Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          gxwezrVXiIKGsVvDtYSFR/kcwiLMit2NuAXJU/AjvEw=
Subject key identifier:   58:C6:30:3C:7F:47:FF:0F:D1:95:BC:B6:39:F2:69:B9:64:D9:F7:52
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       A284207C0D618565AE1F94788746A6D4729897
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:50 +0000
ROA not before:           Sun 31 May 2026 08:14:50 +0000
ROA not after:            Sun 30 May 2027 08:19:50 +0000
asID:                     151270
IP address blocks:        103.236.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a2:84:20:7c:0d:61:85:65:ae:1f:94:78:87:46:a6:d4:72:98:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:50 2026 GMT
            Not After : May 30 08:19:50 2027 GMT
        Subject: CN=58C6303C7F47FF0FD195BCB639F269B964D9F752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:7b:6e:77:16:31:26:a5:86:01:66:9e:71:
                    32:8f:09:20:ee:d4:68:60:a0:a9:4b:2c:16:96:9c:
                    cf:07:c2:90:cc:25:6a:48:f3:56:fa:76:55:7a:38:
                    80:0b:87:7b:18:74:c0:2c:f1:e5:a7:eb:58:a2:b4:
                    96:dc:5d:d7:41:45:e6:cc:80:fd:27:12:f8:df:43:
                    09:2e:fc:81:17:b5:71:4c:b4:6c:18:34:a0:28:d6:
                    e4:8a:b6:32:d3:96:b9:a8:16:ca:4f:7c:1b:78:e5:
                    62:6a:74:4e:a4:6e:e8:5a:b0:73:49:af:fe:6a:4d:
                    e2:16:da:16:ee:05:d0:55:03:9e:c5:0f:79:a2:09:
                    8b:10:70:76:f6:82:0c:9c:00:0a:30:c0:81:ea:8d:
                    a2:73:ed:c9:8b:e0:2e:04:71:12:2a:3a:db:a4:62:
                    6b:30:70:44:fa:29:7a:43:18:cf:62:f8:ea:0d:67:
                    f0:ec:1a:bd:9e:a1:08:59:ca:4f:fa:85:54:f1:92:
                    80:52:8c:8f:75:f0:3b:bc:3a:43:8d:78:e7:41:8e:
                    77:9e:74:1f:21:d1:82:71:6c:3b:42:a2:cb:b5:f4:
                    ed:a4:d3:2c:ad:1a:18:77:18:40:31:e0:a7:4d:21:
                    29:03:be:0e:00:2b:49:ad:13:da:f2:26:ab:d6:bd:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:30:3C:7F:47:FF:0F:D1:95:BC:B6:39:F2:69:B9:64:D9:F7:52
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37382e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:6a:9a:e3:c9:f4:0e:4e:ca:41:1a:0d:1b:9c:ce:0c:41:
         71:0e:e3:ed:bd:1a:47:fd:32:56:1d:cc:64:45:d1:06:c2:d4:
         e0:f0:88:cb:c3:b0:51:18:9f:59:19:d8:89:36:35:11:79:f0:
         48:55:a5:0e:5a:b1:61:c0:ab:b0:f4:2c:4f:84:9e:df:cb:65:
         1d:e1:b7:21:f9:df:08:4f:f3:28:b2:84:90:d0:1a:d1:ec:a6:
         96:ad:5c:eb:a0:0a:dc:20:d4:bd:87:6c:29:ef:56:9c:ec:de:
         c5:11:d0:b2:04:a8:1d:64:63:af:c5:d9:f7:b9:b6:c9:14:e9:
         14:55:cd:2d:bc:fb:3d:c3:8a:f5:6b:85:e5:6a:dc:a1:ae:44:
         df:cd:f3:80:77:3d:27:af:d0:fc:e6:4d:bf:6b:6f:f6:17:d9:
         a7:b2:ed:00:3b:c4:27:dd:b7:fd:cd:4e:3f:39:f0:aa:a4:23:
         51:79:2f:de:68:93:33:04:d5:67:0e:ea:c5:29:33:b4:a6:b7:
         47:8a:ca:18:52:3c:9f:eb:ba:7e:46:73:79:4b:05:99:13:d3:
         a6:59:6a:c7:72:b4:83:1f:02:a4:e7:8a:5c:2d:ed:91:4d:5a:
         c3:f0:6a:61:1a:cc:98:46:22:ae:47:ac:b9:d5:cc:ad:01:89:
         4a:91:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:58 2026 by rpki-client