Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3326/Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa
File:                     Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa (raw, json)
Hash identifier:          G25uSTkFkVSIleis6xddxYxuP7PBYQ2MMDOy3Dchr+g=
Subject key identifier:   0B:1F:90:C5:BC:5F:35:D9:74:CB:3A:23:69:57:9D:85:93:76:87:14
Certificate issuer:       /CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
Certificate serial:       056E
Authority key identifier: 6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa
Signing time:             Fri 01 Aug 2025 06:34:42 +0000
ROA not before:           Fri 01 Aug 2025 06:34:42 +0000
ROA not after:            Fri 03 Apr 2026 08:00:09 +0000
asID:                     134768
IP address blocks:        103.236.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 15:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A11EE47425D14EBAF2FCD24D2062B0A52BA042C
        Validity
            Not Before: Aug  1 06:34:42 2025 GMT
            Not After : Apr  3 08:00:09 2026 GMT
        Subject: CN=0B1F90C5BC5F35D974CB3A2369579D8593768714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:77:2f:9e:5b:45:05:2a:b4:6e:85:cd:8a:
                    4e:8b:d5:93:64:d1:ba:d4:88:fc:2f:aa:cf:7c:84:
                    e4:e4:bc:64:b5:19:5b:04:46:a1:f2:4f:c9:96:68:
                    7f:59:47:77:54:3c:28:fe:41:de:e6:52:29:0a:10:
                    5e:50:98:7e:5e:c0:8e:33:27:7b:e3:fa:8c:19:7a:
                    ab:32:56:c2:ef:86:8c:c1:a8:8f:e2:00:72:eb:fc:
                    e2:ad:e8:a0:01:76:e6:20:38:49:67:dc:70:66:60:
                    a1:8c:2e:38:6d:f2:65:96:38:7d:1a:9f:23:7d:77:
                    85:3a:fa:f9:66:86:09:cb:ad:6e:bd:aa:d9:b0:0c:
                    30:b7:8d:54:67:b7:41:51:f1:8b:de:00:7e:13:08:
                    b2:a3:f1:79:90:95:0b:be:10:8c:cf:c2:13:50:fc:
                    f1:72:39:65:60:6d:52:91:34:79:a5:00:9d:26:88:
                    8a:8f:1a:ef:01:6a:9d:e7:c7:59:ac:80:18:cd:e6:
                    57:b3:a3:48:ad:9c:de:03:a7:5b:11:35:60:2f:31:
                    23:08:b2:6c:d9:51:24:42:a4:10:80:72:de:c0:a3:
                    0c:28:05:93:0f:7a:25:59:59:59:e8:4b:42:a2:10:
                    ae:17:71:10:cf:d4:1a:a5:a1:5d:3e:62:e6:5c:d6:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1F:90:C5:BC:5F:35:D9:74:CB:3A:23:69:57:9D:85:93:76:87:14
            X509v3 Authority Key Identifier:
                keyid:6A:11:EE:47:42:5D:14:EB:AF:2F:CD:24:D2:06:2B:0A:52:BA:04:2C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/ahHuR0JdFOuvL80k0gYrClK6BCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ahHuR0JdFOuvL80k0gYrClK6BCw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3326/Cx-QxbxfNdl0yzojaVedhZN2hxQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5a:1f:60:ed:ff:5a:3d:60:ba:7f:48:3c:3e:82:66:b8:a9:
         5f:c6:9b:05:fa:c1:30:8a:39:66:55:a7:08:f5:a6:e9:51:e8:
         59:1f:ac:9c:78:84:ff:5d:ba:f5:5a:ab:6c:3c:a8:a8:ea:cc:
         41:5c:38:5a:a0:f7:d4:31:cf:61:7a:ca:ba:0e:46:66:e0:30:
         50:b2:a6:5c:3d:02:d7:ae:17:57:e1:ff:bd:71:8d:00:8e:15:
         2c:f6:7b:9d:28:98:78:d9:38:67:40:91:cd:07:83:29:21:47:
         74:3f:47:af:f7:8f:2d:3b:59:d2:64:8b:f8:18:ad:c1:0a:31:
         94:ae:15:94:e0:da:b0:e6:cc:b3:ef:38:f2:66:f8:40:e0:e4:
         9f:ca:88:d3:4e:92:93:88:09:24:ee:7c:4d:80:0e:9d:af:2a:
         4e:4a:27:a1:95:05:7c:be:73:06:fb:a5:06:1f:45:1b:5a:db:
         cd:fa:2b:38:5c:a5:07:69:59:80:c4:c9:90:f8:eb:64:70:b1:
         b1:0b:c9:ae:76:88:4d:c1:f1:83:45:03:ce:51:2e:fc:94:09:
         f3:b3:c5:2c:5d:3a:2b:50:de:77:5c:4a:e8:46:74:d9:ef:4b:
         f4:13:e4:62:a1:da:51:c7:82:5b:61:73:6b:ab:cd:ff:1a:69:
         c9:34:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:58:27 2025 by rpki-client