Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/3bI70lwePqNvxlS5-2sld6x6Xqk.roa
File:                     3bI70lwePqNvxlS5-2sld6x6Xqk.roa (raw, json)
Hash identifier:          u/ZWukSKkfsrsRUqAPuZX9GEV6Qd62PstDasL0r8cB0=
Subject key identifier:   DD:B2:3B:D2:5C:1E:3E:A3:6F:C6:54:B9:FB:6B:25:77:AC:7A:5E:A9
Certificate issuer:       /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial:       0586
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/3bI70lwePqNvxlS5-2sld6x6Xqk.roa
Signing time:             Fri 01 Aug 2025 06:36:01 +0000
ROA not before:           Fri 01 Aug 2025 06:36:01 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     134768
IP address blocks:        103.236.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 15:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
        Validity
            Not Before: Aug  1 06:36:01 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=DDB23BD25C1E3EA36FC654B9FB6B2577AC7A5EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:13:a5:35:c8:f2:cc:d2:c9:ad:d4:28:55:
                    9e:5c:aa:46:4c:f1:24:0e:c6:31:49:db:fb:2a:15:
                    19:ff:56:d3:bc:38:d3:38:a6:56:65:42:5d:60:7f:
                    86:b6:0b:91:77:d1:56:43:08:98:d3:cb:28:8b:36:
                    9e:c9:09:0a:f0:8e:b9:00:83:05:dd:cd:6f:71:a4:
                    bf:3b:d2:83:76:d4:95:f2:9b:66:ad:ad:fa:d7:5d:
                    62:b3:ff:0a:59:80:b0:fd:b4:d2:d1:9c:6d:83:3e:
                    b2:9c:e9:3e:c5:33:7c:57:61:de:fc:b8:8f:63:97:
                    c9:b8:f7:26:b7:2b:b8:19:00:fc:21:85:09:db:98:
                    e8:0c:28:8b:7e:22:97:8e:2b:b3:eb:e6:2a:6c:ec:
                    ad:23:14:92:5b:a3:3b:c5:54:29:b3:ba:3a:9d:13:
                    95:66:6f:f2:cb:44:3b:7a:4a:ce:59:f1:2a:f8:0e:
                    c8:1f:2c:06:99:00:3a:d9:e4:3d:fb:35:eb:0f:26:
                    c9:5e:f0:d5:d7:06:a2:b5:da:f7:3d:b6:da:fc:47:
                    91:89:36:45:0d:bf:c4:6f:61:9a:93:6f:19:d7:f1:
                    6a:21:83:a0:c4:3d:90:cf:73:c4:a4:0c:7c:97:8a:
                    4d:11:c5:36:fb:fa:eb:b8:d6:8e:e3:60:75:eb:cd:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:3B:D2:5C:1E:3E:A3:6F:C6:54:B9:FB:6B:25:77:AC:7A:5E:A9
            X509v3 Authority Key Identifier:
                keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/3bI70lwePqNvxlS5-2sld6x6Xqk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:eb:12:f4:c5:98:4d:4c:99:8d:a2:01:98:5c:fd:10:c6:0f:
         53:e3:03:d3:7a:3b:ac:1a:e5:da:6a:7c:5f:0a:f4:33:46:e0:
         75:c2:ea:d2:bd:51:94:c3:ee:30:d3:19:ca:31:0f:13:5a:25:
         5a:15:96:8c:81:8e:4d:e2:e9:5e:c0:2f:2d:b6:e7:95:78:dd:
         c4:1b:b2:04:44:f8:37:76:90:7b:0a:1a:e5:be:80:f7:46:89:
         6b:fa:ee:9a:43:e3:7a:7e:e8:a5:8c:14:c6:b6:76:0c:0f:e4:
         86:02:a9:e5:1e:e0:77:82:97:f9:6a:a4:53:d6:78:76:70:73:
         bc:34:b7:ff:1e:ab:8d:0d:fc:f7:1f:4d:fe:17:1d:5d:37:23:
         4e:d6:d1:cb:c9:7b:0f:f9:8a:ec:55:2c:b8:2e:c8:fc:d5:4b:
         bb:b5:cd:74:48:d1:9e:35:e4:f0:40:ff:69:52:ff:e4:53:25:
         f9:2c:40:cf:e2:3a:bd:47:0a:4c:59:fe:b5:f7:19:2b:db:a7:
         a5:d6:36:1d:69:3c:fd:4b:7a:4e:ca:31:ed:8b:18:42:8f:7a:
         55:dd:47:e8:1e:cd:4e:92:2c:cf:86:4c:45:58:a6:f0:b5:07:
         4e:4e:9e:04:ed:d5:da:a6:a7:a7:e5:ed:e8:6e:7f:9d:71:74:
         35:a2:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:59:59 2025 by rpki-client