Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37392e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e37392e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          Vye1S1uf+za0+dH9mENE6PwL0dMYBHrcdgkg2JQrJHc=
Subject key identifier:   60:4F:2D:03:31:56:A7:C7:61:5A:4E:BE:4C:F3:82:7A:6B:73:7B:0B
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       0D3EE587A92342F9EBE03C18F75E78C6B05203C8
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37392e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:19:50 +0000
ROA not before:           Sun 31 May 2026 08:14:50 +0000
ROA not after:            Sun 30 May 2027 08:19:50 +0000
asID:                     151270
IP address blocks:        103.236.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3e:e5:87:a9:23:42:f9:eb:e0:3c:18:f7:5e:78:c6:b0:52:03:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:14:50 2026 GMT
            Not After : May 30 08:19:50 2027 GMT
        Subject: CN=604F2D033156A7C7615A4EBE4CF3827A6B737B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:2a:67:0c:06:48:d4:71:50:01:17:19:75:
                    1c:f5:e2:19:15:b5:22:00:f3:41:dc:07:72:2f:79:
                    ae:ab:e8:62:70:34:af:3b:f8:c2:8d:2a:4e:2c:31:
                    86:2b:c3:92:a5:25:67:ec:31:c4:85:ab:63:e1:7e:
                    89:b2:ec:5a:38:b4:d3:be:c0:4c:9a:a7:06:e8:b7:
                    89:f3:24:49:be:c1:48:fb:49:d9:a1:bc:f9:dc:41:
                    ab:d3:4d:bd:31:bb:97:a3:a4:4a:15:74:b8:6c:c8:
                    b5:d1:bd:41:51:9b:56:23:db:b0:cf:c4:99:98:d8:
                    b3:2e:92:f2:aa:1b:71:f1:49:d5:dd:a7:13:55:10:
                    54:6e:bc:eb:99:e5:54:75:1c:a2:85:1b:ce:ca:07:
                    8e:22:14:26:25:5c:1e:69:bb:6e:7f:f0:b2:a0:40:
                    16:5a:4e:54:8c:bb:48:88:67:d4:1b:4e:d1:a0:9a:
                    b0:6f:dd:86:dc:ab:3b:42:33:56:06:c3:3b:cf:d6:
                    1a:5a:55:f8:f0:ba:5d:dc:0d:2d:5e:89:0a:47:04:
                    80:1a:ba:68:e8:3b:72:12:d5:a0:13:65:d1:cf:0c:
                    17:67:85:c9:dd:1e:b8:7f:d8:bd:7b:80:86:8c:7e:
                    f0:01:3b:d6:ad:34:14:f9:9e:a6:9b:6b:7f:36:35:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4F:2D:03:31:56:A7:C7:61:5A:4E:BE:4C:F3:82:7A:6B:73:7B:0B
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37392e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:91:b2:b6:1d:01:04:75:ce:f3:77:a6:21:08:0a:53:61:7f:
         3d:33:c3:bc:0e:bc:9f:ec:19:f5:ba:4f:e7:25:03:bd:46:7c:
         64:44:49:3e:7d:56:1b:de:58:c7:6a:f9:f9:c3:42:35:ba:ba:
         f7:3b:2a:e6:53:9c:2e:f3:bb:14:8f:d4:91:37:9b:20:6a:61:
         2a:ee:d5:ae:c5:af:cb:e2:77:e8:98:1c:df:0b:0f:99:36:55:
         b5:62:87:dc:f1:1b:93:13:22:5e:77:a8:70:04:b7:84:1f:bb:
         ca:fd:f7:e2:fb:3a:73:1f:4e:d2:ad:bb:0c:9d:ea:5a:c5:02:
         86:6f:04:a0:62:9c:4d:ba:3e:dc:e5:9d:97:c8:70:6b:9d:9a:
         a2:65:e1:51:70:30:01:83:8d:74:6a:e0:d2:0f:27:0b:9c:ea:
         7a:62:97:b5:0c:09:c2:fe:27:56:74:64:b0:f7:17:5f:4f:f9:
         d5:e1:b3:15:66:0e:15:37:d1:e7:eb:49:60:b3:3a:52:6c:8c:
         4f:22:37:89:2f:ca:18:25:48:61:e9:1f:62:79:f9:fe:7f:a4:
         cb:58:16:e7:42:05:42:6b:85:0d:44:a4:34:d6:c5:eb:d9:c4:
         1d:9a:9a:e5:8d:ca:83:e9:36:59:89:a4:7f:82:73:09:f3:e8:
         0e:61:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:53 2026 by rpki-client