Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          rgwahK35BHsUtzTFqulEq/atJOCazdcYV2WgFuWtENc=
Subject key identifier:   A8:72:26:1E:52:49:0C:59:26:60:FA:AD:A0:A5:BD:8C:F1:07:D4:C9
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       4982C4576AA31BFBBE700D301FB9A7BC0558D105
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:49 +0000
ROA not before:           Sun 31 May 2026 08:14:49 +0000
ROA not after:            Sun 30 May 2027 08:19:49 +0000
asID:                     151270
IP address blocks:        103.236.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:82:c4:57:6a:a3:1b:fb:be:70:0d:30:1f:b9:a7:bc:05:58:d1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:49 2026 GMT
            Not After : May 30 08:19:49 2027 GMT
        Subject: CN=A872261E52490C592660FAADA0A5BD8CF107D4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:82:15:62:9a:f8:63:2f:46:ae:55:33:2f:
                    83:8b:4f:26:42:b1:df:57:16:29:89:57:76:40:0d:
                    c8:8a:e3:0b:41:a9:bb:66:83:51:ae:da:64:eb:6e:
                    c3:8c:8a:be:11:71:7e:36:3b:e8:32:dc:20:96:f2:
                    bd:dc:9c:2a:86:d7:3f:8b:7e:22:26:04:1a:b0:c7:
                    ae:13:06:c0:da:1f:6e:ff:2b:f0:d5:ec:d8:ff:5f:
                    f1:dc:f2:35:ca:4f:24:b7:cf:50:91:7c:01:a2:56:
                    fe:d3:bd:78:28:1b:f6:fe:7b:c4:c8:67:37:d0:f0:
                    2d:0a:b0:f6:b6:18:5f:57:c2:8f:21:82:c0:a6:81:
                    35:51:d0:3a:96:8d:f9:6a:fa:05:7d:7a:6f:2a:4a:
                    0e:72:e0:16:95:20:c4:50:79:ec:b8:e2:86:aa:0a:
                    09:2f:54:25:82:f7:cb:95:22:3b:8c:08:e3:d8:a4:
                    91:f8:29:5a:03:1d:46:2f:42:bc:9f:92:e8:73:6b:
                    df:54:a7:e8:e8:c7:2b:f2:4b:c8:71:4e:56:8f:de:
                    90:70:d1:cb:70:2f:00:38:ef:99:09:4f:1a:07:2e:
                    4b:4b:71:2f:c4:2c:f3:d2:b9:14:d0:f7:81:5c:b1:
                    eb:c6:2d:b3:1a:48:8c:29:bb:1e:1f:2f:2b:82:4d:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:72:26:1E:52:49:0C:59:26:60:FA:AD:A0:A5:BD:8C:F1:07:D4:C9
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:93:e7:1e:a0:d0:c9:21:72:b3:4c:bb:12:aa:02:be:be:aa:
         e1:40:fd:88:1c:65:47:4f:98:a6:32:8a:f6:43:08:e6:3e:de:
         c6:b9:c1:75:be:7f:82:83:78:14:e4:a2:57:51:12:19:d9:5c:
         d6:c8:a9:ee:91:01:ed:63:03:d3:5f:c6:a0:6d:9d:37:97:88:
         5f:1e:23:0d:c5:6c:00:44:0a:13:88:88:0b:71:13:f0:1d:f1:
         2f:85:fc:16:df:24:ef:b0:ed:02:24:c5:2c:50:d9:8f:0f:db:
         b0:f6:35:63:6b:71:4e:35:90:ea:a5:97:08:ad:b8:ac:ad:81:
         d3:49:31:a4:9b:f2:e0:9e:8d:76:0c:07:84:ac:af:45:85:33:
         9c:f7:45:ff:2c:0a:e0:7d:15:e3:c5:46:55:0e:f7:81:4c:70:
         55:d3:d5:37:fa:ca:d5:e7:21:9d:db:a2:7f:77:a6:1a:24:db:
         6d:46:62:7e:ae:14:12:07:9f:74:79:e8:01:a2:d6:66:2c:be:
         3c:d2:53:fa:5f:3a:ab:1b:32:c2:55:40:ac:dc:31:81:f0:73:
         7f:cb:2d:46:cf:9e:bc:3a:1c:fb:9b:3a:b4:a5:25:ab:9c:2c:
         a2:c9:d2:f8:02:5d:74:21:36:a4:37:30:e1:de:b6:dd:d4:46:
         bd:d4:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:05 2026 by rpki-client