Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS152918.roa
File:                     AS152918.roa (raw, json)
Hash identifier:          nWuKhUivOjVjfvREDis5Q4XWvm1K8tSGawT+Qvzd+pk=
Subject key identifier:   98:61:76:BF:FB:F3:CE:A9:A3:9D:CA:60:84:9D:AD:CD:43:82:FB:69
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       4D5E1280C3FFCD81D48E10F0332E1277B7CEA951
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS152918.roa
Signing time:             Tue 19 May 2026 02:36:42 +0000
ROA not before:           Tue 19 May 2026 02:31:42 +0000
ROA not after:            Tue 18 May 2027 02:36:42 +0000
asID:                     152918
IP address blocks:        103.118.242.0/24 maxlen: 24
                          103.118.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5e:12:80:c3:ff:cd:81:d4:8e:10:f0:33:2e:12:77:b7:ce:a9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: May 19 02:31:42 2026 GMT
            Not After : May 18 02:36:42 2027 GMT
        Subject: CN=986176BFFBF3CEA9A39DCA60849DADCD4382FB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:7b:dd:02:85:c9:d6:f0:31:24:ab:04:a2:
                    41:6e:13:a0:f5:da:7e:40:f6:bd:fc:af:7f:1d:e3:
                    f5:61:f6:2a:20:71:7d:20:3d:5a:ec:c2:2b:64:df:
                    b6:0d:fc:1c:e1:8a:a6:b9:33:65:1d:5b:42:12:3b:
                    9b:76:59:ca:61:bb:13:cd:33:68:1e:b8:99:e1:f6:
                    08:1b:ec:5f:9b:dd:b8:e4:de:fa:a3:09:ab:c9:a2:
                    3d:f7:d9:2e:92:4e:51:18:e1:34:2d:62:48:42:3b:
                    5e:59:f3:66:26:52:9b:a6:cf:0a:68:ef:7a:e0:47:
                    15:bf:49:10:19:60:07:ce:4b:68:a0:d7:87:c6:66:
                    11:ef:c7:49:23:2c:73:ea:b9:48:5d:4b:5a:9d:5b:
                    13:51:a4:f0:ca:70:a0:80:03:19:be:16:8e:1c:de:
                    2d:37:6e:21:7e:d2:10:43:5d:48:08:07:41:c8:d8:
                    f6:2e:ee:6a:ad:a7:e1:c5:93:96:18:44:6c:a4:6e:
                    23:e8:c9:4a:23:5a:0e:ae:91:af:73:33:33:0e:df:
                    de:11:80:3f:fa:b3:3d:38:66:eb:2f:3e:ed:69:b9:
                    df:9b:6f:9f:a1:c3:95:4a:a5:92:b8:4b:33:a4:eb:
                    11:b0:4f:23:26:2f:3c:dd:31:ad:1f:e8:15:ea:64:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:61:76:BF:FB:F3:CE:A9:A3:9D:CA:60:84:9D:AD:CD:43:82:FB:69
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS152918.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:d4:90:81:dd:5e:82:89:c5:3c:ee:fa:a3:58:3a:34:c5:8b:
         2d:cf:04:c8:01:d2:70:c4:02:b5:e8:20:af:26:04:79:04:5d:
         07:92:3f:69:1c:18:5d:ba:b2:3a:7a:40:9c:d7:6e:48:9a:4a:
         c2:3b:df:55:19:3d:3c:f2:2b:a0:d5:9f:91:50:44:f5:97:b1:
         94:6d:ba:8d:f6:51:2a:74:9e:4b:8f:7c:6a:a2:6a:4a:8e:94:
         d4:29:de:42:76:b4:11:a4:b4:c6:06:c6:18:aa:81:64:b5:d3:
         92:2b:63:32:22:5d:30:36:3f:a3:6b:94:4a:53:40:28:f6:87:
         b2:6c:6b:66:da:4e:ff:66:e3:2b:9a:63:50:b7:e1:8e:99:8f:
         0b:4f:09:0e:5b:f7:c8:c2:63:7a:67:63:f9:b6:b4:80:50:f9:
         d3:70:5b:2b:25:4f:74:fa:78:9b:ca:21:c9:ec:54:c6:02:a2:
         92:1c:a9:b1:f5:18:d8:5c:7e:9b:cb:30:1d:12:df:c5:40:44:
         4a:d5:c7:cb:b8:b9:70:ec:f1:f0:a0:69:82:de:1e:28:af:75:
         7f:4a:0e:03:89:73:32:c9:2b:95:8d:64:46:49:ae:66:a4:93:
         ea:06:a0:8c:b2:9f:c9:7f:e4:88:54:39:91:ff:cf:e3:ef:3f:
         1a:a8:20:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:38 2026 by rpki-client