Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e37362e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          qjMeRwKY9mPAiJaV6f5iX6jjypKL1IFe1vy1rF7kgBE=
Subject key identifier:   52:09:FB:74:F7:F6:12:EB:A2:F6:A5:84:52:98:69:5C:25:32:90:CA
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       45D8BE029FF447A3B4FADFA437008235D1105D29
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:50 +0000
ROA not before:           Sun 31 May 2026 08:14:50 +0000
ROA not after:            Sun 30 May 2027 08:19:50 +0000
asID:                     151270
IP address blocks:        103.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d8:be:02:9f:f4:47:a3:b4:fa:df:a4:37:00:82:35:d1:10:5d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:50 2026 GMT
            Not After : May 30 08:19:50 2027 GMT
        Subject: CN=5209FB74F7F612EBA2F6A5845298695C253290CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4c:d1:bb:de:d2:42:13:fc:24:b9:e3:d7:18:
                    6c:eb:2c:b0:97:57:2d:9a:57:3e:55:c8:0e:ca:66:
                    7f:e8:4b:aa:69:56:17:28:54:2b:bf:03:06:25:ae:
                    bd:bf:b7:3a:7e:6c:12:fe:18:4f:c7:dd:80:99:89:
                    a2:42:47:69:d5:a7:2f:4e:16:3e:92:bb:5b:a0:65:
                    fa:eb:96:48:b4:10:97:84:40:86:d4:a1:07:2a:54:
                    39:3f:53:0b:b8:e3:38:9e:53:c9:44:14:d1:0f:a4:
                    0c:f1:e0:71:89:43:ca:87:f3:81:f5:9b:92:0d:16:
                    68:ee:12:10:fc:84:68:6c:0a:b1:dc:13:f7:33:03:
                    bf:78:cb:e7:7a:57:2e:df:4a:07:a1:b4:dd:21:b6:
                    a9:20:2a:3c:a6:cc:ed:91:60:7a:5f:16:f2:01:3e:
                    69:ff:6e:46:dc:fb:7a:46:a0:8a:0b:11:50:5f:94:
                    fa:b1:fe:ea:fa:03:20:57:c0:fd:7c:6d:e9:39:ad:
                    92:75:52:99:09:37:f1:57:38:52:8a:a2:df:ea:77:
                    b8:71:30:21:1e:f8:84:2a:49:d3:a2:a3:64:9b:2f:
                    f1:b4:b2:86:85:be:e2:00:54:27:4e:9c:79:f0:78:
                    4d:ac:7d:9d:16:15:67:d8:c8:9a:dc:3a:28:fe:17:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:FB:74:F7:F6:12:EB:A2:F6:A5:84:52:98:69:5C:25:32:90:CA
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:e8:77:09:97:33:83:11:6c:eb:f8:18:48:49:2a:d4:0b:
         ba:18:49:27:49:18:0c:a2:37:90:9c:d0:6c:f4:19:54:e0:27:
         ae:e8:d8:10:3c:6b:b2:09:e2:76:eb:ff:70:e0:1c:99:18:11:
         aa:aa:e6:f1:6a:75:e1:71:e2:cc:b0:7f:33:5c:15:ba:4d:a4:
         3f:d9:e0:30:44:b0:a9:45:64:f0:27:32:67:c0:94:30:bc:ea:
         74:85:4a:2f:c5:ca:2b:75:6f:1f:c8:12:4d:3a:8b:60:42:17:
         86:d7:f3:de:73:7d:47:e3:4a:13:82:5b:24:87:56:f7:1a:45:
         51:6b:9a:73:47:f7:67:5a:ba:53:26:9e:8d:13:20:98:7d:16:
         51:26:f6:86:43:d5:a7:c2:9c:53:27:35:5f:3d:41:cf:b9:30:
         d6:76:45:bd:9c:dc:70:87:87:5d:1e:4e:ed:88:54:71:52:eb:
         91:c8:6f:06:50:e0:ec:f0:79:91:7b:21:d8:cd:48:ae:4f:17:
         2d:af:83:26:82:82:62:30:c0:0e:b2:8f:4c:84:7d:8b:da:f3:
         d8:97:44:d9:08:37:01:6f:03:71:6b:f8:a4:9a:53:47:bb:73:
         e0:7b:f4:1d:4e:f8:1b:0b:54:4b:61:3c:b1:b4:2d:c2:2f:97:
         05:7a:c5:70
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIURdi+Ap/0R6O0+t+kNwCCNdEQXSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjA1MzEwODE0NTBaFw0yNzA1MzAwODE5NTBaMDMxMTAvBgNV
BAMTKDUyMDlGQjc0RjdGNjEyRUJBMkY2QTU4NDUyOTg2OTVDMjUzMjkwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVTNG73tJCE/wkuePXGGzrLLCX
Vy2aVz5VyA7KZn/oS6ppVhcoVCu/AwYlrr2/tzp+bBL+GE/H3YCZiaJCR2nVpy9O
Fj6Su1ugZfrrlki0EJeEQIbUoQcqVDk/Uwu44zieU8lEFNEPpAzx4HGJQ8qH84H1
m5INFmjuEhD8hGhsCrHcE/czA794y+d6Vy7fSgehtN0htqkgKjymzO2RYHpfFvIB
Pmn/bkbc+3pGoIoLEVBflPqx/ur6AyBXwP18bek5rZJ1UpkJN/FXOFKKot/qd7hx
MCEe+IQqSdOio2SbL/G0soaFvuIAVCdOnHnweE2sfZ0WFWfYyJrcOij+F0UHAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUgn7dPf2Euui9qWEUphpXCUykMowHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfsTDANBgkqhkiG9w0BAQsFAAOCAQEAjfrodwmXM4MRbOv4GEhJ
KtQLuhhJJ0kYDKI3kJzQbPQZVOAnrujYEDxrsgniduv/cOAcmRgRqqrm8Wp14XHi
zLB/M1wVuk2kP9ngMESwqUVk8CcyZ8CUMLzqdIVKL8XKK3VvH8gSTTqLYEIXhtfz
3nN9R+NKE4JbJIdW9xpFUWuac0f3Z1q6UyaejRMgmH0WUSb2hkPVp8KcUyc1Xz1B
z7kw1nZFvZzccIeHXR5O7YhUcVLrkchvBlDg7PB5kXsh2M1Irk8XLa+DJoKCYjDA
DrKPTIR9i9rz2JdE2Qg3AW8DcWv4pJpTR7tz4Hv0HU74GwtUS2E8sbQtwi+XBXrF
cA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:04 2026 by rpki-client