Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137332e302f32342d3234203d3e203137363231.roa
File:                     3130332e33362e3137332e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          derfRj7NRnj7kCTiU/IHNYQSOtVfz7Ok7HH+7Flb/+s=
Subject key identifier:   F1:16:44:98:21:50:A8:D3:AF:8F:D7:90:69:7A:0A:37:F8:EA:E8:47
Certificate issuer:       /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial:       457E92AB538D516D8D41183D69C6EB52A0E0A036
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137332e302f32342d3234203d3e203137363231.roa
Signing time:             Fri 17 Apr 2026 09:31:19 +0000
ROA not before:           Fri 17 Apr 2026 09:26:19 +0000
ROA not after:            Fri 16 Apr 2027 09:31:19 +0000
asID:                     17621
IP address blocks:        103.36.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7e:92:ab:53:8d:51:6d:8d:41:18:3d:69:c6:eb:52:a0:e0:a0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
        Validity
            Not Before: Apr 17 09:26:19 2026 GMT
            Not After : Apr 16 09:31:19 2027 GMT
        Subject: CN=F11644982150A8D3AF8FD790697A0A37F8EAE847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:5e:23:e2:27:57:a8:50:2d:dd:fd:bb:c2:
                    67:47:59:67:06:d0:04:4a:8b:b4:a0:56:a7:37:57:
                    8a:25:ca:ee:e3:3b:05:62:46:d9:fa:eb:d8:1c:ef:
                    2d:89:31:37:ab:9f:68:f6:65:a7:20:25:fe:a7:3c:
                    14:43:7c:84:ec:b3:d9:8f:5e:a0:36:b5:69:9a:b2:
                    fc:96:64:50:04:04:88:2e:63:74:fb:52:d4:b1:c2:
                    bb:2d:ec:98:39:da:7a:9d:ad:a2:c7:ff:18:67:66:
                    83:b7:c7:aa:46:2a:cb:6b:2a:0d:f6:cb:14:e3:44:
                    90:96:84:b7:25:ea:5f:02:ec:07:ee:52:65:88:9d:
                    76:c2:63:63:e1:2f:cf:79:2d:06:63:1b:58:11:23:
                    ba:60:24:56:8f:a0:cd:56:02:56:00:54:6d:b8:bc:
                    db:35:9c:68:ed:e0:ff:f3:0f:13:fa:da:06:ca:c1:
                    42:f1:da:cd:a8:c1:0e:1a:e7:80:59:cb:c7:4f:15:
                    53:bc:b3:bd:e8:c9:ea:8d:ac:b2:7f:3e:ee:cb:65:
                    7d:ca:9d:fa:99:86:67:39:c3:67:c6:00:bb:39:22:
                    bd:62:8b:8c:61:b5:18:ee:c3:d5:0f:13:3b:3c:cd:
                    8a:8f:5f:87:53:e8:c3:1b:00:12:c8:89:45:99:11:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:16:44:98:21:50:A8:D3:AF:8F:D7:90:69:7A:0A:37:F8:EA:E8:47
            X509v3 Authority Key Identifier:
                keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137332e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:3c:a9:cf:bb:64:8f:0e:d7:fc:7c:23:20:16:d8:14:3e:
         e2:bb:5a:89:4e:62:54:e1:e8:ed:49:7d:53:66:4c:16:0d:f4:
         0a:fa:1f:19:d4:cc:3c:aa:f7:94:a7:78:57:e3:7e:74:85:e3:
         d1:a0:50:f6:53:eb:10:4c:df:e0:35:30:49:9d:fa:29:7f:c5:
         9e:4f:53:77:65:ae:cb:19:91:1d:2e:da:c6:f8:44:81:10:b4:
         a3:89:ff:64:83:81:48:d6:43:47:13:0d:bd:19:0f:16:76:78:
         6c:34:41:79:c9:dd:78:50:36:9b:15:ef:39:9d:a5:fa:5d:94:
         14:84:7b:b8:85:8f:b4:d6:55:64:0b:11:ee:86:4c:4f:79:c9:
         eb:1f:1e:3d:c2:0f:b9:81:ea:e7:e8:ff:09:85:49:14:ff:7c:
         a6:60:10:87:86:06:a8:1d:33:b5:89:01:36:22:ea:c3:2d:08:
         8f:06:40:4a:54:c4:0b:8a:39:47:da:92:d3:b0:46:4c:04:60:
         cc:74:3a:c7:bd:d7:f2:fe:b1:29:c9:9e:66:ea:7a:17:00:68:
         c1:da:28:03:e2:cc:32:0c:3f:8d:16:09:9b:76:68:1f:42:29:
         4c:13:da:2e:b3:a5:1a:45:63:2f:10:33:76:63:f9:23:90:3f:
         8a:8a:0d:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:34 2026 by rpki-client