Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS215305.roa
File:                     AS215305.roa (raw, json)
Hash identifier:          KpVUYEaSuL0ZBkBn5fZd760A2uCNJ5jI+kNrrH5lB1g=
Subject key identifier:   A9:2B:AB:82:2E:D3:5A:9E:82:3D:1A:12:F0:BE:12:6D:F2:D9:57:4B
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3314268246F6C4B2E3FAE22711DD745E1CFABE57
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS215305.roa
Signing time:             Thu 11 Jun 2026 08:27:39 +0000
ROA not before:           Thu 11 Jun 2026 08:22:39 +0000
ROA not after:            Thu 10 Jun 2027 08:27:39 +0000
asID:                     215305
IP address blocks:        103.112.68.0/23 maxlen: 24
                          103.112.70.0/23 maxlen: 24
                          103.118.208.0/22 maxlen: 24
                          103.118.208.0/23 maxlen: 24
                          103.119.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:14:26:82:46:f6:c4:b2:e3:fa:e2:27:11:dd:74:5e:1c:fa:be:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Jun 11 08:22:39 2026 GMT
            Not After : Jun 10 08:27:39 2027 GMT
        Subject: CN=A92BAB822ED35A9E823D1A12F0BE126DF2D9574B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:e9:b4:ac:c4:aa:f7:a8:48:ea:e5:cc:1b:
                    3c:be:84:45:4f:cd:4c:4b:c2:31:a9:f3:13:c3:f5:
                    42:99:de:bf:be:a2:14:c3:4d:55:4f:76:f5:0f:6d:
                    5f:b8:15:4b:a8:31:0d:46:8a:ba:9b:85:e9:cc:35:
                    e4:54:ee:38:a1:49:cf:d4:85:e9:3a:18:4c:49:a8:
                    7f:ec:b6:57:fc:ed:a9:f3:91:e5:e5:f5:df:b9:de:
                    24:1e:2a:bc:6a:d5:04:e3:ad:97:1c:1d:be:d9:a3:
                    9d:a0:38:d8:fb:74:09:e3:05:d9:64:56:e4:6d:da:
                    2e:47:f4:6c:a9:10:9c:7c:52:74:10:01:25:20:38:
                    49:58:30:55:93:bc:a0:dc:12:8a:79:b1:22:92:7f:
                    71:92:f7:36:f2:f5:1d:9a:ff:e0:d4:4d:3f:ba:ec:
                    42:60:29:56:fc:12:99:db:1a:02:48:e5:e6:a5:ef:
                    f9:b1:a6:a0:ab:4f:21:69:81:b7:9b:86:64:4c:8b:
                    d0:41:91:7b:13:72:33:61:dc:27:7c:fa:6f:fd:50:
                    9c:ed:83:47:5b:fc:e5:13:68:f3:b0:22:5a:cc:90:
                    40:1c:9f:75:41:e0:49:f2:fc:a9:ba:6e:35:27:9b:
                    db:fd:27:02:33:90:8d:62:75:9c:67:99:37:06:42:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2B:AB:82:2E:D3:5A:9E:82:3D:1A:12:F0:BE:12:6D:F2:D9:57:4B
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS215305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.68.0/22
                  103.118.208.0/22
                  103.119.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:47:04:d0:ff:25:44:68:4c:45:79:7c:13:7f:a8:f2:74:
         46:81:a8:3d:d9:32:b6:27:8a:0f:48:2b:fc:a1:49:8e:e4:16:
         4d:81:81:27:5b:85:7d:1a:60:82:00:ca:54:7c:3b:47:c2:c4:
         d5:76:9c:5b:7e:fd:b9:d3:e3:f6:a3:7c:77:05:71:f6:1b:cb:
         1c:8d:bc:b3:ad:b3:f0:2e:70:19:87:bd:1c:35:21:74:c7:0f:
         42:42:f8:5d:6d:28:0b:b7:65:22:01:4f:cf:19:3d:6e:a5:4d:
         00:f3:0f:1e:e6:97:01:05:64:af:41:bd:32:3b:f1:8b:a7:67:
         5a:03:8d:b4:71:ee:65:0b:b1:d3:8d:60:79:5d:d6:83:59:7c:
         e8:af:fe:c6:ff:f8:69:5e:13:50:a9:99:47:a3:c4:07:0b:d4:
         ef:c0:fd:72:1d:1e:a9:60:c2:7e:e5:f3:f8:cb:6d:e2:2e:14:
         17:40:c0:b1:f5:17:d7:23:bc:71:f7:55:cb:3b:73:a2:8e:bc:
         46:1e:16:7b:3d:78:82:5b:c7:07:88:87:88:fe:54:cd:20:f1:
         d9:3f:10:1c:15:dd:4e:28:c2:5a:4e:be:0e:6e:8a:a7:22:dd:
         13:fc:0e:d4:65:23:6e:72:20:93:b6:85:e4:65:68:67:f3:5d:
         f8:22:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:02 2026 by rpki-client