Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230302e302f32322d3232203d3e20313337373634.roa
File:                     3130332e3130352e3230302e302f32322d3232203d3e20313337373634.roa (raw, json)
Hash identifier:          9HqYd5QMLVVaCAE62rtliSynNO+9vRjsbXyw6XlrJ7M=
Subject key identifier:   23:61:D1:18:D3:7A:FA:8A:04:EA:59:3E:40:D6:65:F3:31:BB:B5:36
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       60FDC6FCF5DB1B372BF103F78889792BDC003CC4
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230302e302f32322d3232203d3e20313337373634.roa
Signing time:             Thu 09 Apr 2026 09:21:37 +0000
ROA not before:           Thu 09 Apr 2026 09:16:37 +0000
ROA not after:            Thu 08 Apr 2027 09:21:37 +0000
asID:                     137764
IP address blocks:        103.105.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:c6:fc:f5:db:1b:37:2b:f1:03:f7:88:89:79:2b:dc:00:3c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: Apr  9 09:16:37 2026 GMT
            Not After : Apr  8 09:21:37 2027 GMT
        Subject: CN=2361D118D37AFA8A04EA593E40D665F331BBB536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:11:dd:4b:97:00:17:28:bb:7b:1b:41:fc:
                    4d:55:ee:03:c3:86:db:c4:44:e2:86:64:6d:00:5c:
                    b5:a1:12:3c:12:28:a7:fa:f6:f3:dc:29:21:59:91:
                    c9:fc:30:ee:52:19:0d:11:83:69:e0:17:1a:a4:05:
                    16:fe:32:09:42:cb:98:70:35:7b:d7:25:dd:27:f7:
                    49:ee:f4:02:47:03:56:99:8a:da:8b:9c:7b:34:b6:
                    70:21:22:99:9c:ee:1b:e6:0d:02:c7:df:81:95:52:
                    b6:ab:54:08:ca:ba:4c:2c:1d:fe:e0:64:f2:e3:a9:
                    11:77:92:58:71:b0:d9:1b:d6:79:e4:a5:5f:c6:7b:
                    ee:24:7a:64:60:ee:03:39:b4:85:b6:83:d0:5d:ae:
                    3e:e5:3b:d7:89:a9:05:e8:1c:36:32:e9:a5:db:5c:
                    be:23:66:2a:f1:6f:0d:7b:83:1d:f7:07:fd:c6:ce:
                    3d:1a:b2:0e:f7:6d:d3:b5:de:75:af:eb:d2:b4:56:
                    b8:63:57:75:90:6a:e6:8a:c6:41:6e:be:d1:bb:0b:
                    1f:34:20:e8:d2:c3:d7:25:f3:61:e6:26:85:c0:ec:
                    18:5e:68:fc:67:a7:95:45:96:19:91:44:53:60:fd:
                    02:2c:e1:04:91:40:b7:88:35:41:32:20:c4:11:a3:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:61:D1:18:D3:7A:FA:8A:04:EA:59:3E:40:D6:65:F3:31:BB:B5:36
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230302e302f32322d3232203d3e20313337373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:21:ed:c0:10:4d:cd:cd:d6:93:83:c1:0a:ee:d6:a7:9d:ac:
         85:1e:a0:3f:02:1f:61:42:ef:20:76:12:ff:05:6d:49:21:53:
         05:c3:f0:43:98:20:16:ae:90:88:54:64:d0:2f:c9:39:49:6a:
         76:0a:f1:06:69:15:be:21:f4:4d:96:17:c2:86:7b:2d:c1:96:
         34:ea:e4:a5:c3:a9:a8:31:34:10:41:91:57:1e:3d:69:be:c1:
         a8:10:3a:b0:80:e4:2c:9e:d8:78:62:de:83:8b:ba:8a:4d:fa:
         32:53:05:89:6b:08:57:01:2d:cc:69:37:fe:32:3c:b5:d0:ca:
         c1:e1:ec:d6:b4:37:c8:cf:a1:fd:df:36:82:1c:28:bd:32:d5:
         40:b5:1b:b0:90:84:83:33:ce:79:fa:7d:8c:86:81:74:c0:3f:
         ca:eb:05:7d:80:f1:e8:46:15:30:24:a7:f6:9e:fb:ea:c9:5e:
         06:1f:6e:19:ab:84:ce:2d:1f:29:a4:dd:d4:cf:4a:0a:a1:61:
         40:2b:01:d1:cb:45:64:ea:c8:31:aa:f5:7c:10:ea:76:30:69:
         74:99:c2:59:52:e3:cc:54:ab:42:18:32:3f:1b:71:92:77:d1:
         1b:23:c5:74:a2:be:06:59:11:9b:37:4d:f8:10:b7:50:5e:e0:
         26:94:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:12 2026 by rpki-client