Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32332d3233203d3e203536323832.roa
File:                     3130332e3232372e37362e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          RvU9gZP+IS9wfL0A2Hk6LGoNDBcI0cQnhcQAFOYz8Ro=
Subject key identifier:   02:11:67:D5:5C:36:DD:F1:14:97:E4:4F:C9:22:80:A9:D3:D0:3D:DA
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       327374A5226A08FDB985AD59A1FE17FD001A6751
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:36:40 +0000
ROA not before:           Tue 09 Jun 2026 06:31:40 +0000
ROA not after:            Tue 08 Jun 2027 06:36:40 +0000
asID:                     56282
IP address blocks:        103.227.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:74:a5:22:6a:08:fd:b9:85:ad:59:a1:fe:17:fd:00:1a:67:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:31:40 2026 GMT
            Not After : Jun  8 06:36:40 2027 GMT
        Subject: CN=021167D55C36DDF11497E44FC92280A9D3D03DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:f9:ee:0d:7f:af:0f:ae:1b:05:28:42:2d:
                    cd:de:cd:dd:2b:7d:6a:33:a2:a6:f9:81:22:c8:28:
                    2e:43:4f:c8:62:25:e8:76:62:4c:6c:99:ae:94:99:
                    fd:45:b2:47:c7:d8:ca:b4:b3:34:f1:a7:da:a2:b8:
                    cc:18:70:34:47:95:52:a4:c3:69:20:c7:04:ac:8e:
                    37:18:88:7d:b0:b1:70:3e:ac:fb:24:64:8d:2f:4e:
                    08:32:26:71:87:86:40:06:92:f6:b0:0f:5f:2c:3b:
                    f5:c4:51:9d:bf:ba:a4:f1:0b:27:ab:43:dc:cc:ed:
                    a5:e7:5d:c5:19:46:3f:7c:4f:bf:f3:06:b4:5e:41:
                    c5:3d:54:64:78:db:c0:26:45:47:62:ea:4b:cd:68:
                    ad:80:d5:5b:a4:9d:00:aa:47:cf:30:da:49:1c:cc:
                    04:75:a2:9f:34:63:31:11:9b:5b:86:2a:a9:95:66:
                    a9:cb:d3:d6:f4:30:5d:a7:56:14:cc:28:cf:34:9e:
                    2c:46:4c:c0:f4:87:0a:e3:e2:be:cb:2c:dd:c8:91:
                    bc:e2:cd:bc:10:4d:fc:52:7e:5c:db:1b:42:0d:c7:
                    5d:0f:5a:7e:20:a0:77:29:99:25:f9:a5:7c:4a:3d:
                    96:3e:a8:69:e0:2e:02:9c:88:5d:7e:f8:cf:51:63:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:11:67:D5:5C:36:DD:F1:14:97:E4:4F:C9:22:80:A9:D3:D0:3D:DA
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e37362e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:8b:1d:5d:f2:ae:60:4c:ce:57:c5:ca:39:74:2c:6a:b5:33:
         c4:b9:20:0e:aa:fa:f5:76:6d:b2:8a:62:6f:f8:ed:58:2e:fa:
         1c:69:0f:79:1a:bd:33:c5:eb:61:b5:cc:88:ba:9f:7c:a6:32:
         79:e5:c2:c7:fe:a4:1a:09:73:b5:68:4c:75:c5:9d:f2:c9:f4:
         c2:8c:c1:03:11:3b:93:91:23:e3:9e:72:fc:4d:53:a1:ac:6d:
         c2:49:36:0c:53:27:88:d4:8b:ba:a4:35:d0:30:38:5d:7b:4c:
         e6:19:70:7d:04:e4:07:bd:b6:47:f3:a6:41:41:28:2e:72:f3:
         a9:c7:70:41:18:b0:b4:ca:95:08:fe:cf:5b:5b:d2:fc:d1:f0:
         93:c6:6d:84:a8:ae:1a:ab:f7:d0:b4:f7:35:fa:1e:f3:61:2f:
         39:49:b8:65:3b:ab:bd:d5:05:f3:8c:05:3b:b2:2d:64:31:a7:
         30:2f:29:f9:0b:a8:44:fd:ef:14:dd:5c:42:54:e7:f7:cf:50:
         d4:d1:cd:79:74:0a:eb:12:5a:bc:93:1b:7c:d5:eb:1a:15:ee:
         f8:4e:67:16:e9:dd:1a:d2:86:8f:c2:f2:1d:00:9a:f4:a0:cf:
         0e:f6:64:a6:4b:e2:8a:d5:9e:d8:f2:5a:da:63:c5:42:5c:30:
         57:37:fd:73
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMnN0pSJqCP25ha1Zof4X/QAaZ1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjMxNDBaFw0yNzA2MDgwNjM2NDBaMDMxMTAvBgNV
BAMTKDAyMTE2N0Q1NUMzNkRERjExNDk3RTQ0RkM5MjI4MEE5RDNEMDNEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzfnuDX+vD64bBShCLc3ezd0r
fWozoqb5gSLIKC5DT8hiJeh2Ykxsma6Umf1FskfH2Mq0szTxp9qiuMwYcDRHlVKk
w2kgxwSsjjcYiH2wsXA+rPskZI0vTggyJnGHhkAGkvawD18sO/XEUZ2/uqTxCyer
Q9zM7aXnXcUZRj98T7/zBrReQcU9VGR428AmRUdi6kvNaK2A1VuknQCqR88w2kkc
zAR1op80YzERm1uGKqmVZqnL09b0MF2nVhTMKM80nixGTMD0hwrj4r7LLN3Ikbzi
zbwQTfxSflzbG0INx10PWn4goHcpmSX5pXxKPZY+qGngLgKciF1++M9RY7V3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUAhFn1Vw23fEUl+RPySKAqdPQPdowHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz
MjM3MmUzNzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMyMzgzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWfjTDANBgkqhkiG9w0BAQsFAAOCAQEAJIsdXfKuYEzOV8XKOXQsarUz
xLkgDqr69XZtsopib/jtWC76HGkPeRq9M8XrYbXMiLqffKYyeeXCx/6kGglztWhM
dcWd8sn0wozBAxE7k5Ej455y/E1Toaxtwkk2DFMniNSLuqQ10DA4XXtM5hlwfQTk
B722R/OmQUEoLnLzqcdwQRiwtMqVCP7PW1vS/NHwk8ZthKiuGqv30LT3Nfoe82Ev
OUm4ZTurvdUF84wFO7ItZDGnMC8p+QuoRP3vFN1cQlTn989Q1NHNeXQK6xJavJMb
fNXrGhXu+E5nFundGtKGj8LyHQCa9KDPDvZkpkviitWe2PJa2mPFQlwwVzf9cw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:26 2026 by rpki-client