Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38362e302f32332d3233203d3e20313334373731.roa
File:                     3130332e33382e38362e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier:          mu/l8yjhPKatjhlzFVofGC+jYz2MEHU+ZBSSSLma3us=
Subject key identifier:   06:E3:38:F3:7B:3E:C4:17:2A:41:5B:C1:9A:15:A2:4E:14:95:80:89
Certificate issuer:       /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial:       76F84DB4729B4B4F1AF155E3E00B57F1E4F17E1D
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38362e302f32332d3233203d3e20313334373731.roa
Signing time:             Wed 20 May 2026 06:49:13 +0000
ROA not before:           Wed 20 May 2026 06:44:13 +0000
ROA not after:            Wed 19 May 2027 06:49:13 +0000
asID:                     134771
IP address blocks:        103.38.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f8:4d:b4:72:9b:4b:4f:1a:f1:55:e3:e0:0b:57:f1:e4:f1:7e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
        Validity
            Not Before: May 20 06:44:13 2026 GMT
            Not After : May 19 06:49:13 2027 GMT
        Subject: CN=06E338F37B3EC4172A415BC19A15A24E14958089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:db:ad:fa:ac:c3:4b:6b:ee:ed:e1:da:7d:
                    c9:f8:08:be:67:f9:4c:56:75:29:a3:c0:60:dd:d1:
                    4d:c6:7e:bb:61:74:d3:53:8d:7d:cd:8c:29:63:61:
                    57:82:44:b8:c2:dc:0a:d4:16:4b:34:34:d3:1b:c9:
                    e8:d6:45:49:1d:3f:0a:71:05:46:64:6a:cf:0a:3e:
                    e1:ee:57:60:96:05:0d:8a:86:a9:8a:f0:3d:a6:a9:
                    41:41:89:b5:83:fe:c9:1d:9b:19:3b:f8:20:22:84:
                    b1:15:69:f1:99:3b:ca:a3:b0:34:28:a2:3d:30:b4:
                    2b:7b:c2:e1:c2:5f:41:bd:81:40:b9:9a:84:2e:e5:
                    7b:01:a9:70:0a:b7:ae:ec:3e:83:3b:b0:ea:ad:33:
                    60:ee:81:30:98:f8:4a:31:b0:e5:c7:1e:b3:61:91:
                    6d:3c:c8:86:02:68:22:63:f2:49:a7:d7:fa:ae:32:
                    63:c5:fc:91:ce:39:fc:6c:b4:a8:11:4c:1a:f9:bd:
                    5d:11:fb:d6:ca:7f:29:6a:b8:ba:5c:a5:b4:e8:4d:
                    d2:c2:b2:e2:1d:e1:45:09:a4:ca:2c:ad:c5:95:ce:
                    28:f5:ef:53:09:00:3e:a7:08:f0:f3:2b:50:a6:d2:
                    b0:fd:d3:3d:70:ba:d3:b4:a3:f9:c4:c3:e9:cf:df:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E3:38:F3:7B:3E:C4:17:2A:41:5B:C1:9A:15:A2:4E:14:95:80:89
            X509v3 Authority Key Identifier:
                keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/3130332e33382e38362e302f32332d3233203d3e20313334373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:a0:5e:a7:5a:cc:d5:2e:3b:18:bc:5f:d6:ab:91:62:12:a9:
         81:0f:e1:f8:df:f7:28:7e:f1:01:7e:60:46:c2:3e:78:6e:0c:
         5f:32:14:33:ba:cc:d9:e8:e2:89:98:e4:bf:38:9c:66:01:94:
         6d:2b:d6:92:0f:3c:34:48:c2:5d:c6:63:ec:2c:2e:32:8b:d3:
         f7:d8:eb:a8:75:cb:90:2c:ef:f2:5d:c7:51:90:47:d7:76:ea:
         76:f6:92:b5:5f:56:0c:76:8d:c3:42:2c:09:34:5e:3b:bf:7c:
         46:59:5c:dd:e9:1a:22:de:90:ff:f6:d1:a5:e2:c8:86:04:59:
         f4:fd:1c:2a:2e:f2:2f:14:ff:5a:d2:f2:8e:a4:57:77:43:7f:
         f8:c9:6b:38:05:d0:a2:00:6e:8c:ab:b2:89:77:8f:85:99:5c:
         44:4f:df:ef:a5:43:60:4a:b2:29:07:0a:f5:6e:30:c9:88:0a:
         4d:c6:4d:67:0f:3f:71:65:ca:dc:23:84:0a:8c:bf:e3:4a:2b:
         73:c0:06:0f:d0:89:94:3c:65:89:4c:8e:21:98:1a:8d:0a:0a:
         1f:ba:46:36:81:43:05:8b:ee:b6:e2:55:a9:9a:b8:aa:5b:9b:
         8a:1e:cc:da:47:ad:6f:dc:56:ea:2b:5c:8d:51:ad:ad:bf:f0:
         00:19:63:94
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdvhNtHKbS08a8VXj4AtX8eTxfh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5
MTcxQzc5NjAeFw0yNjA1MjAwNjQ0MTNaFw0yNzA1MTkwNjQ5MTNaMDMxMTAvBgNV
BAMTKDA2RTMzOEYzN0IzRUM0MTcyQTQxNUJDMTlBMTVBMjRFMTQ5NTgwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDh9ut+qzDS2vu7eHafcn4CL5n
+UxWdSmjwGDd0U3GfrthdNNTjX3NjCljYVeCRLjC3ArUFks0NNMbyejWRUkdPwpx
BUZkas8KPuHuV2CWBQ2KhqmK8D2mqUFBibWD/skdmxk7+CAihLEVafGZO8qjsDQo
oj0wtCt7wuHCX0G9gUC5moQu5XsBqXAKt67sPoM7sOqtM2DugTCY+EoxsOXHHrNh
kW08yIYCaCJj8kmn1/quMmPF/JHOOfxstKgRTBr5vV0R+9bKfylquLpcpbToTdLC
suId4UUJpMosrcWVzij171MJAD6nCPDzK1Cm0rD90z1wutO0o/nEw+nP33w/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUBuM483s+xBcqQVvBmhWiThSVgIkwHwYDVR0j
BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC
QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjY4NjczMDgyNTc2MDc3MS8wLzMxMzAzMzJlMzMz
ODJlMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzczMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWcmVjANBgkqhkiG9w0BAQsFAAOCAQEAOqBep1rM1S47GLxf1quRYhKp
gQ/h+N/3KH7xAX5gRsI+eG4MXzIUM7rM2ejiiZjkvzicZgGUbSvWkg88NEjCXcZj
7CwuMovT99jrqHXLkCzv8l3HUZBH13bqdvaStV9WDHaNw0IsCTReO798Rllc3eka
It6Q//bRpeLIhgRZ9P0cKi7yLxT/WtLyjqRXd0N/+MlrOAXQogBujKuyiXePhZlc
RE/f76VDYEqyKQcK9W4wyYgKTcZNZw8/cWXK3COECoy/40orc8AGD9CJlDxliUyO
IZgajQoKH7pGNoFDBYvutuJVqZq4qlubih7M2ketb9xW6itcjVGtrb/wABljlA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:34 2026 by rpki-client