Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3230342e302f32322d3232203d3e203233363530.roa
File:                     3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=
Subject key identifier:   D7:9B:D7:EC:C1:85:94:D0:7E:1F:0D:5E:9A:30:D7:3A:25:A7:A4:F9
Certificate issuer:       /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Certificate serial:       1DFB5BD5B14ABB3A42FF950B099BEDB701E4E840
Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3230342e302f32322d3232203d3e203233363530.roa
Signing time:             Tue 19 May 2026 01:26:30 +0000
ROA not before:           Tue 19 May 2026 01:21:30 +0000
ROA not after:            Tue 18 May 2027 01:26:30 +0000
asID:                     23650
IP address blocks:        103.36.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fb:5b:d5:b1:4a:bb:3a:42:ff:95:0b:09:9b:ed:b7:01:e4:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
        Validity
            Not Before: May 19 01:21:30 2026 GMT
            Not After : May 18 01:26:30 2027 GMT
        Subject: CN=D79BD7ECC18594D07E1F0D5E9A30D73A25A7A4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:e8:8b:f5:de:a4:56:f2:84:0c:06:1b:61:
                    de:7b:93:d9:0e:8a:c7:ff:e5:de:7b:d8:2b:5c:ad:
                    0d:59:65:3e:9e:66:7d:75:e2:38:71:24:96:c0:8a:
                    30:5a:6f:86:59:35:5f:bb:80:6a:6b:92:e6:7a:ce:
                    3d:d2:9f:43:71:b5:ba:42:3c:92:ae:db:03:eb:cb:
                    df:f1:99:69:ac:3e:96:02:38:5d:4d:83:8c:2c:6f:
                    7f:2f:a9:de:b8:04:a8:64:66:a9:9d:5a:79:b5:74:
                    59:01:47:e4:0c:b8:43:de:46:3c:16:1d:07:71:8e:
                    a2:07:bc:26:c8:e5:83:37:59:f7:f4:70:61:43:70:
                    86:35:cf:da:e0:12:81:7b:ad:f2:93:0e:67:1d:29:
                    c8:88:5d:91:63:c3:c8:71:a7:c9:d3:05:11:9a:2c:
                    9c:55:f2:d8:a0:4a:40:72:ea:ae:ba:63:22:c6:58:
                    29:61:79:85:58:50:c1:5d:f2:f0:f2:bd:f4:78:a2:
                    75:ab:54:54:e7:a1:66:bf:45:c9:d3:80:64:e4:e6:
                    c9:9b:47:14:04:0f:0f:b8:a7:d1:63:48:48:60:c2:
                    b0:60:4e:8a:7d:24:c7:62:35:97:49:c9:c1:6b:e8:
                    41:e3:f6:09:a7:dd:7c:97:dd:9e:29:09:d9:2d:b2:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9B:D7:EC:C1:85:94:D0:7E:1F:0D:5E:9A:30:D7:3A:25:A7:A4:F9
            X509v3 Authority Key Identifier:
                keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/3130332e33362e3230342e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:14:a4:71:c4:0e:c5:d5:a6:ea:11:4a:f3:3d:43:5f:ed:96:
         81:bd:3a:ff:28:86:e3:62:fc:30:f9:4d:44:20:36:44:b2:8d:
         95:e5:60:1d:75:5a:4f:5c:7a:cb:03:fa:20:12:b2:77:cb:1e:
         57:d9:ab:93:37:6d:48:78:a3:49:0b:44:a0:69:90:e4:4c:9a:
         00:40:f6:0c:44:24:0c:6c:45:6b:2d:22:4a:c1:d6:f0:c7:7a:
         62:af:2c:f0:bc:87:d7:1e:cf:b6:0a:1d:19:a3:81:f5:e2:5e:
         09:47:01:f5:2d:3c:d0:a8:4d:a8:f5:22:73:c2:b0:07:2f:e6:
         d3:0f:61:7f:9d:8a:b5:0d:c3:30:47:30:03:31:2e:54:5c:f7:
         34:d8:5f:e4:8d:cf:79:bb:c2:06:b3:e5:9b:a6:13:e3:ba:a2:
         ea:21:8b:bc:5d:df:2d:4f:9c:31:b7:d0:6b:b5:e4:02:01:26:
         7f:69:91:2c:c2:79:57:41:75:8a:dd:d7:d5:b0:63:65:47:95:
         d7:e3:bb:47:0d:31:1d:1f:27:c9:ec:bf:07:1a:d2:6a:b2:0f:
         8f:a0:93:73:fa:f8:ea:ab:84:d5:d3:cc:52:77:46:3a:71:cf:
         4e:d2:45:05:18:1b:ac:40:8a:94:54:e1:94:c4:66:56:38:2c:
         c3:6b:f4:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:49:43 2026 by rpki-client