Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32332d3233203d3e203535393934.roa
File:                     3130332e33362e3137322e302f32332d3233203d3e203535393934.roa (raw, json)
Hash identifier:          sE9x552WaMVIN9qZcVAdCkesy5eyjevIZfes/5PPpDU=
Subject key identifier:   6F:B0:9F:22:F5:96:C6:80:BF:6F:B3:2C:E6:55:0A:80:6E:7C:9C:0D
Certificate issuer:       /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial:       564198DFF86A4B74192882969C98ED3BBF63E827
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32332d3233203d3e203535393934.roa
Signing time:             Fri 17 Apr 2026 09:31:19 +0000
ROA not before:           Fri 17 Apr 2026 09:26:19 +0000
ROA not after:            Fri 16 Apr 2027 09:31:19 +0000
asID:                     55994
IP address blocks:        103.36.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:41:98:df:f8:6a:4b:74:19:28:82:96:9c:98:ed:3b:bf:63:e8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
        Validity
            Not Before: Apr 17 09:26:19 2026 GMT
            Not After : Apr 16 09:31:19 2027 GMT
        Subject: CN=6FB09F22F596C680BF6FB32CE6550A806E7C9C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:b4:6f:9c:b5:05:d1:10:69:a3:8d:00:40:
                    cc:6d:39:2a:8e:b1:45:95:c0:bb:fe:4a:55:19:56:
                    b9:68:99:3a:50:03:17:bc:c6:cf:a1:38:64:9a:24:
                    77:ff:e9:65:70:a8:3f:9d:ef:a0:ff:8e:08:29:ec:
                    f3:9b:09:69:ad:68:4f:95:4e:50:1a:40:b2:06:30:
                    63:57:38:66:fb:5c:9a:65:f6:8f:a1:c5:fd:d8:c1:
                    1c:a2:66:88:17:42:51:07:3e:d6:f7:90:fc:17:bd:
                    4e:81:84:45:10:0c:fe:3c:8e:27:3f:52:74:1c:f0:
                    be:83:46:08:36:b8:27:be:0a:4b:66:06:63:3f:9e:
                    bb:2b:44:74:20:6a:0c:46:96:57:d8:3e:97:37:84:
                    be:c9:21:8f:6d:5c:e5:b3:1b:be:82:f5:39:d7:b3:
                    9e:4e:b4:71:7b:de:b4:d1:26:3a:e3:0c:86:55:3d:
                    de:36:b1:41:7e:bc:5f:b0:f2:c6:f9:2e:73:e0:fa:
                    0f:0e:87:57:00:ce:ef:a4:7e:86:e5:2b:fb:b3:5e:
                    21:c4:0b:3b:c8:64:e1:df:3e:f8:bd:b4:bb:c0:6b:
                    8f:b8:e9:db:e3:1c:b1:b5:08:ea:0f:f4:74:97:1b:
                    0e:3a:71:08:da:39:08:86:7a:40:ba:d6:c1:fd:fd:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:9F:22:F5:96:C6:80:BF:6F:B3:2C:E6:55:0A:80:6E:7C:9C:0D
            X509v3 Authority Key Identifier:
                keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32332d3233203d3e203535393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:fe:4e:7c:05:f3:4a:e2:bd:3a:c4:9b:aa:f3:ac:c5:f6:
         c0:52:4a:ed:c2:19:8f:84:6b:61:14:49:2c:c7:01:09:75:7f:
         02:da:4e:17:02:a6:39:6d:6c:b3:8b:16:4f:9a:41:69:01:d7:
         18:ad:69:76:6d:95:39:83:42:13:e3:ef:ca:43:77:23:3f:9f:
         b4:bc:64:51:a4:53:55:ba:cd:b2:d3:d3:d7:2d:0a:cb:dd:df:
         40:0e:0f:44:28:03:36:a8:2f:d1:d3:14:99:06:0f:1d:b7:ed:
         24:63:70:f7:cb:0f:1a:1d:5e:45:98:d4:33:52:85:d4:8a:7c:
         00:c9:7d:e1:61:85:65:b4:a5:6c:a3:f5:e7:57:0e:59:64:d7:
         2a:70:49:a8:95:75:74:ab:ad:b4:08:30:ed:7e:fb:6d:60:a8:
         ce:b2:88:85:e7:c0:c5:27:bc:aa:a0:b9:42:ef:4a:b5:2f:26:
         5d:66:b2:37:2c:23:d3:76:5f:83:09:6e:d3:e9:6a:43:94:e7:
         2b:d5:7b:9e:b7:06:76:0f:6d:21:a0:35:73:e5:71:d9:6a:d7:
         f7:c0:2d:1f:2c:e0:23:84:80:1d:cd:8e:26:b8:d5:01:71:c0:
         ac:b5:6f:a9:9c:44:73:76:1d:fc:55:ec:6f:5c:9d:d4:ee:a6:
         fb:86:25:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:52:22 2026 by rpki-client