Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39302e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e39302e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          4ezygFOoaF8eOqaowMl4ABOsaDHIe68Wt8C0PPUGgg4=
Subject key identifier:   84:69:31:47:9D:9B:B7:C9:FC:0E:FA:BF:12:A7:0C:6D:AB:A8:F7:96
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       1C70CB42F70CB374091E4F6A24BC01D827F73594
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39302e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:20:44 +0000
ROA not before:           Sun 31 May 2026 08:15:44 +0000
ROA not after:            Sun 30 May 2027 08:20:44 +0000
asID:                     151270
IP address blocks:        103.236.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:70:cb:42:f7:0c:b3:74:09:1e:4f:6a:24:bc:01:d8:27:f7:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:15:44 2026 GMT
            Not After : May 30 08:20:44 2027 GMT
        Subject: CN=846931479D9BB7C9FC0EFABF12A70C6DABA8F796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:2d:90:26:f4:1e:80:2e:cb:56:1b:eb:d2:
                    a1:c3:fb:dd:fe:ed:f2:bd:02:bc:41:bf:dd:3d:b3:
                    7a:e5:48:a0:0f:41:88:ae:10:b2:5b:e3:9d:92:c1:
                    30:52:6f:d7:79:21:19:fa:7a:c6:f6:d6:2c:9d:c5:
                    95:6f:78:d5:f8:d7:ae:d5:bd:27:7d:fe:87:8a:39:
                    06:8a:cf:6c:c4:21:7d:3c:3f:02:3d:21:8b:66:84:
                    5e:bc:e3:8b:85:66:39:03:ee:d1:98:87:60:96:cf:
                    b6:47:26:0d:32:0d:01:a1:9a:a8:98:34:68:c8:06:
                    b5:2d:a5:0e:da:9d:fd:7e:e4:f8:e0:b5:ea:2d:ee:
                    90:61:1b:61:67:80:a9:e2:a5:a4:67:8b:46:bf:39:
                    7b:f9:5d:19:22:98:1a:58:2a:c9:03:79:4a:cb:cb:
                    18:49:cc:ee:f4:e9:de:f3:e5:bc:13:50:71:c4:13:
                    db:da:24:c1:d0:58:0c:16:3d:8a:ee:a5:45:5b:96:
                    a9:d2:af:6b:30:0d:18:4e:bc:5b:58:8e:13:e4:26:
                    88:e9:e6:43:06:56:36:e6:aa:1b:80:63:fb:fb:58:
                    ea:f8:74:48:0c:b9:3d:46:d2:82:ed:11:93:98:b2:
                    9c:a4:72:89:fa:70:b5:9b:a3:33:5c:8d:c0:c3:e6:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:69:31:47:9D:9B:B7:C9:FC:0E:FA:BF:12:A7:0C:6D:AB:A8:F7:96
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39302e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:d7:80:85:18:54:35:dd:c2:fc:7f:2c:16:91:b5:1d:bf:
         d7:96:99:fb:ee:61:18:d5:d7:5c:60:31:71:52:64:ed:4d:12:
         45:69:d8:6d:dd:ca:27:e8:70:4d:7b:0d:5e:f3:e9:99:ba:7e:
         a1:aa:00:e8:15:04:93:a8:98:d9:20:75:d3:c0:43:2c:3c:dc:
         03:f9:d4:35:48:1f:83:81:e8:c2:1b:da:2e:45:0a:51:56:a2:
         c6:08:75:45:f7:46:38:ef:85:2f:2d:eb:92:17:8b:74:f2:7e:
         ef:48:67:54:f5:d7:0f:87:e9:0e:a0:8f:35:2c:1a:b0:31:74:
         98:51:8e:04:68:5a:2c:b8:0a:d6:75:6b:c3:f0:cd:d2:97:44:
         f1:c7:d9:c3:f6:a9:53:16:48:e2:21:82:f5:09:f1:29:6c:4f:
         78:a0:a0:f6:f6:37:90:80:1c:13:69:06:0a:2d:bc:d8:e0:46:
         44:c1:5a:93:64:5a:cb:71:0a:75:f7:b7:78:8b:b0:cb:38:c6:
         08:86:de:ae:ed:8b:45:d3:23:c6:89:1f:a7:b2:d3:c2:5e:63:
         4a:79:e1:9a:72:fb:ba:d5:08:76:96:b5:6e:1c:58:12:bf:4c:
         11:df:e9:b7:d3:07:3b:ab:c6:96:a2:fa:1f:ca:5d:fd:3f:f7:
         5d:a3:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:02 2026 by rpki-client