Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa
File:                     3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier:          xNgJ3gV9o1r6D3ANw23YPUw2L/9/jc69Llz4ccRKPUY=
Subject key identifier:   A6:C7:0D:56:02:12:C1:1A:95:A2:DE:C8:5E:AA:70:FA:D7:1D:23:86
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       3939450B7275F5610D324BCCD18E990B89E544AD
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa
Signing time:             Wed 20 May 2026 06:51:21 +0000
ROA not before:           Wed 20 May 2026 06:46:21 +0000
ROA not after:            Wed 19 May 2027 06:51:21 +0000
asID:                     134771
IP address blocks:        103.36.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:39:45:0b:72:75:f5:61:0d:32:4b:cc:d1:8e:99:0b:89:e5:44:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: May 20 06:46:21 2026 GMT
            Not After : May 19 06:51:21 2027 GMT
        Subject: CN=A6C70D560212C11A95A2DEC85EAA70FAD71D2386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:08:d2:d5:52:a1:7a:c5:6b:86:b7:77:a3:
                    bc:42:ad:6f:48:b1:f0:28:b1:05:89:f9:f2:37:6a:
                    f8:f7:c4:4e:0e:46:47:54:79:cd:85:f3:d0:ba:6c:
                    49:96:7c:1e:05:b6:fc:22:dc:cd:91:c9:13:fa:a4:
                    ab:fa:c4:50:f1:f3:45:9e:b8:9a:fa:b8:44:24:8c:
                    85:6b:95:0d:66:5b:9e:5d:50:1e:73:e7:11:d0:f8:
                    24:b4:79:ca:9d:b2:3a:d2:ff:78:3b:a0:f6:70:59:
                    12:0d:9e:e5:8c:ca:c6:1d:84:a4:e3:2d:d4:a7:83:
                    7d:ba:30:4e:48:fc:81:9c:f2:c0:b7:a8:f0:4d:3d:
                    b3:32:2d:cd:e0:d1:88:3e:d9:59:3a:43:a2:b0:1f:
                    92:6b:1c:21:f4:d7:18:2f:ae:29:24:62:62:ea:da:
                    dc:c6:8a:c8:fd:f9:ce:38:6d:86:fe:15:d3:c1:1e:
                    4e:ff:7d:55:ed:15:fb:69:48:f6:a4:43:8f:67:1e:
                    e7:ba:e4:40:f2:a9:e1:f3:86:1c:db:88:7a:ba:e0:
                    56:72:24:88:c8:4a:46:6d:ee:d6:59:7f:ee:87:c3:
                    83:4f:ae:04:23:b6:38:be:28:e6:63:49:3c:cb:80:
                    ee:20:96:57:14:20:3d:4f:b0:f2:cf:5d:4c:8b:8b:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C7:0D:56:02:12:C1:1A:95:A2:DE:C8:5E:AA:70:FA:D7:1D:23:86
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e3136342e302f32342d3234203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:dd:02:f8:32:6a:ef:e7:2a:a0:3d:7c:42:e9:78:77:a0:6c:
         5b:ae:58:30:7d:d0:45:23:6b:d0:72:0c:a7:aa:af:a1:6f:53:
         1b:d1:29:88:e5:3c:f2:68:40:d8:17:4c:eb:b1:71:4f:83:98:
         05:e9:60:60:71:69:c1:fa:e6:18:23:12:93:11:50:3f:cb:69:
         38:69:68:12:59:fd:84:f4:29:fa:51:77:ad:8e:51:4e:48:54:
         f8:da:bd:54:c8:95:b3:19:6f:4e:1c:b4:d4:f8:40:2e:d6:45:
         c8:c7:1b:60:4e:ba:a4:39:39:dc:8e:1a:a7:cf:4c:57:90:0a:
         b4:36:c1:02:5d:17:f7:4a:10:95:fb:a0:92:eb:93:62:75:83:
         10:70:63:fc:33:58:71:64:e0:9f:46:9a:42:00:76:e5:72:a9:
         bf:07:d8:8b:42:09:a0:5f:0a:c6:48:44:1f:a8:22:30:92:9d:
         d8:ae:56:64:55:16:3f:e2:37:d9:02:e7:f4:ad:cc:1f:47:f5:
         20:c3:79:f6:de:e7:7e:02:77:52:a8:c4:a1:25:71:52:f7:5f:
         c0:8b:5f:bd:44:0a:a5:54:a6:e1:20:24:2c:c5:b0:57:f8:fc:
         16:8d:78:83:a5:0d:ad:e5:76:e9:6b:d2:06:7c:f1:7e:01:14:
         cc:48:38:d7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUOTlFC3J19WENMkvM0Y6ZC4nlRK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5
MTcxQzc5NjAeFw0yNjA1MjAwNjQ2MjFaFw0yNzA1MTkwNjUxMjFaMDMxMTAvBgNV
BAMTKEE2QzcwRDU2MDIxMkMxMUE5NUEyREVDODVFQUE3MEZBRDcxRDIzODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8gjS1VKhesVrhrd3o7xCrW9I
sfAosQWJ+fI3avj3xE4ORkdUec2F89C6bEmWfB4Ftvwi3M2RyRP6pKv6xFDx80We
uJr6uEQkjIVrlQ1mW55dUB5z5xHQ+CS0ecqdsjrS/3g7oPZwWRINnuWMysYdhKTj
LdSng326ME5I/IGc8sC3qPBNPbMyLc3g0Yg+2Vk6Q6KwH5JrHCH01xgvrikkYmLq
2tzGisj9+c44bYb+FdPBHk7/fVXtFftpSPakQ49nHue65EDyqeHzhhzbiHq64FZy
JIjISkZt7tZZf+6Hw4NPrgQjtji+KOZjSTzLgO4gllcUID1PsPLPXUyLizG1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUpscNVgISwRqVot7IXqpw+tcdI4YwHwYDVR0j
BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC
QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY2ODY3MzA4MjU3NjA3NzEvMC8zMTMwMzMyZTMz
MzYyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzczMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGckpDANBgkqhkiG9w0BAQsFAAOCAQEA090C+DJq7+cqoD18Qul4
d6BsW65YMH3QRSNr0HIMp6qvoW9TG9EpiOU88mhA2BdM67FxT4OYBelgYHFpwfrm
GCMSkxFQP8tpOGloEln9hPQp+lF3rY5RTkhU+Nq9VMiVsxlvThy01PhALtZFyMcb
YE66pDk53I4ap89MV5AKtDbBAl0X90oQlfugkuuTYnWDEHBj/DNYcWTgn0aaQgB2
5XKpvwfYi0IJoF8KxkhEH6giMJKd2K5WZFUWP+I32QLn9K3MH0f1IMN59t7nfgJ3
UqjEoSVxUvdfwItfvUQKpVSm4SAkLMWwV/j8Fo14g6UNreV26WvSBnzxfgEUzEg4
1w==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:31 2026 by rpki-client