c4:a6:32:d5:55:b8:ee:0f:32:8b:00:36:0a:
                    f2:ab:d3:78:81:6d:9b:f1:a0:f0:51:c2:25:ab:8c:
                    32:07:5b:a6:3b:34:be:00:24:f8:54:ab:8b:84:89:
                    d6:5a:2a:ee:14:45:be:05:b2:be:f9:1a:19:73:84:
                    b8:8d:5a:f8:de:ea:6c:23:e8:5c:1d:48:da:75:18:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:25:45:A0:9B:EB:7E:66:13:D2:E7:BC:74:3D:5E:C6:11:35:6C:E4
            X509v3 Authority Key Identifier:
                keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/3130332e3130302e36392e302f32342d3234203d3e203334383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f1:90:2b:a7:5b:8f:79:84:f5:e3:3c:fd:c4:ca:9e:7d:3a:
         b6:56:c7:e0:d1:19:52:88:e7:07:71:f1:bd:f9:d6:71:c2:e5:
         c9:c0:7d:a9:ab:ee:77:14:14:43:9c:f2:bf:7a:89:62:d5:bc:
         ba:d2:9f:79:32:73:fe:d1:98:10:34:cb:99:ca:d7:28:f6:ec:
         f9:76:8a:f7:cd:65:9d:9f:6f:e4:9f:27:fe:e9:e2:97:29:98:
         d1:36:05:eb:0f:c2:54:ae:8c:95:21:88:99:23:1f:d1:1f:8e:
         52:9e:5e:ea:6a:2a:c6:f9:bd:88:20:64:63:e3:24:a0:fc:14:
         a6:5a:ba:5e:4f:8a:7c:9c:e6:cd:8e:c8:26:51:5f:5d:8e:ea:
         ce:ba:c1:34:3e:c2:09:9e:d4:cd:33:22:8f:00:39:cf:86:a8:
         48:80:09:5c:b2:13:23:b6:53:f3:34:48:32:b7:bb:7e:5b:8a:
         29:46:e4:0e:ff:0b:4b:73:06:ff:d8:17:0d:5e:21:f0:6b:f3:
         e8:07:39:83:92:4a:4d:1a:8b:28:3b:92:03:36:68:8a:14:b2:
         7c:d9:e8:f4:b7:f5:2e:26:c6:e3:04:36:55:ab:b9:da:e3:ba:
         a2:36:f8:7b:2f:61:5e:a7:05:a8:d4:4a:4e:c0:06:a4:92:21:
         9b:d4:04:e0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUesCPV2hwsWnS7qlM/dlwUKRfUBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG
RUIxRkZCMjAeFw0yNjA0MTUwODIwMjlaFw0yNzA0MTQwODI1MjlaMDMxMTAvBgNV
BAMTKDYyMjU0NUEwOUJFQjdFNjYxM0QyRTdCQzc0M0Q1RUM2MTEzNTZDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2Ih+otO8vHn5ABlSrtPKdtwM
1PvTXEB4CgPRkmcYmsw24WaRB+kA8y6SRrBLezRertm6afSz2opWNU7eCIQ0omZN
KXTSf/1qdz5u7ZYKejTLs3rh6xX1tGeYUseFFu9aXKxPUgE067twTwjXt0cxh4VJ
sRxfWx5sAEdUvH3/hwED/+adbl0EcTZIaJS8tVqqHpYWC4pOUUdBJhP3nSincbVP
euEltLEuMAD5l/QhxTd511vFxKYy1VW47g8yiwA2CvKr03iBbZvxoPBRwiWrjDIH
W6Y7NL4AJPhUq4uEidZaKu4URb4Fsr75GhlzhLiNWvje6mwj6FwdSNp1GE7DAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUYiVFoJvrfmYT0ue8dD1exhE1bOQwHwYDVR0j
BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG
REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjM3NDE2MjI2MTI3ODcyMy8wLzMxMzAzMzJlMzEz
MDMwMmUzNjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNDM4MzAzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGdkRTANBgkqhkiG9w0BAQsFAAOCAQEAMfGQK6dbj3mE9eM8/cTKnn06
tlbH4NEZUojnB3HxvfnWccLlycB9qavudxQUQ5zyv3qJYtW8utKfeTJz/tGYEDTL
mcrXKPbs+XaK981lnZ9v5J8n/unilymY0TYF6w/CVK6MlSGImSMf0R+OUp5e6moq
xvm9iCBkY+MkoPwUplq6Xk+KfJzmzY7IJlFfXY7qzrrBND7CCZ7UzTMijwA5z4ao
SIAJXLITI7ZT8zRIMre7fluKKUbkDv8LS3MG/9gXDV4h8Gvz6Ac5g5JKTRqLKDuS
AzZoihSyfNno9Lf1LibG4wQ2Vau52uO6ojb4ey9hXqcFqNRKTsAGpJIhm9QE4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:39 2026 by rpki-client