Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137342e302f32332d3233203d3e20313338343231.roa
File:                     3130332e33362e3137342e302f32332d3233203d3e20313338343231.roa (raw, json)
Hash identifier:          oueHboMUL/uC3KjkRLM3EQS7t2+svW1x8dbSmPy4avs=
Subject key identifier:   69:D8:91:F0:8A:E1:96:94:47:2D:C0:E8:E3:33:0E:03:7A:72:36:A9
Certificate issuer:       /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial:       088F79E9277AFDB2C5B74BD9BF459B2061A0B9F6
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137342e302f32332d3233203d3e20313338343231.roa
Signing time:             Wed 15 Apr 2026 03:07:12 +0000
ROA not before:           Wed 15 Apr 2026 03:02:12 +0000
ROA not after:            Wed 14 Apr 2027 03:07:12 +0000
asID:                     138421
IP address blocks:        103.36.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8f:79:e9:27:7a:fd:b2:c5:b7:4b:d9:bf:45:9b:20:61:a0:b9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
        Validity
            Not Before: Apr 15 03:02:12 2026 GMT
            Not After : Apr 14 03:07:12 2027 GMT
        Subject: CN=69D891F08AE19694472DC0E8E3330E037A7236A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:1c:35:04:ec:40:a7:3b:39:38:2c:ee:fa:
                    a6:67:a7:8b:c1:5b:e7:55:57:56:d0:41:57:8d:4c:
                    7d:d7:ff:e5:d0:07:75:43:f7:79:50:f4:87:3d:df:
                    33:b7:3b:30:4f:00:01:15:0c:3d:ad:e7:5a:bf:da:
                    a3:51:b2:df:7a:b5:d1:fa:bf:41:aa:77:e6:8a:95:
                    e4:6a:f6:89:f4:3c:a0:f5:4c:a7:cb:47:3c:82:58:
                    8e:57:d1:f8:21:7a:55:c6:4a:30:32:5e:cb:f9:18:
                    b5:d3:01:de:c0:96:2b:7f:b3:1c:2e:08:be:9b:e8:
                    3c:b3:32:87:4c:48:78:e9:de:90:8e:9e:ae:21:db:
                    f9:11:34:4d:76:2a:8a:87:96:f2:38:e8:c1:96:8a:
                    35:cb:c0:5c:da:8e:55:97:cf:22:e0:f7:c7:31:63:
                    64:36:39:62:12:3a:ab:18:dc:b2:88:8e:44:04:16:
                    25:dd:bd:77:a1:f9:6a:92:bd:34:39:d4:5a:73:b9:
                    4e:5b:e9:fa:78:2a:05:5b:be:3b:d2:26:9e:70:2b:
                    c0:56:67:db:aa:ba:87:e8:a0:3b:3b:47:09:8f:05:
                    4a:65:5a:40:30:79:7b:6f:2a:99:22:fa:e8:d1:b8:
                    f9:d6:95:0c:6c:56:9a:6c:45:25:ae:d8:74:d3:72:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D8:91:F0:8A:E1:96:94:47:2D:C0:E8:E3:33:0E:03:7A:72:36:A9
            X509v3 Authority Key Identifier:
                keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e33362e3137342e302f32332d3233203d3e20313338343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:b6:f7:1b:3d:8e:ff:50:ea:31:6f:a0:03:5e:ac:22:b7:
         04:24:65:c4:89:57:e0:16:bf:10:86:ca:3a:a0:59:6c:a3:72:
         ec:c6:18:9c:d4:f1:ce:10:3d:41:22:a9:b0:a6:8c:cb:a9:11:
         82:a1:11:6f:db:85:8e:4f:72:d9:5c:48:41:d2:24:b9:a6:d9:
         5b:94:c7:41:8b:44:e9:72:b9:b0:09:35:79:31:e9:de:54:c2:
         bc:94:23:b2:e9:5e:0f:67:1c:50:0c:af:80:c3:15:0a:e1:e9:
         f9:57:0c:be:7f:a3:29:1a:60:d5:4f:0b:8b:eb:5c:03:a1:e5:
         06:f2:1e:8f:48:55:8e:7c:76:ba:fa:2e:ea:86:41:89:d9:33:
         a1:d6:00:4a:9d:21:cf:fa:a5:86:cf:78:8f:84:be:21:45:87:
         a5:55:24:90:15:86:ac:93:3f:59:2e:7d:79:d3:73:ba:8d:61:
         cb:33:b9:f3:2b:8a:6e:42:25:3b:2f:4e:5f:6f:4b:72:3c:a8:
         04:6f:1d:a9:7d:c8:24:8b:a1:3a:fe:94:ec:9a:39:3a:b5:e5:
         dc:9d:97:31:3d:f6:7f:29:0a:04:30:73:fe:21:56:d6:3a:07:
         3a:8f:dd:86:14:b4:65:dc:7a:5e:9e:15:72:a7:cc:a9:fd:e2:
         0c:8b:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:19 2026 by rpki-client