Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36312e302f32342d3234203d3e20313334373731.roa
File:                     3130332e33362e36312e302f32342d3234203d3e20313334373731.roa (raw, json)
Hash identifier:          z8DY57i9OehDi7ebpZyrdNWzcV2//g4+AFn3Lo5pMJw=
Subject key identifier:   6F:69:D3:84:15:D4:52:77:64:6C:08:EB:5C:F4:A4:96:39:E9:63:81
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       6B0B735800F44AEC6AC6FE35A993B87BF5B1F052
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36312e302f32342d3234203d3e20313334373731.roa
Signing time:             Wed 20 May 2026 06:51:21 +0000
ROA not before:           Wed 20 May 2026 06:46:21 +0000
ROA not after:            Wed 19 May 2027 06:51:21 +0000
asID:                     134771
IP address blocks:        103.36.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0b:73:58:00:f4:4a:ec:6a:c6:fe:35:a9:93:b8:7b:f5:b1:f0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: May 20 06:46:21 2026 GMT
            Not After : May 19 06:51:21 2027 GMT
        Subject: CN=6F69D38415D45277646C08EB5CF4A49639E96381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:d1:c8:e8:02:93:26:17:cb:6a:6d:c4:fd:
                    c6:43:b4:df:82:c7:cd:ff:da:d3:43:2e:98:1e:f3:
                    fa:4f:ba:93:1e:28:97:3a:7b:a9:21:1e:b2:79:37:
                    69:0a:e0:aa:27:8c:40:5c:91:d0:01:85:7b:b4:56:
                    11:fb:b8:30:08:40:02:0d:8d:9d:36:eb:c9:9e:36:
                    30:b1:62:8d:04:ee:30:ce:fa:db:1a:f8:b3:3a:df:
                    59:7d:c2:21:26:ad:a5:09:70:2b:de:47:40:eb:3c:
                    8b:00:07:05:f3:b8:ce:8d:c4:13:18:64:bd:98:4b:
                    b1:2c:f1:f5:1f:6d:84:6d:01:26:25:11:ac:ef:21:
                    d7:d8:a8:a3:2f:fd:aa:3f:31:27:2c:32:9b:89:c2:
                    2d:ac:8a:c2:3c:25:74:92:0d:8c:de:ab:05:d5:4f:
                    a3:86:f0:8c:a6:d8:31:11:6e:22:69:cb:26:24:2b:
                    f4:f7:bf:2a:1a:c1:b6:3b:f6:3d:1a:c6:11:aa:ea:
                    47:65:8f:8c:2b:83:69:8e:d8:13:4a:bc:00:15:1a:
                    a8:ba:7c:2c:c4:fb:d0:54:01:6a:4e:7f:ae:69:5b:
                    76:cf:aa:7a:a3:ab:47:b5:fe:32:ac:b7:67:e8:cb:
                    bd:12:53:f5:94:f7:8f:df:39:43:f8:0f:c1:00:df:
                    bf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:69:D3:84:15:D4:52:77:64:6C:08:EB:5C:F4:A4:96:39:E9:63:81
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33362e36312e302f32342d3234203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:d4:b6:f1:5a:10:c3:d1:f9:50:4d:06:3d:1f:34:47:b7:da:
         3f:26:10:d7:a1:f2:c9:9d:5d:49:a5:f7:17:59:7f:7f:9c:bd:
         98:b9:3f:75:95:7e:37:11:a9:68:f9:1c:ca:92:2b:f6:c0:ce:
         a1:fe:55:e2:34:54:9d:cb:b4:d2:41:45:b0:12:cf:34:2a:e9:
         ca:3e:bf:69:3e:2a:a2:7b:7b:9d:7f:7c:77:1e:c3:5d:96:73:
         cc:84:7c:08:0d:bc:c7:e2:d4:4e:a0:5e:24:e1:be:a5:19:73:
         78:8c:1a:62:56:04:b6:91:d7:8f:80:72:12:47:a1:7e:31:e8:
         8d:39:d4:c2:23:52:fb:a4:31:dc:89:0b:b4:60:69:be:17:6d:
         b1:da:b2:f8:85:1a:23:84:b9:17:52:77:b3:35:fe:5d:a8:7e:
         70:b0:85:be:4f:e5:42:ee:9e:f0:b9:39:96:9d:b3:88:33:ff:
         49:25:1c:66:a0:0a:42:2a:ff:06:87:2d:d0:28:a6:f5:8e:43:
         7c:f4:78:77:c3:b0:51:f0:0f:d8:a8:31:94:c2:cb:bc:5c:2f:
         ed:a4:35:61:e1:ab:b5:07:34:0b:fd:49:27:7f:83:4e:f3:9c:
         c4:21:9d:07:b4:4f:8a:da:10:1a:d5:1c:3d:3b:09:60:7d:56:
         69:8b:75:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:42 2026 by rpki-client