Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38342e302f32332d3233203d3e20313334373731.roa
File:                     3130332e33382e38342e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier:          OYkfJy2ZCj4Za/TpRKMfPiyKkrrwUTpMXOXuHJ2od5U=
Subject key identifier:   34:5E:E6:CF:6E:0B:B6:36:87:06:9B:34:55:79:70:53:6B:B7:74:A8
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       562609D80032AE35888073ECA9C95F542EC9E459
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38342e302f32332d3233203d3e20313334373731.roa
Signing time:             Wed 20 May 2026 06:50:16 +0000
ROA not before:           Wed 20 May 2026 06:45:16 +0000
ROA not after:            Wed 19 May 2027 06:50:16 +0000
asID:                     134771
IP address blocks:        103.38.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:26:09:d8:00:32:ae:35:88:80:73:ec:a9:c9:5f:54:2e:c9:e4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: May 20 06:45:16 2026 GMT
            Not After : May 19 06:50:16 2027 GMT
        Subject: CN=345EE6CF6E0BB63687069B34557970536BB774A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:2c:f1:54:49:bc:25:1f:45:1e:8d:c2:a3:
                    f5:0a:3d:80:f3:9c:d7:96:9d:c7:e8:79:97:51:8b:
                    16:86:1f:0e:1f:74:4c:28:2a:78:5d:75:03:23:1f:
                    6c:60:e2:2f:87:e8:a2:35:50:fa:ce:d0:75:6c:2c:
                    88:f0:32:28:cc:e2:33:4a:95:78:44:37:85:54:2c:
                    cc:2a:96:e2:7a:46:c2:a8:93:c4:68:51:fb:20:56:
                    34:de:f2:5c:68:b5:64:20:37:a2:85:48:ac:64:45:
                    b9:c2:49:39:55:21:b6:7f:21:96:98:93:ad:fd:76:
                    e9:dc:2e:f0:ea:b7:1a:ca:d8:d8:46:11:19:90:af:
                    5f:72:7a:54:85:7a:cd:27:ad:b3:18:7f:46:c0:2a:
                    8e:25:42:4c:a7:b6:3d:da:97:9b:dc:bf:d0:c6:d2:
                    db:80:26:33:a9:a2:09:26:2c:8f:15:79:1d:d8:63:
                    1b:5f:52:36:fe:51:eb:65:54:eb:2c:9c:96:84:0e:
                    8a:5e:12:14:6b:b2:1e:f6:1c:0f:de:55:10:48:fa:
                    7e:b2:60:dc:93:de:5f:9c:5d:e5:08:87:3e:98:46:
                    40:70:f5:f8:ba:5a:1a:9c:bc:e8:a2:ef:05:c3:19:
                    97:8d:40:1d:b7:fa:a8:9a:98:7d:5d:bd:b1:2d:91:
                    1c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:E6:CF:6E:0B:B6:36:87:06:9B:34:55:79:70:53:6B:B7:74:A8
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38342e302f32332d3233203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:bd:e3:d6:22:da:ad:1e:3a:4f:94:c2:9a:2e:72:19:b9:30:
         ee:a7:3a:70:cb:96:17:07:b9:f7:90:ef:06:3e:35:a3:0a:8a:
         f4:b9:2d:70:07:f6:4a:73:56:ce:da:c6:fd:3c:04:9a:2b:38:
         24:b0:f3:67:86:70:82:78:55:de:46:f4:56:03:a9:2c:56:c8:
         1f:3f:d1:66:b4:c3:77:e9:eb:ec:3b:fc:36:51:4c:4a:de:b5:
         03:4b:f1:a5:75:dc:0e:d5:9a:12:5e:82:3a:9e:e0:10:c8:82:
         02:61:a8:f4:42:d7:ca:3f:b6:7f:74:60:f8:70:07:37:fa:5f:
         4c:5e:44:27:41:a1:dd:b0:7e:cc:d2:43:45:b0:07:5d:94:99:
         c5:c2:e8:d6:6d:bf:91:0f:5b:a0:ca:a9:2c:25:c7:7f:d4:50:
         59:15:ca:05:02:f3:1a:fa:db:c9:5e:06:21:6d:be:cf:49:7e:
         7d:2f:a2:5d:e9:d4:db:4e:f6:f8:4c:92:5e:32:09:cc:82:e5:
         86:a5:02:9d:88:54:65:a1:71:db:bb:ca:e2:2f:b4:f2:0f:5b:
         a8:5e:af:8b:ae:7a:27:1b:66:0c:47:14:91:15:8b:6c:ee:75:
         8c:a9:e3:82:66:76:98:bd:58:df:06:1f:b3:9b:8a:8d:58:04:
         3a:06:7f:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:38 2026 by rpki-client