Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37342e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e37342e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          Et2ChqEpfP/cMYy+6hfPvWopDyf8IK3J8KG6TUMIne8=
Subject key identifier:   1F:D4:08:98:96:05:86:52:C7:65:30:37:95:7C:07:57:6A:A1:83:42
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       54AB9D8B766D60CB90B79770536E5A23F43B09C5
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37342e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:50 +0000
ROA not before:           Sun 31 May 2026 08:14:50 +0000
ROA not after:            Sun 30 May 2027 08:19:50 +0000
asID:                     151270
IP address blocks:        103.236.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ab:9d:8b:76:6d:60:cb:90:b7:97:70:53:6e:5a:23:f4:3b:09:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:50 2026 GMT
            Not After : May 30 08:19:50 2027 GMT
        Subject: CN=1FD4089896058652C7653037957C07576AA18342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:1c:2e:ff:a6:1c:26:a5:46:70:ad:70:9f:
                    53:b3:83:81:c3:3c:a9:39:36:98:e6:7c:ca:9b:cc:
                    93:b3:e9:b7:ff:c1:25:42:f1:29:b5:a6:ed:7f:a7:
                    56:42:32:a1:05:6e:a7:f9:69:6f:6b:0c:74:67:9b:
                    92:a5:30:bf:d1:35:3a:de:53:c3:1c:ef:28:3a:8d:
                    55:9d:4b:a8:9b:2e:e5:cf:69:f4:4f:42:3d:f6:ad:
                    39:2b:72:29:c7:d9:23:c6:f6:aa:26:a8:40:f8:57:
                    a8:c4:62:6a:88:52:a6:7a:1c:3e:37:09:3e:b9:c3:
                    bf:5c:a5:de:f3:64:bf:6f:e1:45:f0:22:c6:43:09:
                    c3:5e:bb:65:11:55:72:2b:7f:07:3c:e2:ec:61:34:
                    b1:cc:df:71:94:0b:f5:18:72:e9:67:be:b9:1d:ce:
                    42:e8:85:e3:09:5f:b3:66:97:38:42:96:1b:f2:4f:
                    91:3f:88:31:e8:f9:8d:34:2e:09:79:d6:bd:90:a2:
                    4f:0d:0f:a7:70:db:34:ce:fa:21:05:e5:fe:7c:cd:
                    e2:ad:20:7d:e5:ab:c5:1b:a2:85:63:bf:ab:e2:ca:
                    81:da:38:d9:9e:71:45:81:31:8d:73:2c:90:d3:4a:
                    e6:01:78:16:57:4b:09:85:49:fd:6e:31:da:d9:d2:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:08:98:96:05:86:52:C7:65:30:37:95:7C:07:57:6A:A1:83:42
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37342e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0f:01:25:c3:68:8f:da:04:80:6a:bc:37:53:c7:c8:4c:b9:
         99:81:05:08:eb:2f:9b:8d:5f:07:ae:16:b8:94:02:56:98:21:
         17:a1:13:b0:ec:72:c7:ed:50:db:90:3b:05:46:a5:9e:f7:75:
         f7:7c:bd:7e:d7:3c:e0:5a:ec:7c:4d:ed:0f:66:a0:34:c0:40:
         78:a1:ef:8d:d3:e8:ac:a4:d6:53:8a:58:c2:80:5f:76:62:dc:
         22:c5:50:1c:79:26:97:56:fe:1d:db:70:3f:bc:47:16:76:16:
         d8:59:99:28:4c:81:ab:1f:b6:ad:97:5c:50:13:4a:fe:ea:7a:
         27:13:d6:68:e3:aa:64:64:6f:84:02:33:56:e4:ad:9a:c4:c3:
         69:3b:ab:a8:fb:2a:db:db:3c:03:f1:16:a2:ae:1b:5e:c0:dc:
         44:b5:2e:35:55:ab:8f:47:3f:36:5a:62:66:50:17:7e:d4:eb:
         d4:9e:0e:26:2b:7f:33:e6:9f:dc:3b:ed:18:13:84:5c:07:84:
         45:e1:c6:af:d4:24:d8:ab:87:80:1e:93:28:8f:1d:78:1d:76:
         1b:40:87:57:0e:8d:19:bf:cb:2a:30:b1:cf:fd:20:02:9c:96:
         89:96:30:95:e8:38:c8:ed:af:c6:93:06:ad:f3:d8:c9:3b:29:
         6e:fd:42:59
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUVKudi3ZtYMuQt5dwU25aI/Q7CcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjA1MzEwODE0NTBaFw0yNzA1MzAwODE5NTBaMDMxMTAvBgNV
BAMTKDFGRDQwODk4OTYwNTg2NTJDNzY1MzAzNzk1N0MwNzU3NkFBMTgzNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmhwu/6YcJqVGcK1wn1Ozg4HD
PKk5NpjmfMqbzJOz6bf/wSVC8Sm1pu1/p1ZCMqEFbqf5aW9rDHRnm5KlML/RNTre
U8Mc7yg6jVWdS6ibLuXPafRPQj32rTkrcinH2SPG9qomqED4V6jEYmqIUqZ6HD43
CT65w79cpd7zZL9v4UXwIsZDCcNeu2URVXIrfwc84uxhNLHM33GUC/UYculnvrkd
zkLoheMJX7NmlzhClhvyT5E/iDHo+Y00Lgl51r2Qok8ND6dw2zTO+iEF5f58zeKt
IH3lq8UbooVjv6viyoHaONmecUWBMY1zLJDTSuYBeBZXSwmFSf1uMdrZ0vpzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUH9QImJYFhlLHZTA3lXwHV2qhg0IwHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsSjANBgkqhkiG9w0BAQsFAAOCAQEAKQ8BJcNoj9oEgGq8N1PH
yEy5mYEFCOsvm41fB64WuJQCVpghF6ETsOxyx+1Q25A7BUalnvd193y9ftc84Frs
fE3tD2agNMBAeKHvjdPorKTWU4pYwoBfdmLcIsVQHHkml1b+HdtwP7xHFnYW2FmZ
KEyBqx+2rZdcUBNK/up6JxPWaOOqZGRvhAIzVuStmsTDaTurqPsq29s8A/EWoq4b
XsDcRLUuNVWrj0c/NlpiZlAXftTr1J4OJit/M+af3DvtGBOEXAeEReHGr9Qk2KuH
gB6TKI8deB12G0CHVw6NGb/LKjCxz/0gApyWiZYwleg4yO2vxpMGrfPYyTspbv1C
WQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:10 2026 by rpki-client