Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS134700.roa
File:                     AS134700.roa (raw, json)
Hash identifier:          B4jmUepHmKAgBdyq2W1dJWhLS1GNhViImUt+/Tt3XT8=
Subject key identifier:   93:6A:17:73:23:12:2C:B9:CF:A7:33:14:84:BD:42:DA:78:0E:41:9C
Certificate issuer:       /CN=A915370F0000/serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
Certificate serial:       162EA07A832FB98ABB0BD36D2F80F0D6A33F5D49
Authority key identifier: 01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS134700.roa
Signing time:             Mon 08 Jun 2026 06:54:11 +0000
ROA not before:           Mon 08 Jun 2026 06:49:11 +0000
ROA not after:            Mon 07 Jun 2027 06:54:11 +0000
asID:                     134700
IP address blocks:        101.36.80.0/24 maxlen: 24
                          101.36.81.0/24 maxlen: 24
                          118.194.225.0/24 maxlen: 24
                          118.194.226.0/24 maxlen: 24
                          122.10.128.0/24 maxlen: 24
                          122.10.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2e:a0:7a:83:2f:b9:8a:bb:0b:d3:6d:2f:80:f0:d6:a3:3f:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F0000, serialNumber=0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9
        Validity
            Not Before: Jun  8 06:49:11 2026 GMT
            Not After : Jun  7 06:54:11 2027 GMT
        Subject: CN=936A177323122CB9CFA7331484BD42DA780E419C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:68:69:1f:5b:bf:d4:44:8b:0e:e5:df:ab:
                    51:38:b2:da:e3:20:5a:f3:02:80:b3:63:24:a3:55:
                    4d:5c:cf:b3:ad:38:87:6c:e0:fe:8e:88:30:e9:c6:
                    00:38:47:a4:9e:b6:17:cf:12:10:bd:05:a5:cb:62:
                    cf:68:b6:69:6c:72:b6:46:81:e7:2f:3b:69:5b:36:
                    c8:1c:3e:d1:74:b2:e6:e0:a4:9f:9c:f5:26:39:94:
                    03:77:3d:53:b1:3f:21:d1:96:dc:cf:0e:7d:11:4e:
                    66:80:de:82:e1:0d:12:13:1a:2f:e8:1d:6a:bd:42:
                    e4:29:51:68:f0:77:b2:b0:6e:47:26:4b:2e:74:f5:
                    2f:4d:d1:45:28:dc:4e:89:cc:2f:35:42:b2:db:89:
                    29:0e:ba:18:11:2c:24:35:6a:60:f2:ce:e4:1a:1d:
                    8c:53:62:b8:ac:9f:05:c6:cf:37:8b:33:7f:4c:d8:
                    73:74:ed:fe:59:1b:90:6b:80:cc:78:f0:3d:14:b8:
                    73:6a:d8:f7:be:15:a6:60:a7:83:cf:fc:9a:b8:d8:
                    89:1d:93:4a:ad:f3:04:77:0b:7f:be:48:01:8a:8b:
                    c2:3d:9e:93:29:c6:51:95:57:9f:d5:85:4d:39:3d:
                    e3:9c:23:fa:d7:c2:5c:71:35:8c:0f:61:66:64:73:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:17:73:23:12:2C:B9:CF:A7:33:14:84:BD:42:DA:78:0E:41:9C
            X509v3 Authority Key Identifier:
                keyid:01:82:D4:CD:0C:6D:21:DC:2C:29:6E:D2:60:6A:70:D7:96:D5:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/0182D4CD0C6D21DC2C296ED2606A70D796D5BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AYLUzQxtIdwsKW7SYGpw15bVu7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113654806364422163/0/AS134700.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.36.80.0/23
                  118.194.225.0-118.194.226.255
                  122.10.128.0/24
                  122.10.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:22:d6:cf:59:bd:fc:4d:ef:55:d9:9e:e9:50:19:b5:9a:8d:
         61:f1:dd:b4:e0:a3:64:43:40:94:68:c1:6e:42:bc:d1:09:da:
         d4:b9:a6:ed:09:9f:88:59:8e:a4:80:8d:14:74:d6:f1:56:ec:
         67:cd:cb:15:00:f7:87:98:73:53:ac:f5:bd:49:06:d3:94:d5:
         4b:82:78:0a:bd:82:9c:75:6c:3b:0d:52:8d:e1:a4:04:2e:07:
         26:4d:b0:41:2f:db:ac:d2:46:cf:c9:22:04:c2:78:65:a3:ea:
         4e:05:c1:b9:23:04:db:14:52:7d:84:ac:27:cb:eb:2b:9c:c6:
         d5:b0:a2:41:59:20:e3:23:0d:b5:37:96:e8:b6:84:4b:4b:06:
         35:52:93:2d:8f:7e:4b:5b:e1:9e:ea:78:30:81:06:7a:18:ed:
         f4:af:99:bd:a1:4d:25:5a:41:43:8d:f3:76:55:b9:bb:95:90:
         7e:95:39:24:5b:e0:fc:9f:4c:ad:e6:93:4d:b6:e4:89:34:db:
         ae:11:71:76:03:ee:8a:bb:c9:b3:1e:be:36:df:63:2c:26:e0:
         e8:7f:e1:27:e6:10:0f:b3:03:09:4d:a1:f6:f6:6b:5b:37:56:
         1d:9d:f6:fa:65:e7:f4:5e:68:8a:2f:3b:cd:69:9e:0d:ec:d4:
         00:c8:07:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:38 2026 by rpki-client