Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3230302e302f32322d3232203d3e203233363530.roa
File:                     3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=
Subject key identifier:   5E:AA:FE:EE:F3:BA:7D:5D:01:61:4C:72:E3:89:2F:9F:7D:AD:79:83
Certificate issuer:       /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Certificate serial:       47E24DA0BC775E9B8A8260F88E136D611F40E6AE
Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3230302e302f32322d3232203d3e203233363530.roa
Signing time:             Tue 19 May 2026 01:26:30 +0000
ROA not before:           Tue 19 May 2026 01:21:30 +0000
ROA not after:            Tue 18 May 2027 01:26:30 +0000
asID:                     23650
IP address blocks:        103.36.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e2:4d:a0:bc:77:5e:9b:8a:82:60:f8:8e:13:6d:61:1f:40:e6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
        Validity
            Not Before: May 19 01:21:30 2026 GMT
            Not After : May 18 01:26:30 2027 GMT
        Subject: CN=5EAAFEEEF3BA7D5D01614C72E3892F9F7DAD7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:61:36:97:77:c7:f3:54:72:6c:51:58:d3:
                    dd:4a:e3:bf:96:9c:01:53:b0:ab:41:d6:b6:85:1c:
                    ed:00:6e:5a:f7:a7:58:bd:0e:ab:2d:24:dd:6c:5d:
                    e3:10:d0:0a:3f:c8:c1:ef:a1:07:3d:da:e5:ba:31:
                    f9:42:e7:76:39:f3:3c:d5:ae:84:3e:52:32:8c:8d:
                    17:43:1b:8d:e3:af:b1:4c:75:48:31:83:33:d2:4e:
                    7f:e2:3c:b0:91:1e:33:bd:0f:c0:5c:8f:ef:cc:7d:
                    96:2b:51:34:eb:f7:8d:a2:9b:e2:28:7f:82:76:19:
                    27:6d:62:7f:72:1a:e7:ae:95:2d:f7:48:95:60:63:
                    52:ef:b3:7b:8b:ee:d4:dd:09:e2:e2:84:4e:63:00:
                    e9:71:b9:e2:8c:c7:3b:f8:94:bd:e4:63:ab:c5:9e:
                    40:31:55:02:b2:57:b0:49:04:8f:1a:ac:f2:19:d2:
                    3f:6f:df:5c:6e:17:b6:96:2f:06:41:69:d4:c6:9d:
                    8c:5f:38:71:f9:17:44:5a:2b:fb:b0:bb:13:92:ae:
                    7b:40:73:de:15:b3:34:09:bb:16:1e:44:5b:56:27:
                    7e:5e:13:c9:3e:ad:08:c1:a0:17:22:54:76:f2:d4:
                    8a:49:cc:a8:27:5a:cb:de:a4:36:c0:21:9c:94:28:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:FE:EE:F3:BA:7D:5D:01:61:4C:72:E3:89:2F:9F:7D:AD:79:83
            X509v3 Authority Key Identifier:
                keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3230302e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:b0:f0:b3:60:76:30:15:ae:8e:56:4c:d7:e3:f6:2d:11:
         9c:a4:af:96:dc:b4:0a:b6:4b:ba:d1:b5:82:80:ea:d6:43:7b:
         ec:cb:ac:cf:e1:ee:ee:c2:fa:a0:e1:ba:79:b2:00:b8:24:56:
         55:5d:6d:1b:4a:01:61:16:cc:bb:11:8a:0e:2d:14:b1:3f:d8:
         97:6d:b5:35:26:1d:54:ba:ba:27:a9:08:58:4f:62:2f:dd:8c:
         37:25:44:62:32:87:6a:53:96:e2:a3:5a:08:d6:03:cc:13:ad:
         76:94:b7:51:f3:67:e4:54:c0:0d:4c:7a:e7:23:c4:9c:ce:1f:
         07:55:52:90:76:0b:53:2b:72:d0:20:3a:fb:61:27:24:fc:fd:
         3a:46:94:d8:d5:2e:6a:af:51:e8:b6:eb:31:7a:bc:9e:e6:e7:
         29:db:c6:01:05:a4:b2:d8:22:57:58:41:98:de:59:7e:9d:a3:
         0c:a6:c5:8d:36:31:17:1a:b8:10:d2:a9:a7:21:e5:9c:73:f5:
         86:e3:d2:86:0b:e6:fb:8d:f2:60:79:45:14:13:a5:ef:e0:9d:
         b2:f6:ec:c4:76:af:01:31:e4:1f:12:d6:4d:86:d6:2a:f1:4a:
         d5:d7:e4:b9:4c:66:35:cb:10:3a:12:1c:bd:fa:0b:ca:96:19:
         0e:46:a4:d8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUR+JNoLx3XpuKgmD4jhNtYR9A5q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4
OUZFNzYwODAeFw0yNjA1MTkwMTIxMzBaFw0yNzA1MTgwMTI2MzBaMDMxMTAvBgNV
BAMTKDVFQUFGRUVFRjNCQTdENUQwMTYxNEM3MkUzODkyRjlGN0RBRDc5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgHGE2l3fH81RybFFY091K47+W
nAFTsKtB1raFHO0Ablr3p1i9DqstJN1sXeMQ0Ao/yMHvoQc92uW6MflC53Y58zzV
roQ+UjKMjRdDG43jr7FMdUgxgzPSTn/iPLCRHjO9D8Bcj+/MfZYrUTTr942im+Io
f4J2GSdtYn9yGueulS33SJVgY1Lvs3uL7tTdCeLihE5jAOlxueKMxzv4lL3kY6vF
nkAxVQKyV7BJBI8arPIZ0j9v31xuF7aWLwZBadTGnYxfOHH5F0RaK/uwuxOSrntA
c94VszQJuxYeRFtWJ35eE8k+rQjBoBciVHby1IpJzKgnWsvepDbAIZyUKNDFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUXqr+7vO6fV0BYUxy44kvn32teYMwHwYDVR0j
BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC
NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjMxOTk3OTEwNTY4MTQxMS8wLzMxMzAzMzJlMzMz
NjJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmckyDANBgkqhkiG9w0BAQsFAAOCAQEAhsaw8LNgdjAVro5WTNfj9i0R
nKSvlty0CrZLutG1goDq1kN77Musz+Hu7sL6oOG6ebIAuCRWVV1tG0oBYRbMuxGK
Di0UsT/Yl221NSYdVLq6J6kIWE9iL92MNyVEYjKHalOW4qNaCNYDzBOtdpS3UfNn
5FTADUx65yPEnM4fB1VSkHYLUyty0CA6+2EnJPz9OkaU2NUuaq9R6LbrMXq8nubn
KdvGAQWkstgiV1hBmN5Zfp2jDKbFjTYxFxq4ENKppyHlnHP1huPShgvm+43yYHlF
FBOl7+CdsvbsxHavATHkHxLWTYbWKvFK1dfkuUxmNcsQOhIcvfoLypYZDkak2A==
-----END CERTIFICATE-----
Generated at Fri May 29 23:49:44 2026 by rpki-client