Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232352e302f32342d3234203d3e203337393336.roa
File:                     33362e35312e3232352e302f32342d3234203d3e203337393336.roa (raw, json)
Hash identifier:          Nr/LNffIWDzbnLz9WKHM/m3aoi0mRUCq2gSaGtfvG0s=
Subject key identifier:   F0:DC:D6:30:10:C2:C6:E6:29:29:4D:E8:18:D9:B2:2E:E3:D9:33:14
Certificate issuer:       /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
Certificate serial:       083E1961D5A6713EA77F93855783A984DA373C8D
Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232352e302f32342d3234203d3e203337393336.roa
Signing time:             Fri 05 Jun 2026 07:14:54 +0000
ROA not before:           Fri 05 Jun 2026 07:09:54 +0000
ROA not after:            Fri 04 Jun 2027 07:14:54 +0000
asID:                     37936
IP address blocks:        36.51.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:19:61:d5:a6:71:3e:a7:7f:93:85:57:83:a9:84:da:37:3c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5
        Validity
            Not Before: Jun  5 07:09:54 2026 GMT
            Not After : Jun  4 07:14:54 2027 GMT
        Subject: CN=F0DCD63010C2C6E629294DE818D9B22EE3D93314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:d7:39:bc:6d:90:03:d9:59:01:57:f0:be:
                    6b:59:92:29:55:32:60:be:3f:94:3d:d7:6b:fa:49:
                    4e:10:ff:fd:c4:66:a1:97:ad:00:35:6d:79:d3:a3:
                    91:f5:5f:b8:90:33:79:1d:e8:32:b9:fe:22:8b:cd:
                    04:4c:62:f2:ea:c1:3d:98:2a:70:fd:d0:46:f1:c0:
                    c1:3d:b2:db:49:76:14:b5:e3:05:6a:ca:56:a0:80:
                    05:42:45:33:7f:f1:72:00:85:aa:7f:d5:c1:9c:a1:
                    73:0e:56:b7:54:9f:dd:58:84:80:5c:66:d0:82:39:
                    b6:93:0f:18:3a:f8:b1:a6:d4:b0:00:6f:50:22:24:
                    0f:34:d9:65:14:e9:58:84:2a:d4:75:06:9a:ad:de:
                    8c:ae:a9:64:81:bb:81:ae:31:d8:e5:4e:0f:7d:24:
                    e9:6c:d6:55:82:d9:8c:5e:ea:f6:ab:78:ed:fb:dd:
                    76:34:b5:4e:15:7d:5f:fc:92:ef:70:5a:8c:35:0a:
                    be:c8:b5:10:29:6b:92:03:68:1e:16:be:73:45:db:
                    0e:00:8a:12:25:ea:2d:50:04:8d:2a:78:72:3a:f6:
                    77:3d:6a:9f:0d:18:20:28:79:5d:f4:46:2a:1f:7c:
                    52:c5:d0:0a:6e:01:4a:4c:5c:b1:96:2e:75:2b:7f:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:D6:30:10:C2:C6:E6:29:29:4D:E8:18:D9:B2:2E:E3:D9:33:14
            X509v3 Authority Key Identifier:
                keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/33362e35312e3232352e302f32342d3234203d3e203337393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.51.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:03:7b:4b:f2:9c:38:8f:77:4b:6f:0e:2f:16:4f:20:5b:fe:
         54:dc:51:f2:46:3e:40:52:0f:b4:63:f7:52:f4:ee:0f:41:99:
         90:18:2c:ef:41:db:13:b4:4b:4f:65:fc:f3:3b:05:d8:98:39:
         d1:66:f9:c3:ad:7c:27:aa:28:ef:f4:72:07:65:2d:86:6c:4e:
         af:55:b5:58:b4:fd:e0:05:1d:72:2c:ba:de:44:e9:97:1c:de:
         77:7e:ff:36:6d:63:0b:26:07:f7:21:e8:ea:06:46:02:3b:09:
         80:4c:1e:ec:83:66:55:47:88:2b:e6:80:b7:e4:d4:e8:cf:90:
         e9:2a:a9:39:e3:59:3e:d3:8e:f1:10:82:31:47:0f:05:ba:07:
         1f:77:b2:c9:69:99:c4:d5:63:00:3d:3d:d7:08:3e:16:8e:ea:
         08:cd:4f:48:93:59:80:72:f7:cb:da:e0:a6:48:2e:73:22:83:
         22:8d:ce:41:0b:fc:bf:f0:a3:33:06:2b:35:77:10:e0:8c:9f:
         99:0d:f3:8f:8b:77:14:76:22:41:fc:13:67:7f:61:4e:ae:ea:
         0c:90:8e:e7:70:09:bf:5d:3b:71:ce:fa:e1:cd:09:9d:8d:fa:
         81:a4:f5:b7:ea:16:c7:91:68:09:2e:61:96:48:8e:96:ff:e7:
         7c:da:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:38 2026 by rpki-client