Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS10206.roa
File:                     AS10206.roa (raw, json)
Hash identifier:          JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=
Subject key identifier:   C5:0E:19:DA:A8:68:72:5A:2D:98:2E:30:78:7E:09:05:08:AA:3A:E1
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       315DA973D0F4DE09C7A0B1841680F78FB99F4404
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS10206.roa
Signing time:             Thu 04 Jun 2026 07:07:05 +0000
ROA not before:           Thu 04 Jun 2026 07:02:05 +0000
ROA not after:            Thu 03 Jun 2027 07:07:05 +0000
asID:                     10206
IP address blocks:        103.251.240.0/24 maxlen: 24
                          103.251.241.0/24 maxlen: 24
                          2408:8001:e800::/37 maxlen: 37
                          2408:8779::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5d:a9:73:d0:f4:de:09:c7:a0:b1:84:16:80:f7:8f:b9:9f:44:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: Jun  4 07:02:05 2026 GMT
            Not After : Jun  3 07:07:05 2027 GMT
        Subject: CN=C50E19DAA868725A2D982E30787E090508AA3AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:6c:2b:f2:51:94:eb:0d:45:29:0c:be:38:
                    fe:eb:8d:3d:1d:ad:a6:07:c9:e5:a0:2b:7e:fa:bd:
                    78:6d:6f:79:d2:2c:79:15:92:3b:d8:52:4f:6c:66:
                    78:51:4d:78:7d:2c:6d:b6:1a:55:a2:2f:98:36:7d:
                    a5:f4:9d:74:29:04:97:28:92:3d:8e:9f:9e:f0:dc:
                    41:24:64:4a:ee:38:4c:e1:d9:42:96:99:ba:ed:e1:
                    bf:72:d0:51:95:3e:a0:3c:1f:54:c9:32:fb:73:33:
                    80:1e:04:e1:cd:b1:dd:47:f3:e4:57:6a:5d:89:bb:
                    d8:75:7d:a3:ee:7a:93:19:de:02:9b:b2:3c:cd:aa:
                    86:77:f7:3a:b8:f5:15:f7:b1:ae:cc:61:1c:d5:66:
                    a3:af:90:ce:59:1a:ec:12:15:62:b6:01:a0:a1:e1:
                    06:30:49:89:d1:c8:40:21:06:ab:c5:c4:c0:d3:f2:
                    e4:39:1f:31:e9:1e:66:0b:fd:6e:0b:5e:07:05:59:
                    a3:fc:bb:22:3e:32:38:6d:48:92:e5:5e:99:03:b0:
                    b4:a7:4b:4b:22:4f:d9:f6:4a:03:24:df:08:5a:38:
                    06:8e:cf:6b:0c:9b:0d:f7:c4:12:e4:b0:1c:b8:b0:
                    af:40:84:35:6b:5c:8f:89:9b:ad:48:56:b4:2f:ed:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0E:19:DA:A8:68:72:5A:2D:98:2E:30:78:7E:09:05:08:AA:3A:E1
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/AS10206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.240.0/23
                IPv6:
                  2408:8001:e800::/37
                  2408:8779::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:93:1d:91:6f:87:d2:cf:0b:27:84:a7:97:28:24:79:d1:c0:
         43:ed:db:53:f0:ad:b7:94:d7:2e:79:6a:67:28:92:d1:06:44:
         b0:01:3b:2e:d6:31:a6:fe:76:08:15:14:c6:c8:0e:08:30:44:
         c0:1e:d7:4b:4b:25:2b:8c:fb:b3:e0:d8:ad:01:95:18:7a:9f:
         a1:3a:43:5e:f6:16:e5:f6:b0:4b:8a:90:07:bf:b6:81:f9:b5:
         7c:ab:d2:b4:9b:26:84:a8:b6:cc:1f:5f:27:d1:45:9e:d2:fc:
         24:5d:42:7e:45:51:d6:cc:e9:e9:67:f5:6f:9b:67:c7:20:4f:
         c6:42:5c:34:7c:2d:c4:30:4c:d9:43:b2:bb:5d:68:bb:64:43:
         ea:cb:5f:f2:2f:89:41:f1:b1:d7:dc:8e:3f:fa:0e:de:b4:d5:
         fd:a4:e1:f1:4d:ab:b7:ce:5c:24:77:39:e4:7b:fc:85:80:d0:
         04:9c:3e:94:e7:fe:f0:b5:af:d5:51:1c:da:8b:ae:f3:13:15:
         41:b5:af:f7:2a:89:ed:1d:43:19:ad:ec:65:38:59:d2:c4:77:
         3c:09:3e:f2:71:16:78:a1:b6:a8:82:ed:10:48:65:c1:50:6f:
         0a:03:bb:cf:be:5b:eb:b5:79:a9:0e:6c:94:f2:13:bf:26:f9:
         89:68:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:19 2026 by rpki-client