Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/36302e3233322e3132382e302f31372d3232203d3e203234313433.roa
File:                     36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (raw, json)
Hash identifier:          ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=
Subject key identifier:   F8:E8:0B:AC:FF:C2:BE:2B:C5:78:2C:B7:8B:CE:65:62:27:B2:C6:98
Certificate issuer:       /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial:       1069A17B320AE609D9EE0736BC288136F3DBE546
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/36302e3233322e3132382e302f31372d3232203d3e203234313433.roa
Signing time:             Thu 16 Apr 2026 02:36:01 +0000
ROA not before:           Thu 16 Apr 2026 02:31:01 +0000
ROA not after:            Thu 15 Apr 2027 02:36:01 +0000
asID:                     24143
IP address blocks:        60.232.128.0/17 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:69:a1:7b:32:0a:e6:09:d9:ee:07:36:bc:28:81:36:f3:db:e5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
        Validity
            Not Before: Apr 16 02:31:01 2026 GMT
            Not After : Apr 15 02:36:01 2027 GMT
        Subject: CN=F8E80BACFFC2BE2BC5782CB78BCE656227B2C698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:29:13:f6:43:87:fb:20:08:81:b7:5a:4d:
                    cd:4a:51:fe:9f:8c:ef:f2:06:4d:a3:6a:6b:3d:ce:
                    ad:d8:6c:98:e5:c3:83:42:a6:1c:92:dc:00:51:57:
                    7b:d3:ec:e7:b9:97:92:22:0f:8a:75:07:0b:95:7e:
                    a4:67:4c:ba:55:05:f2:1a:2c:49:8c:74:af:84:1c:
                    fa:9c:38:01:0f:4a:6b:17:96:fa:80:1d:4d:22:43:
                    c3:5b:30:57:c0:0b:aa:70:a3:b2:69:79:8f:7c:1d:
                    d3:8d:04:df:fc:4f:af:f0:8d:f2:50:39:1d:19:23:
                    b1:43:e3:ab:05:34:66:a2:b8:60:76:b2:0d:16:8f:
                    52:6d:67:eb:19:db:ac:8b:b1:5b:9d:df:4d:27:b0:
                    c8:0c:5d:9f:3d:ab:d7:80:f5:0e:52:99:57:d4:8b:
                    de:ed:e6:b0:3a:0a:2c:3e:63:38:fb:6f:79:ce:00:
                    a1:29:1a:c5:9c:4b:76:ef:af:3e:0d:8c:8d:e6:ca:
                    b4:48:f7:c7:32:24:6e:c7:46:68:55:69:8f:dd:78:
                    c2:40:cf:b3:f7:42:88:d4:29:87:9a:4c:3f:f8:aa:
                    a5:a2:1c:9d:f7:b2:99:11:df:ce:d7:d9:85:87:fc:
                    19:43:c8:56:3d:c8:71:02:2c:c8:e0:f6:50:b0:ad:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:0B:AC:FF:C2:BE:2B:C5:78:2C:B7:8B:CE:65:62:27:B2:C6:98
            X509v3 Authority Key Identifier:
                keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/36302e3233322e3132382e302f31372d3232203d3e203234313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.232.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         30:47:4c:08:9b:0d:69:0c:ce:d2:6a:fc:a4:4d:b1:fd:53:0e:
         ca:aa:2d:90:65:15:d1:ce:9d:f3:67:a3:e2:73:8a:64:d2:86:
         55:66:ab:00:12:80:87:55:2d:21:fd:d3:19:1e:78:87:f4:86:
         b9:2a:5a:8c:bf:d3:5f:a8:de:07:ca:81:c3:68:45:14:5f:cf:
         42:b8:5c:78:e2:1a:b7:02:91:c4:c6:27:39:77:7a:ae:a9:48:
         ff:7a:27:7d:8f:fa:1f:38:1c:d5:6a:a5:75:17:59:c2:35:8f:
         fd:fa:e6:98:29:e8:04:0a:74:9d:c4:ab:43:56:4e:0b:68:40:
         b8:d2:d3:57:27:80:ec:35:53:28:14:a7:d7:5c:2f:58:10:d7:
         30:fa:37:86:1b:84:8f:64:46:98:5a:a3:06:33:5b:b8:7a:fb:
         aa:a3:9a:28:cf:2a:49:3a:bc:17:a7:d6:f8:bc:6c:76:9f:35:
         0c:8e:75:04:ef:ef:d3:ca:b4:74:b9:c5:0d:38:77:48:44:d1:
         99:a8:23:a2:0e:a9:bb:05:7d:92:4d:4e:24:a0:ef:06:46:a4:
         9a:69:36:0d:fa:8d:a4:a1:ba:48:1f:80:78:73:42:59:b0:b9:
         df:a8:c9:14:da:43:63:b5:0e:76:90:00:8a:83:fc:7f:4f:36:
         ea:26:9b:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:05 2026 by rpki-client