Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31362e302f32332d3233203d3e20313334373731.roa
File:                     3130332e33372e31362e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier:          11dlVd8fxS5FCZMBSgjdbcNY1ljjmpHUxOVOqtIa5qw=
Subject key identifier:   FE:0F:38:55:FF:DC:48:E9:4C:80:A3:F9:2A:CF:6A:1D:FF:E4:3D:F4
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       39865D00311E9B2F638BA33B1D0164553EDA3770
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31362e302f32332d3233203d3e20313334373731.roa
Signing time:             Wed 20 May 2026 06:51:52 +0000
ROA not before:           Wed 20 May 2026 06:46:52 +0000
ROA not after:            Wed 19 May 2027 06:51:52 +0000
asID:                     134771
IP address blocks:        103.37.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:5d:00:31:1e:9b:2f:63:8b:a3:3b:1d:01:64:55:3e:da:37:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: May 20 06:46:52 2026 GMT
            Not After : May 19 06:51:52 2027 GMT
        Subject: CN=FE0F3855FFDC48E94C80A3F92ACF6A1DFFE43DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:8c:47:f0:6a:17:ac:58:0b:6a:77:2d:4b:
                    02:1a:40:71:2c:d8:d1:f4:3e:aa:50:79:e1:36:df:
                    81:4f:d8:5a:b1:ba:46:88:10:71:5d:27:9d:e0:de:
                    8b:1f:dc:58:be:94:58:08:82:f9:fa:b7:e4:f8:e7:
                    b7:80:6e:e9:ce:88:64:70:d9:46:03:c9:5a:31:0d:
                    ba:26:ac:45:b6:e4:c4:6c:b1:f1:8f:1c:a6:58:cf:
                    93:87:7b:a1:f9:c6:36:01:73:a5:7d:2a:61:be:53:
                    e4:04:c6:56:20:f1:67:14:16:b4:2d:c3:5d:ea:b2:
                    22:be:b0:12:77:0a:25:71:00:67:76:7f:34:b5:b1:
                    3c:60:58:32:f2:42:e8:ca:c9:9a:55:47:7c:7c:df:
                    e2:50:0a:ba:7d:44:23:43:d0:65:78:2b:71:32:07:
                    7e:e2:cd:2e:70:17:59:68:fa:95:6b:56:0f:b1:47:
                    63:04:00:a7:cf:bb:81:c7:9c:72:37:ea:6c:c0:1f:
                    1f:f4:80:eb:54:89:17:a9:75:78:a6:27:6f:cc:2c:
                    15:d1:ed:41:64:66:4c:35:54:af:46:a2:35:2c:63:
                    2d:14:46:e8:79:2b:ad:3b:08:e8:ce:e0:7c:0b:ef:
                    a3:b8:66:c8:6e:d2:f4:ca:57:ac:9a:0b:39:51:0c:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:38:55:FF:DC:48:E9:4C:80:A3:F9:2A:CF:6A:1D:FF:E4:3D:F4
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33372e31362e302f32332d3233203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:25:c5:df:be:1c:21:08:6a:96:98:ac:25:6a:3d:63:3d:53:
         4b:85:e2:d4:22:ee:f9:6d:df:50:3a:11:3e:15:0e:00:b4:27:
         c1:b7:c4:80:a1:b6:82:46:c9:e3:10:d6:05:d1:ab:7d:a9:d8:
         b1:02:f4:ea:3e:58:fc:5e:20:b7:ce:0d:06:c9:ec:f3:cc:16:
         70:04:e3:3d:eb:b0:60:9c:ec:b1:80:0e:82:b7:c0:b1:8b:09:
         5f:5c:a3:a4:54:1e:b0:8d:c3:06:77:d4:75:a1:9f:52:e2:36:
         48:e7:6a:b8:86:ad:d2:6d:d0:7a:35:77:a8:44:80:c0:dc:16:
         a6:a9:b4:92:8a:4a:7b:9c:96:21:96:e7:12:1f:95:2a:9a:de:
         f0:e5:4c:2c:1c:47:cf:80:85:ee:e2:af:af:11:5f:a6:94:37:
         96:2a:70:3e:34:bd:d2:8d:13:1e:a2:37:f6:d9:38:b6:eb:de:
         0b:b1:46:29:5f:28:21:61:c9:2b:98:ec:d0:ff:48:31:e7:f3:
         2b:fb:00:84:60:8b:a4:07:2f:bd:28:a4:14:05:d1:38:a7:7c:
         d7:65:52:d2:d3:74:4e:e4:50:fa:e8:83:81:12:a3:01:df:2f:
         f8:7b:81:01:49:0e:5e:f3:5c:e3:17:c1:65:d1:cb:35:df:54:
         60:90:52:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:53 2026 by rpki-client