Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36302e302f32342d3234203d3e20313334373731.roa
File:                     3130332e33362e36302e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier:          jCXgEQab1q1gI1eQ8F9KbUfgocbUKrDgoRWB09Rj85M=
Subject key identifier:   FE:86:67:42:98:02:52:97:6A:3F:8C:C9:4F:D2:09:59:CD:21:31:DB
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       4683A2F3CC3B3DBB6F327188F59FA3021E950037
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36302e302f32342d3234203d3e20313334373731.roa
Signing time:             Wed 20 May 2026 06:51:21 +0000
ROA not before:           Wed 20 May 2026 06:46:21 +0000
ROA not after:            Wed 19 May 2027 06:51:21 +0000
asID:                     134771
IP address blocks:        103.36.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:83:a2:f3:cc:3b:3d:bb:6f:32:71:88:f5:9f:a3:02:1e:95:00:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: May 20 06:46:21 2026 GMT
            Not After : May 19 06:51:21 2027 GMT
        Subject: CN=FE866742980252976A3F8CC94FD20959CD2131DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:d6:72:76:c0:ec:15:27:33:af:b6:65:0b:
                    4f:75:62:1c:34:07:d0:86:68:a7:44:d8:bf:5f:0e:
                    c5:24:4e:e7:56:ca:06:36:0a:32:15:19:d4:aa:ac:
                    76:3b:b6:00:6f:b2:d0:6b:47:50:40:56:e9:ec:c6:
                    85:50:b1:19:9f:2e:1b:d0:38:31:e1:1d:6f:a2:85:
                    41:5d:a1:34:12:db:08:db:ee:6f:cd:27:09:63:dd:
                    bc:69:5d:e2:1f:55:c6:ed:7e:18:5f:d2:d7:e7:17:
                    e3:79:71:37:20:0b:e8:78:af:d3:c5:68:03:c3:25:
                    ea:00:7c:46:6d:ab:7c:d9:c6:34:e7:74:84:40:65:
                    50:3f:9d:35:95:12:ad:ec:ce:c4:7c:d7:b8:69:00:
                    7a:3b:bc:ad:4d:c9:68:18:df:cd:fc:ff:b7:05:0e:
                    2b:ee:65:3b:ed:8c:d6:83:72:b8:9a:f8:aa:46:a5:
                    5f:9d:fa:ad:43:50:fe:82:6a:d2:5c:b0:1b:c1:49:
                    f8:28:8d:0e:63:f8:85:f0:69:1c:4d:26:b4:9c:79:
                    39:0b:21:40:a3:58:c4:e0:ee:fe:ac:90:b9:76:b0:
                    da:37:27:ee:e9:cd:a1:2e:46:c4:ab:96:1c:3b:91:
                    08:71:08:90:39:35:46:e2:45:d9:0c:b1:e7:c4:a6:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:67:42:98:02:52:97:6A:3F:8C:C9:4F:D2:09:59:CD:21:31:DB
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36302e302f32342d3234203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:5b:db:06:88:30:6b:a5:bd:e7:8f:54:20:53:1f:c6:65:
         f3:aa:09:ec:6e:29:66:46:a4:9a:02:9c:f7:cb:9c:b7:a5:1f:
         d6:c0:6a:f8:c1:2a:ed:14:61:a9:26:c0:bb:51:83:b4:52:e3:
         d9:f1:76:7e:6b:5d:28:2f:f8:0a:db:cd:73:14:99:fb:05:b9:
         a2:43:ea:59:e8:7a:23:53:70:65:e5:6f:68:d9:27:7f:03:94:
         63:08:71:c8:10:9d:42:0f:0d:38:be:b9:1d:e3:3e:af:fc:e0:
         e1:84:1d:51:81:b5:88:17:6e:3e:2e:e0:1d:29:b1:a1:df:68:
         af:4f:9a:23:68:81:73:08:fe:1a:b1:6c:72:c6:a7:e4:63:f1:
         6a:87:f6:36:59:0f:d1:19:75:96:39:98:b0:d3:72:2d:e5:50:
         2c:af:ea:08:4b:20:28:0c:fb:0c:bf:54:05:87:11:18:96:7d:
         f2:5c:ef:e2:e8:2a:4e:28:43:ac:b3:71:10:0f:86:97:c2:25:
         e5:38:1c:fa:25:a6:e4:f2:be:a4:e0:24:f4:49:b6:9b:f4:18:
         01:ff:bb:0a:42:14:07:c4:3d:d5:07:31:0e:90:cf:24:aa:7f:
         31:d0:1c:c6:c7:0d:1b:f5:4a:a4:7f:2c:3c:80:25:c7:b6:db:
         43:42:70:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:21 2026 by rpki-client