Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37352e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e37352e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          DmqAoNH1HusjPD+4DOJj8ff/ShYpP6TDumhwn9D2xOY=
Subject key identifier:   6D:3D:7F:2D:87:EB:6A:D0:5A:0C:CD:49:C6:9F:38:D6:84:B4:48:E1
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       0419712456EC274BBE5B9EC2CE4FABC69940530B
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37352e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:50 +0000
ROA not before:           Sun 31 May 2026 08:14:50 +0000
ROA not after:            Sun 30 May 2027 08:19:50 +0000
asID:                     151270
IP address blocks:        103.236.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:19:71:24:56:ec:27:4b:be:5b:9e:c2:ce:4f:ab:c6:99:40:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:50 2026 GMT
            Not After : May 30 08:19:50 2027 GMT
        Subject: CN=6D3D7F2D87EB6AD05A0CCD49C69F38D684B448E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:25:4a:a0:36:12:85:d2:f3:5e:27:ff:72:
                    c8:f8:3c:b7:25:21:dc:d1:c6:0d:8f:36:c7:b6:88:
                    0a:36:19:ca:d6:a7:6d:05:4f:43:af:27:a1:b2:19:
                    82:a1:2c:87:a1:33:a6:a6:fa:f8:a6:4b:59:45:5b:
                    3d:90:c8:58:7e:40:22:e6:d8:93:2e:3f:2e:7f:ff:
                    ef:d3:1f:e6:56:a3:c6:5b:41:42:1f:ce:c0:85:f0:
                    14:6c:99:bb:a0:d9:62:55:31:d9:c5:c1:f9:75:62:
                    1a:45:a2:b5:49:e2:20:49:1c:2b:ec:e9:95:7c:60:
                    87:1b:01:90:13:56:2e:e8:e5:c3:f8:00:d0:dc:1b:
                    e9:2f:91:28:42:1f:ff:59:f6:83:0a:a4:54:3f:70:
                    12:dc:ca:46:c4:e1:ab:da:ba:88:d1:29:c0:16:1e:
                    b5:ca:5b:d0:ea:07:d2:82:b6:16:c8:47:4d:03:db:
                    73:99:5b:45:29:be:a0:09:3b:a8:06:0e:2b:5b:cd:
                    43:58:94:76:b7:c5:ea:a1:d5:c1:59:93:96:71:8f:
                    be:b4:5c:f0:ca:dd:0f:ff:54:30:0a:d2:66:a4:e3:
                    35:7b:fc:c0:3a:7b:ff:f4:d2:5a:14:1a:ab:af:b3:
                    fc:35:95:6b:39:42:18:1c:54:5a:6d:82:d3:d9:02:
                    0e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:7F:2D:87:EB:6A:D0:5A:0C:CD:49:C6:9F:38:D6:84:B4:48:E1
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37352e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:2a:c0:68:2a:6a:0d:f2:a8:6c:0a:e8:20:26:2a:a6:2e:
         39:13:92:a1:72:b2:06:c0:e4:cc:83:7f:3a:77:60:a1:ea:93:
         df:c1:61:ee:b2:e5:71:e8:33:0f:ce:f7:7d:70:59:e6:6c:80:
         fe:a2:4b:4a:12:6d:2c:f4:87:78:ae:83:3c:4b:85:0a:bc:fb:
         3c:e6:ac:08:3a:ba:48:e2:24:f5:8f:e6:ad:04:74:d3:89:6c:
         9c:d1:98:15:80:d9:f3:8d:5a:50:96:5f:b0:89:33:ac:69:8a:
         fc:72:1c:6e:bb:3a:1f:0e:cc:7f:9b:21:7d:b5:6e:02:b5:14:
         bd:f9:d1:69:cb:0e:44:22:69:68:bf:b8:c9:c2:2a:10:67:c7:
         d6:27:af:90:84:8b:ff:f6:4f:38:05:1f:bd:6b:c0:49:8a:87:
         74:28:a4:24:98:44:61:aa:69:bc:11:3e:69:f7:ee:72:ec:73:
         54:3a:4d:8d:f1:77:12:bd:fa:32:c6:85:33:96:02:76:f8:fa:
         31:1d:4e:eb:cc:7a:cd:00:a7:d1:50:f6:a0:70:3b:8a:76:e2:
         6c:a4:ff:b9:82:90:55:93:2f:f7:84:1a:ef:18:74:fa:fb:79:
         5e:e0:a2:ad:07:99:19:6e:62:9e:43:9a:ee:5d:f9:a4:51:49:
         2c:65:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:01:45 2026 by rpki-client