Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130332e31352e39362e302f32322d3234203d3e203337393633.roa
File:                     3130332e31352e39362e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          6YaKUOJqktbZaBTFMzZfDIum3skpu3rjuc8LWHBWKNE=
Subject key identifier:   90:32:97:68:D0:29:BB:FE:54:DE:B2:73:E8:2E:AD:50:A9:44:D5:5C
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       7C3D04A389202B37B5C231E0E4323FFA6CE620B3
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130332e31352e39362e302f32322d3234203d3e203337393633.roa
Signing time:             Mon 11 May 2026 08:43:23 +0000
ROA not before:           Mon 11 May 2026 08:38:23 +0000
ROA not after:            Mon 10 May 2027 08:43:23 +0000
asID:                     37963
IP address blocks:        103.15.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3d:04:a3:89:20:2b:37:b5:c2:31:e0:e4:32:3f:fa:6c:e6:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: May 11 08:38:23 2026 GMT
            Not After : May 10 08:43:23 2027 GMT
        Subject: CN=90329768D029BBFE54DEB273E82EAD50A944D55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:e4:f8:68:0d:b8:a9:5d:27:f0:05:1e:01:
                    59:12:a4:b1:e9:fd:a5:c5:89:c9:bf:96:1b:9d:1d:
                    f9:56:d3:0d:db:61:20:e6:c9:5a:57:e5:79:26:b5:
                    b4:b6:05:c0:13:6a:49:a5:17:c7:6f:6e:cd:61:6d:
                    df:04:63:c4:95:3c:20:f9:09:44:05:ca:b3:7b:a5:
                    7e:74:0f:67:d2:b8:c3:66:33:d9:9a:09:d1:83:b8:
                    eb:d1:a2:63:2b:75:b3:52:e2:8c:ec:1b:a2:de:db:
                    2c:c2:3b:19:77:c7:39:52:25:eb:0a:9a:25:f7:46:
                    e7:63:df:92:7a:1b:90:08:f1:a0:90:96:c7:cb:21:
                    94:cf:19:d6:d1:1e:2d:51:af:87:ff:6b:16:90:8f:
                    8c:9f:ca:45:57:e0:f6:39:41:9a:a8:c9:33:a6:9f:
                    77:9c:3a:02:1d:a6:58:35:56:76:f9:46:c3:9c:ce:
                    f8:15:1c:40:32:cf:b4:ad:32:ec:f8:10:d9:a5:a5:
                    3a:af:f3:97:19:2b:bd:08:0e:f1:2b:ed:b2:21:b2:
                    ce:de:16:2f:72:3b:e9:ca:9e:33:b0:9a:bb:00:91:
                    1e:06:6d:76:5b:f6:71:74:12:6d:63:b3:15:5a:c2:
                    16:b1:55:9d:bb:4a:8c:ef:bf:04:2f:38:7f:a0:29:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:32:97:68:D0:29:BB:FE:54:DE:B2:73:E8:2E:AD:50:A9:44:D5:5C
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130332e31352e39362e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:82:da:e3:b2:15:f4:31:a7:59:4d:02:76:7c:d2:d5:3e:d4:
         1f:44:75:89:cd:a3:3b:e5:60:3e:d7:24:d3:e0:44:df:d5:2b:
         30:99:6e:cb:21:f7:a5:57:e2:ed:a7:1f:dc:08:97:1d:3d:81:
         cf:6e:15:aa:2c:88:a6:ee:91:20:2b:35:60:a4:7a:f0:10:a5:
         8e:ca:6c:69:7e:01:30:08:5d:aa:d0:29:73:24:3b:41:0d:8c:
         3f:89:a5:c0:e3:7b:e0:1f:19:e1:52:8c:aa:5d:61:d6:6d:6f:
         d8:c5:60:4e:34:d9:98:ed:88:f6:3f:ad:6f:57:bf:9c:9e:60:
         30:94:3d:d5:95:05:51:9f:44:44:25:51:64:c1:ca:9c:81:3d:
         c4:ec:d6:1a:dc:91:a5:27:93:b1:60:d9:a0:a1:a2:8e:b9:ff:
         7f:3b:3e:bc:9e:24:6c:e5:1d:ac:7c:6e:0f:70:d7:d2:3b:e2:
         76:77:d5:29:28:46:a3:8d:aa:5c:5f:be:a7:23:8c:34:0a:2a:
         4b:fb:4a:0d:83:b5:c9:e1:8e:47:3a:5c:29:0a:05:55:5d:70:
         81:bd:81:01:c3:19:dc:e2:14:8f:61:3e:8d:66:a4:19:b7:70:
         ed:20:f1:c8:1f:4f:d6:97:75:86:73:d4:8a:9c:f7:1f:21:23:
         17:cf:9e:39
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfD0Eo4kgKze1wjHg5DI/+mzmILMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjA1MTEwODM4MjNaFw0yNzA1MTAwODQzMjNaMDMxMTAvBgNV
BAMTKDkwMzI5NzY4RDAyOUJCRkU1NERFQjI3M0U4MkVBRDUwQTk0NEQ1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvn+T4aA24qV0n8AUeAVkSpLHp
/aXFicm/lhudHflW0w3bYSDmyVpX5XkmtbS2BcATakmlF8dvbs1hbd8EY8SVPCD5
CUQFyrN7pX50D2fSuMNmM9maCdGDuOvRomMrdbNS4ozsG6Le2yzCOxl3xzlSJesK
miX3Rudj35J6G5AI8aCQlsfLIZTPGdbRHi1Rr4f/axaQj4yfykVX4PY5QZqoyTOm
n3ecOgIdplg1Vnb5RsOczvgVHEAyz7StMuz4ENmlpTqv85cZK70IDvEr7bIhss7e
Fi9yO+nKnjOwmrsAkR4GbXZb9nF0Em1jsxVawhaxVZ27SozvvwQvOH+gKelnAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUkDKXaNApu/5U3rJz6C6tUKlE1VwwHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMDMzMmUzMTM1
MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcPYDANBgkqhkiG9w0BAQsFAAOCAQEAA4La47IV9DGnWU0CdnzS1T7UH0R1
ic2jO+VgPtck0+BE39UrMJluyyH3pVfi7acf3AiXHT2Bz24VqiyIpu6RICs1YKR6
8BCljspsaX4BMAhdqtApcyQ7QQ2MP4mlwON74B8Z4VKMql1h1m1v2MVgTjTZmO2I
9j+tb1e/nJ5gMJQ91ZUFUZ9ERCVRZMHKnIE9xOzWGtyRpSeTsWDZoKGijrn/fzs+
vJ4kbOUdrHxuD3DX0jvidnfVKShGo42qXF++pyOMNAoqS/tKDYO1yeGORzpcKQoF
VV1wgb2BAcMZ3OIUj2E+jWakGbdw7SDxyB9P1pd1hnPUipz3HyEjF8+eOQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:55:47 2026 by rpki-client