Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e203137363231.roa
File:                     3130332e33362e3137322e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          LHYhgSZyLjrc58V79HPcHuTkKSbhGHJw8r1SzKrrx4Y=
Subject key identifier:   62:EF:78:F2:56:22:C2:75:A7:26:12:EF:8E:8A:EE:8B:57:FB:38:08
Certificate issuer:       /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial:       4F0C26DAF1DE003E5A3CBF1568AD47FB40D87EB5
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e203137363231.roa
Signing time:             Fri 17 Apr 2026 09:31:20 +0000
ROA not before:           Fri 17 Apr 2026 09:26:20 +0000
ROA not after:            Fri 16 Apr 2027 09:31:20 +0000
asID:                     17621
IP address blocks:        103.36.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:26:da:f1:de:00:3e:5a:3c:bf:15:68:ad:47:fb:40:d8:7e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
        Validity
            Not Before: Apr 17 09:26:20 2026 GMT
            Not After : Apr 16 09:31:20 2027 GMT
        Subject: CN=62EF78F25622C275A72612EF8E8AEE8B57FB3808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:22:50:38:16:9f:df:30:39:31:d6:57:c0:
                    24:cc:c3:df:fd:7a:50:bc:d7:9d:8e:4b:90:b2:12:
                    2e:aa:6c:6b:10:1b:65:a3:8b:fa:3e:ae:3f:0c:19:
                    4b:9a:49:f5:81:5b:4e:3c:13:2f:86:81:3c:68:eb:
                    e6:b7:78:e9:f1:92:97:5f:bf:58:0a:d9:ee:92:4e:
                    8f:8e:0e:99:c7:4a:46:38:b6:15:01:d7:7b:dd:d3:
                    60:46:b3:05:78:65:76:9e:48:5b:b5:29:b0:73:a2:
                    d3:e2:7c:68:37:8a:32:24:bc:18:bd:30:33:57:73:
                    04:a5:45:88:11:60:59:a4:72:26:39:9f:3b:57:63:
                    50:4c:a5:d3:cd:73:19:36:d4:f9:43:4b:e8:68:6f:
                    91:72:64:a4:df:14:b7:dc:df:c4:e6:d5:1c:ee:1e:
                    da:8d:90:f8:b3:7a:30:42:77:fd:a5:54:e1:fb:92:
                    84:38:43:47:4c:db:34:96:cd:98:8b:c1:2d:12:3e:
                    ee:70:93:79:e5:e0:d2:72:ff:43:35:5e:9c:f6:85:
                    cb:18:ee:9c:e3:27:da:cd:06:b3:24:82:1b:e3:75:
                    fc:1f:5e:39:a2:f7:95:30:62:06:53:d5:e2:92:4d:
                    bc:14:35:d5:a5:16:5a:00:a9:fa:c3:a4:9a:4b:29:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:78:F2:56:22:C2:75:A7:26:12:EF:8E:8A:EE:8B:57:FB:38:08
            X509v3 Authority Key Identifier:
                keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137322e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:09:00:ef:b2:24:f4:ac:9e:f1:b1:d8:45:39:36:b3:b4:
         38:7c:7d:46:7e:e2:ed:a3:19:41:1b:3a:60:8a:b0:a3:6f:d2:
         85:9a:13:e7:9c:42:d8:9d:d5:2c:f9:c1:48:20:3f:be:20:8a:
         d3:52:20:39:cb:4d:65:f0:d3:b7:f2:05:ac:95:f9:58:20:b6:
         8c:ff:f7:34:79:05:a6:d0:0f:4e:9d:e9:2a:59:0a:c6:95:19:
         88:46:3e:fa:f4:d0:1d:1d:01:8b:b4:41:06:e5:c0:79:da:c8:
         e2:99:e2:51:3f:3d:e4:d5:ac:36:7a:3e:46:5c:8d:53:60:97:
         76:af:09:ed:1f:e2:e1:9e:97:d5:23:ba:4f:fd:8e:76:8f:28:
         b6:44:7d:17:d0:93:56:47:e0:5c:5b:14:2f:00:33:c1:f8:9d:
         55:76:eb:9a:a3:9d:68:c0:4c:0e:c2:4e:39:03:b0:16:94:ea:
         01:23:a9:1d:85:bf:a7:b3:95:b5:7b:11:ad:52:1a:4e:3a:c9:
         f0:12:f1:a8:de:2e:a1:c5:08:b1:e1:77:80:ef:d4:a0:9b:5c:
         59:c5:c1:2e:36:19:af:c1:a0:50:07:fc:ce:88:91:9e:21:dc:
         3e:ca:d5:76:e1:7f:e0:a4:d7:fb:21:2f:57:1d:61:8a:de:75:
         00:dd:e6:57
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUTwwm2vHeAD5aPL8VaK1H+0DYfrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy
MjEwNjQyNjAeFw0yNjA0MTcwOTI2MjBaFw0yNzA0MTYwOTMxMjBaMDMxMTAvBgNV
BAMTKDYyRUY3OEYyNTYyMkMyNzVBNzI2MTJFRjhFOEFFRThCNTdGQjM4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HyJQOBaf3zA5MdZXwCTMw9/9
elC8152OS5CyEi6qbGsQG2Wji/o+rj8MGUuaSfWBW048Ey+GgTxo6+a3eOnxkpdf
v1gK2e6STo+ODpnHSkY4thUB13vd02BGswV4ZXaeSFu1KbBzotPifGg3ijIkvBi9
MDNXcwSlRYgRYFmkciY5nztXY1BMpdPNcxk21PlDS+hob5FyZKTfFLfc38Tm1Rzu
HtqNkPizejBCd/2lVOH7koQ4Q0dM2zSWzZiLwS0SPu5wk3nl4NJy/0M1Xpz2hcsY
7pzjJ9rNBrMkghvjdfwfXjmi95UwYgZT1eKSTbwUNdWlFloAqfrDpJpLKcrjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUYu948lYiwnWnJhLvjorui1f7OAgwHwYDVR0j
BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx
QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjYzMjA2Mjk5NzE2ODEzMS8wLzMxMzAzMzJlMzMz
NjJlMzEzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGckrDANBgkqhkiG9w0BAQsFAAOCAQEABbAJAO+yJPSsnvGx2EU5NrO0
OHx9Rn7i7aMZQRs6YIqwo2/ShZoT55xC2J3VLPnBSCA/viCK01IgOctNZfDTt/IF
rJX5WCC2jP/3NHkFptAPTp3pKlkKxpUZiEY++vTQHR0Bi7RBBuXAedrI4pniUT89
5NWsNno+RlyNU2CXdq8J7R/i4Z6X1SO6T/2Odo8otkR9F9CTVkfgXFsULwAzwfid
VXbrmqOdaMBMDsJOOQOwFpTqASOpHYW/p7OVtXsRrVIaTjrJ8BLxqN4uocUIseF3
gO/UoJtcWcXBLjYZr8GgUAf8zoiRniHcPsrVduF/4KTX+yEvVx1hit51AN3mVw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:16 2026 by rpki-client