Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32342d3234203d3e20313531323730.roa
File:                     3130332e3233362e39322e302f32342d3234203d3e20313531323730.roa (raw, json)
Hash identifier:          ARu/PAfbnJba0ahEwpyoCexXBgd2q9AdRXpu8PUAnBs=
Subject key identifier:   56:64:6C:46:E8:2A:54:5C:E6:93:58:3E:2A:64:19:33:35:EE:59:94
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       0D730591E1F49F1ED70E2B08F3F62D4E98C6A5ED
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32342d3234203d3e20313531323730.roa
Signing time:             Sun 31 May 2026 08:20:43 +0000
ROA not before:           Sun 31 May 2026 08:15:43 +0000
ROA not after:            Sun 30 May 2027 08:20:43 +0000
asID:                     151270
IP address blocks:        103.236.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:73:05:91:e1:f4:9f:1e:d7:0e:2b:08:f3:f6:2d:4e:98:c6:a5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: May 31 08:15:43 2026 GMT
            Not After : May 30 08:20:43 2027 GMT
        Subject: CN=56646C46E82A545CE693583E2A64193335EE5994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:3e:53:46:b9:a6:b1:73:45:ca:7e:2f:a2:
                    c9:00:15:b3:de:c2:58:ab:d2:98:d2:e5:30:70:ef:
                    8c:ab:d6:1e:9b:4e:e6:4e:fb:d8:f3:10:1b:42:36:
                    31:25:3c:8b:3d:45:a2:20:06:ca:d0:01:bc:f0:95:
                    d1:d7:99:32:bf:8c:f5:58:b6:8f:9a:28:84:01:21:
                    57:21:e1:85:67:34:f5:82:a3:2a:33:e9:ee:a6:ff:
                    2e:13:ed:df:35:9c:ea:58:28:63:2f:0b:fe:17:70:
                    0b:f6:29:c5:43:35:56:fd:92:62:4a:4f:8e:35:5c:
                    4c:7f:ca:3c:cf:3e:c4:56:4f:a1:1c:00:44:8a:92:
                    fe:98:35:c8:19:5f:c9:dc:f0:f9:c1:18:81:85:93:
                    76:b4:1e:4c:64:26:3f:0d:26:9f:5f:b2:ed:44:8a:
                    ec:cb:b4:bd:4f:12:74:ad:70:8d:1e:c1:45:d5:8d:
                    ce:3f:67:d3:8a:53:3c:cf:b2:0e:4d:67:7a:90:1d:
                    f1:1d:29:41:4c:bd:18:4f:fa:e0:d8:40:18:dd:bb:
                    06:a7:61:89:02:6f:b8:ad:43:22:09:fe:1b:71:44:
                    4a:65:9e:c2:0e:91:0d:43:13:0c:cd:82:5d:6e:07:
                    12:af:86:dd:fa:7c:5f:1b:82:0b:b5:30:74:ad:b0:
                    14:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:6C:46:E8:2A:54:5C:E6:93:58:3E:2A:64:19:33:35:EE:59:94
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32342d3234203d3e20313531323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f6:2e:43:76:1a:5f:dc:f2:f0:1c:0c:28:b5:4e:ae:a0:a8:
         76:d0:55:4b:64:2d:c3:e0:51:cd:5d:70:d1:72:71:cb:73:67:
         52:0b:82:b9:13:e4:b6:a8:97:81:33:98:80:33:28:25:98:66:
         b6:b8:27:17:9d:9a:b8:36:25:85:70:15:dc:33:c4:7a:79:4d:
         2c:92:5d:b7:ae:39:5b:1b:ed:0c:e9:d8:96:b0:47:69:d4:1e:
         7f:d8:9b:86:c8:0a:2d:68:cc:ea:fd:15:9a:21:ff:5a:c0:43:
         39:63:dc:d5:08:55:d0:58:45:1c:e2:7c:33:58:60:07:4a:f8:
         81:07:9b:24:ca:47:b2:1b:73:65:69:8b:54:ce:bb:e2:eb:af:
         6d:06:20:12:8b:02:a6:1b:f4:be:7f:27:46:6c:82:f1:25:3a:
         45:9d:04:d3:36:ea:c7:1e:3b:d4:ed:c5:3f:ea:b0:69:a2:0b:
         f2:48:0f:72:eb:f0:7c:5c:bf:e7:08:5b:34:e8:d8:64:49:3e:
         c9:35:8a:eb:1c:1c:f5:f9:38:71:22:44:d8:0e:42:b7:9d:63:
         83:a1:1f:8b:aa:7a:60:8b:c7:6f:bd:05:9b:9f:56:22:92:ec:
         03:b6:22:8b:22:75:9b:6b:da:59:b6:e5:41:09:87:1e:ff:b9:
         22:e7:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:43 2026 by rpki-client