Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa
File:                     3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa (raw, json)
Hash identifier:          l8BiSjdm/v4L+Lk4AWpSFB7YqYeNE63RZbUpZObgJC4=
Subject key identifier:   59:96:33:53:FE:00:37:F7:E3:CF:B0:AF:C1:C5:D2:9E:A0:5D:69:1F
Certificate issuer:       /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
Certificate serial:       53622C89F78BFD14EEE5D13D60BA82AB1CEFD459
Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa
Signing time:             Thu 09 Apr 2026 09:15:57 +0000
ROA not before:           Thu 09 Apr 2026 09:10:57 +0000
ROA not after:            Thu 08 Apr 2027 09:15:57 +0000
asID:                     134768
IP address blocks:        103.236.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:2c:89:f7:8b:fd:14:ee:e5:d1:3d:60:ba:82:ab:1c:ef:d4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15
        Validity
            Not Before: Apr  9 09:10:57 2026 GMT
            Not After : Apr  8 09:15:57 2027 GMT
        Subject: CN=59963353FE0037F7E3CFB0AFC1C5D29EA05D691F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:7b:3c:44:a4:57:50:16:72:f4:f5:4b:68:
                    b5:30:35:e7:6b:de:52:b0:99:ae:c7:aa:66:1f:21:
                    b1:f0:2a:c8:f3:1d:b0:89:67:9f:17:6b:67:cf:0b:
                    8e:f9:ae:33:13:3c:9d:4c:7d:ef:44:88:c0:e7:71:
                    d5:cf:3f:74:e3:f8:02:45:0c:d5:25:1f:7a:6c:bf:
                    89:53:f9:06:6c:8c:c6:e4:4d:fc:7f:15:45:b3:87:
                    ed:e4:b2:bb:18:8e:cd:f7:61:2c:b0:5f:a1:e1:a7:
                    58:9e:67:dc:08:43:78:5b:97:74:7e:08:b8:1c:ef:
                    18:27:cc:b0:27:a0:69:b3:1a:29:7d:46:07:28:32:
                    78:da:d2:78:84:03:19:5f:e6:40:c7:33:04:1e:a2:
                    55:d7:e4:4f:4a:98:27:89:5b:b7:fe:71:a4:95:3d:
                    b8:e3:d9:db:14:0b:fb:f3:34:b4:0c:d3:7e:38:a5:
                    80:8d:a4:d6:87:c3:72:04:eb:cd:56:31:42:00:a2:
                    a9:c1:4f:75:c4:ac:3d:84:de:64:e2:2b:39:a9:99:
                    9a:ea:a4:ff:c4:58:bb:d1:a9:ff:9a:03:cd:2a:df:
                    3c:aa:c0:29:94:c7:d1:6b:3b:5e:9b:51:5e:13:f6:
                    03:da:00:0d:28:73:2a:64:4b:64:d3:5e:4f:2f:ff:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:96:33:53:FE:00:37:F7:E3:CF:B0:AF:C1:C5:D2:9E:A0:5D:69:1F
            X509v3 Authority Key Identifier:
                keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39362e302f32322d3232203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:88:b9:08:4c:d3:ff:30:27:26:69:60:8d:09:c5:6f:45:2e:
         c7:06:1a:bb:bc:02:ab:2a:a2:b2:c5:e6:7a:1a:06:86:09:5c:
         b2:62:03:7c:11:66:10:74:fc:ed:0e:4e:73:bb:85:5b:30:b0:
         e1:c7:f1:67:54:01:aa:45:c5:16:06:f3:c0:fb:05:b6:f1:5b:
         38:f5:5d:0c:b1:42:fb:97:de:7d:d9:fe:9a:0a:b8:c6:61:b6:
         0b:d4:0d:8b:a7:b2:67:4c:b3:a4:f7:4e:41:61:99:80:67:da:
         42:e9:8f:f3:36:3e:c3:35:6a:fd:68:d3:de:ab:c4:c2:a9:14:
         0c:4a:6c:f8:46:0b:a3:e8:e3:6d:d3:62:67:c3:92:d0:ab:31:
         10:fc:a5:09:d3:14:aa:3a:6c:c9:89:3d:87:49:e9:78:48:51:
         b9:b3:86:f0:76:58:c5:c8:91:5b:bd:99:34:20:da:58:fd:ff:
         16:23:fc:77:30:9e:85:6c:dc:c9:bd:e2:cb:ec:1e:26:03:c6:
         48:cf:e8:f5:95:e7:d7:c0:03:d8:07:ba:18:b2:9a:13:4c:59:
         a8:22:7c:c0:0b:79:be:7b:43:12:f5:c0:5c:0b:f4:e4:fd:12:
         2b:a4:25:98:24:68:f0:bd:44:03:26:b0:31:5c:7b:43:8f:36:
         65:aa:9f:9e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUU2IsifeL/RTu5dE9YLqCqxzv1FkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3
NkVBQUExNTAeFw0yNjA0MDkwOTEwNTdaFw0yNzA0MDgwOTE1NTdaMDMxMTAvBgNV
BAMTKDU5OTYzMzUzRkUwMDM3RjdFM0NGQjBBRkMxQzVEMjlFQTA1RDY5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU53s8RKRXUBZy9PVLaLUwNedr
3lKwma7HqmYfIbHwKsjzHbCJZ58Xa2fPC475rjMTPJ1Mfe9EiMDncdXPP3Tj+AJF
DNUlH3psv4lT+QZsjMbkTfx/FUWzh+3ksrsYjs33YSywX6Hhp1ieZ9wIQ3hbl3R+
CLgc7xgnzLAnoGmzGil9RgcoMnja0niEAxlf5kDHMwQeolXX5E9KmCeJW7f+caSV
Pbjj2dsUC/vzNLQM0344pYCNpNaHw3IE681WMUIAoqnBT3XErD2E3mTiKzmpmZrq
pP/EWLvRqf+aA80q3zyqwCmUx9FrO16bUV4T9gPaAA0ocypkS2TTXk8v/17pAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUWZYzU/4AN/fjz7CvwcXSnqBdaR8wHwYDVR0j
BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4
RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy
MzMzNjJlMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfsYDANBgkqhkiG9w0BAQsFAAOCAQEABYi5CEzT/zAnJmlgjQnF
b0UuxwYau7wCqyqissXmehoGhglcsmIDfBFmEHT87Q5Oc7uFWzCw4cfxZ1QBqkXF
FgbzwPsFtvFbOPVdDLFC+5fefdn+mgq4xmG2C9QNi6eyZ0yzpPdOQWGZgGfaQumP
8zY+wzVq/WjT3qvEwqkUDEps+EYLo+jjbdNiZ8OS0KsxEPylCdMUqjpsyYk9h0np
eEhRubOG8HZYxciRW72ZNCDaWP3/FiP8dzCehWzcyb3iy+weJgPGSM/o9ZXn18AD
2Ae6GLKaE0xZqCJ8wAt5vntDEvXAXAv05P0SK6QlmCRo8L1EAyawMVx7Q482Zaqf
ng==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:36 2026 by rpki-client