Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          T0iRG1LSk3N7SvUJEd9KIPoUpnKwQSWSnEmEp+hpnHg=
Subject key identifier:   79:2E:66:F2:17:DE:65:A6:43:83:E4:22:DD:05:8B:90:BF:54:7F:18
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       401F11907428DE55DCF0F06F04355E80F3E88E34
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:49 +0000
ROA not before:           Sun 31 May 2026 08:14:49 +0000
ROA not after:            Sun 30 May 2027 08:19:49 +0000
asID:                     151270
IP address blocks:        103.236.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1f:11:90:74:28:de:55:dc:f0:f0:6f:04:35:5e:80:f3:e8:8e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:49 2026 GMT
            Not After : May 30 08:19:49 2027 GMT
        Subject: CN=792E66F217DE65A64383E422DD058B90BF547F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:78:fc:ef:c7:6b:ff:a4:87:9f:9d:17:b3:65:
                    3a:d9:7e:e0:0c:71:b1:33:3c:aa:b1:a3:5f:5d:0c:
                    02:bb:35:34:b5:cc:32:de:38:fb:6f:1b:7d:fa:d6:
                    4e:a8:cc:94:f7:5d:c6:27:c4:36:6b:f8:22:db:0c:
                    64:2f:d1:60:9d:ee:9c:7f:44:db:17:f6:58:4c:83:
                    20:7c:c2:86:68:96:38:2f:e8:2f:8e:18:22:36:02:
                    5b:70:a3:12:26:e2:08:f5:bd:2f:68:4c:9c:3d:cb:
                    1d:0a:db:cc:b0:43:3f:21:6c:54:aa:2b:46:38:5c:
                    80:5f:23:51:23:3d:76:db:bf:e3:51:9a:73:cc:9e:
                    86:44:57:37:bc:ed:e4:1b:46:2a:35:d8:15:b7:aa:
                    29:68:bd:7f:4c:f9:d5:f3:fc:d3:f9:72:85:cb:5d:
                    52:65:db:d4:fb:88:9b:bd:b5:8f:31:73:5d:3c:39:
                    39:46:9a:65:e3:db:1e:3f:9b:24:ec:2f:39:5c:24:
                    c1:ef:48:c0:1d:2f:3b:7f:36:32:83:08:25:06:91:
                    2d:ba:a7:a5:ee:c9:8b:a3:50:7a:53:af:fc:2a:f7:
                    16:9e:74:f6:d1:92:d6:5c:b6:58:16:23:9d:a6:24:
                    34:f6:cf:19:30:40:45:69:b2:1f:3b:17:80:e6:22:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:66:F2:17:DE:65:A6:43:83:E4:22:DD:05:8B:90:BF:54:7F:18
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:86:c8:c1:e5:65:13:48:fb:9d:b7:f1:74:e5:e6:59:17:99:
         a6:de:84:5c:31:6a:5d:60:df:30:d5:1a:66:19:c6:71:06:73:
         60:1a:cd:25:4e:ea:47:3b:3c:56:58:b0:f3:c4:ae:6a:db:cb:
         2f:fe:79:f4:f6:e7:93:12:03:df:cd:30:e0:11:ed:6c:92:5e:
         60:40:bb:ea:26:4c:c3:0f:92:9f:4e:8e:9f:ed:0e:52:d9:8d:
         98:97:a0:b4:63:72:9d:3f:f2:c5:2f:c5:37:78:b4:55:2f:90:
         98:ea:fe:3b:12:e0:05:d0:83:23:33:bf:17:18:8f:5f:e0:d2:
         27:0d:42:5a:fc:d4:44:ba:9d:ab:c1:45:f6:9b:5f:5d:41:78:
         0a:ae:06:50:d5:12:64:6f:fc:b1:64:85:b1:24:8e:82:ab:fb:
         f6:83:c9:ab:2a:15:e8:48:85:c9:71:d9:64:1e:96:c3:eb:bb:
         13:87:e9:0a:32:29:e9:1f:7f:e2:c5:25:7e:b9:60:7e:3b:c8:
         df:80:58:12:3e:c0:21:05:ab:b4:14:6f:c8:72:d7:2f:9b:f1:
         50:47:d8:d4:0e:15:52:9f:73:21:d2:3c:3a:9e:f1:98:77:09:
         a2:3a:62:13:f3:eb:7f:a8:57:32:03:1e:52:cb:7f:fe:16:c3:
         0b:72:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:47 2026 by rpki-client