Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa
File:                     3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa (raw, json)
Hash identifier:          6csy52r/oDieMavBe94L6XVKY6JeI8A0+LvrsQfB0Z0=
Subject key identifier:   C6:B8:95:FE:E7:65:29:66:FF:13:E8:2F:13:4E:F6:60:51:6C:DB:84
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       03A1708C519F6A35CCEE9B609D2D797F26714579
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa
Signing time:             Thu 09 Apr 2026 09:15:57 +0000
ROA not before:           Thu 09 Apr 2026 09:10:57 +0000
ROA not after:            Thu 08 Apr 2027 09:15:57 +0000
asID:                     134768
IP address blocks:        103.236.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a1:70:8c:51:9f:6a:35:cc:ee:9b:60:9d:2d:79:7f:26:71:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Apr  9 09:10:57 2026 GMT
            Not After : Apr  8 09:15:57 2027 GMT
        Subject: CN=C6B895FEE7652966FF13E82F134EF660516CDB84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8f:61:44:48:e5:a4:21:3a:bb:ed:95:4a:70:
                    7d:11:1b:13:59:01:71:b8:b4:bd:6c:a7:5d:c3:ae:
                    7d:25:ce:7e:02:50:d2:b4:82:14:9e:3a:bf:2e:66:
                    49:f7:de:63:58:c1:19:5e:63:7e:a1:18:57:7c:9b:
                    f7:ba:9b:ea:da:da:51:19:29:a9:a7:61:f8:a2:d4:
                    d7:52:eb:a6:83:2d:9a:79:a7:00:17:4a:6c:ef:7d:
                    03:75:bf:11:4c:90:c3:d3:ae:70:2a:43:90:f7:2c:
                    cf:08:18:61:dc:a6:85:01:b1:ea:e3:c4:5d:07:2d:
                    60:81:e0:73:26:48:75:28:0d:0a:92:db:61:cc:9d:
                    0f:97:06:be:b0:e3:ce:af:6f:d6:1c:35:5c:f8:dd:
                    0d:0c:d8:47:89:2b:94:76:b2:f7:6a:a0:5a:3c:15:
                    88:96:c2:ed:a0:1e:44:df:f0:a1:5c:fb:11:93:6e:
                    6d:bf:90:46:85:02:33:fb:aa:da:17:2f:6c:8b:6b:
                    0c:2b:8e:0b:91:1f:b2:4e:5c:7b:ae:04:a2:e6:16:
                    9c:37:c3:c8:ff:04:6d:9f:cf:8f:eb:5d:19:55:d7:
                    ff:ef:e1:a3:45:42:df:a3:07:ec:25:03:16:6e:b2:
                    cb:19:24:81:90:ef:1e:c7:18:b3:8f:ee:8a:44:4e:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B8:95:FE:E7:65:29:66:FF:13:E8:2F:13:4E:F6:60:51:6C:DB:84
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39322e302f32322d3232203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:54:1f:89:58:b1:71:92:b0:3b:5c:1c:30:a1:3f:da:03:bc:
         f6:76:0c:dd:b6:4c:f9:7e:07:e7:93:88:c4:86:a1:93:fc:be:
         1f:a8:67:5d:04:f8:0b:c4:bb:16:bf:8f:57:e8:97:f9:d9:a7:
         02:aa:cf:53:33:4b:f3:66:f3:c3:48:a6:8e:06:97:38:6f:97:
         6d:79:09:d5:01:53:7f:1e:5d:81:ae:7f:d2:b7:fd:fa:fa:ea:
         c2:f7:7f:ab:fe:c3:05:c2:ee:32:fa:44:20:96:52:f5:5a:93:
         1e:86:50:0f:ce:8e:16:af:12:2b:32:25:28:71:44:69:ed:a5:
         44:c1:63:1c:3c:58:6f:15:af:85:17:c2:87:0b:d0:9c:c2:b1:
         ad:ce:34:62:2b:36:3d:44:50:07:71:85:31:33:f5:f5:de:69:
         6c:35:b9:0e:bd:f3:4b:5f:fb:97:d5:91:e8:a1:9f:dc:bc:35:
         fb:26:db:2e:a0:a9:8f:03:45:d3:16:e5:7a:79:4c:da:5c:76:
         47:c4:c5:df:e2:75:89:82:20:08:c4:eb:ff:1c:b1:ce:e5:de:
         b2:3d:ae:0c:00:47:14:87:f2:b2:0c:62:88:7e:a3:5a:2e:5c:
         f8:b7:79:f5:e4:8c:8b:88:df:78:8f:87:19:39:f8:52:18:3c:
         4c:cb:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:30 2026 by rpki-client