Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32332d3233203d3e203536323832.roa
File:                     3130332e3232372e38302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          32lCiZnRdPAVWMeYIuUGn2vpCXDkTa0Uj72avVJAaPI=
Subject key identifier:   B4:CA:72:27:9F:AB:45:2A:21:A3:60:89:B7:A6:DC:B0:AF:F7:17:16
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       7A78421BD0065FB1EB82C725B1B63B4E2A40936C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:35:45 +0000
ROA not before:           Tue 09 Jun 2026 06:30:45 +0000
ROA not after:            Tue 08 Jun 2027 06:35:45 +0000
asID:                     56282
IP address blocks:        103.227.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:42:1b:d0:06:5f:b1:eb:82:c7:25:b1:b6:3b:4e:2a:40:93:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:30:45 2026 GMT
            Not After : Jun  8 06:35:45 2027 GMT
        Subject: CN=B4CA72279FAB452A21A36089B7A6DCB0AFF71716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:48:91:ee:f9:59:e5:0c:c3:aa:75:cb:4b:
                    52:4e:ba:de:09:78:99:e7:40:3b:75:85:d4:6d:7e:
                    d6:48:9a:2f:ce:b2:65:ae:a7:b6:78:24:b0:ca:cc:
                    f0:b7:a5:fc:41:a4:d6:98:23:15:fd:e0:fe:c9:55:
                    ac:f6:a9:bf:07:18:84:cd:de:74:2e:dd:91:cd:be:
                    ab:6e:dc:3b:f0:0b:a3:27:e3:18:e6:c5:32:5c:32:
                    7d:ff:89:2e:d9:2d:92:1b:aa:01:f0:23:29:db:fd:
                    05:b6:55:8f:b9:f2:8c:a0:91:64:a5:b2:c2:42:61:
                    0b:4c:8c:5d:cf:13:11:5b:12:10:10:b3:8b:12:74:
                    f0:85:d3:ee:e2:f7:6e:43:f0:bb:38:18:4c:93:cf:
                    c3:78:ad:79:74:e0:e0:3f:8d:05:af:a1:5d:34:33:
                    d5:b1:cf:87:ba:db:26:b4:30:82:cd:a7:80:95:ae:
                    55:3d:f5:8b:28:e1:ee:20:f4:bb:1e:3d:a0:a1:85:
                    a7:62:56:83:81:e6:52:b4:71:0f:df:1b:20:0c:13:
                    ad:14:b3:de:df:fa:c7:dc:0c:8a:77:96:86:a2:62:
                    08:b3:b3:92:3a:2f:97:db:50:7e:0d:74:41:2b:be:
                    16:52:43:a4:b1:d1:48:d9:6f:87:2b:fb:a4:81:86:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:72:27:9F:AB:45:2A:21:A3:60:89:B7:A6:DC:B0:AF:F7:17:16
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38302e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:65:e6:30:08:99:b2:7f:90:f0:49:aa:d3:06:b4:87:ce:cc:
         ed:b0:21:8f:ff:b2:d6:b9:9d:49:f8:b6:17:8b:b8:76:70:a9:
         36:2e:fc:c4:53:83:74:db:ae:d8:a2:6e:14:90:34:c5:ac:18:
         67:ca:85:91:03:9c:f0:3b:39:27:14:a2:fd:ba:8c:7c:49:c2:
         56:eb:43:7d:e9:4c:7f:fe:26:0e:72:e9:05:96:44:a8:8b:79:
         de:b2:e0:e1:21:67:99:11:89:c9:b3:af:a9:65:6b:67:57:f7:
         86:c1:c5:fe:9e:23:71:62:4f:98:fb:81:07:1a:a6:f8:8b:9b:
         9f:29:16:1c:2e:03:fc:5f:6e:70:ea:1a:8f:ab:f1:a9:5c:42:
         5f:a0:da:e9:e6:35:82:76:b2:44:0b:4b:74:4e:b2:3d:67:83:
         d7:86:15:ee:b2:46:cd:5e:d3:6d:3d:d7:84:6b:0c:6d:b6:3b:
         bc:2f:ce:b0:58:5b:56:77:ff:f8:15:74:af:8b:7c:40:41:23:
         cd:9e:86:db:a5:d0:e7:dc:5f:b1:57:35:dd:9a:5b:a2:8e:df:
         f6:35:48:89:eb:8a:56:5c:db:f1:86:f8:e6:26:0d:83:b0:ab:
         b5:82:ad:26:15:1d:73:fe:49:04:a5:81:ca:32:5e:dd:27:2b:
         80:5a:39:8d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUenhCG9AGX7HrgsclsbY7TipAk2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjMwNDVaFw0yNzA2MDgwNjM1NDVaMDMxMTAvBgNV
BAMTKEI0Q0E3MjI3OUZBQjQ1MkEyMUEzNjA4OUI3QTZEQ0IwQUZGNzE3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrD0iR7vlZ5QzDqnXLS1JOut4J
eJnnQDt1hdRtftZImi/OsmWup7Z4JLDKzPC3pfxBpNaYIxX94P7JVaz2qb8HGITN
3nQu3ZHNvqtu3DvwC6Mn4xjmxTJcMn3/iS7ZLZIbqgHwIynb/QW2VY+58oygkWSl
ssJCYQtMjF3PExFbEhAQs4sSdPCF0+7i925D8Ls4GEyTz8N4rXl04OA/jQWvoV00
M9Wxz4e62ya0MILNp4CVrlU99Yso4e4g9LsePaChhadiVoOB5lK0cQ/fGyAME60U
s97f+sfcDIp3loaiYgizs5I6L5fbUH4NdEErvhZSQ6Sx0UjZb4cr+6SBhmHpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUtMpyJ5+rRSoho2CJt6bcsK/3FxYwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzAzMzJlMzIz
MjM3MmUzODMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMyMzgzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWfjUDANBgkqhkiG9w0BAQsFAAOCAQEAUmXmMAiZsn+Q8Emq0wa0h87M
7bAhj/+y1rmdSfi2F4u4dnCpNi78xFODdNuu2KJuFJA0xawYZ8qFkQOc8Ds5JxSi
/bqMfEnCVutDfelMf/4mDnLpBZZEqIt53rLg4SFnmRGJybOvqWVrZ1f3hsHF/p4j
cWJPmPuBBxqm+IubnykWHC4D/F9ucOoaj6vxqVxCX6Da6eY1gnayRAtLdE6yPWeD
14YV7rJGzV7TbT3XhGsMbbY7vC/OsFhbVnf/+BV0r4t8QEEjzZ6G26XQ59xfsVc1
3Zpboo7f9jVIieuKVlzb8Yb45iYNg7CrtYKtJhUdc/5JBKWByjJe3ScrgFo5jQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:27 2026 by rpki-client