Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38322e302f32332d3233203d3e203536323832.roa
File:                     3130332e3232372e38322e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          hagyC+IcfnpGcEo/y/NtsK0fFDEvlvt3EJAHIQtzyIY=
Subject key identifier:   6E:2D:AB:19:8B:71:C9:8B:CA:A1:46:84:A5:90:5D:10:83:20:5C:C2
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       21B6E9B9ABA22F1A6D1EC472F0D4A11B086F0C49
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38322e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:48:51 +0000
ROA not before:           Tue 09 Jun 2026 06:43:51 +0000
ROA not after:            Tue 08 Jun 2027 06:48:51 +0000
asID:                     56282
IP address blocks:        103.227.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b6:e9:b9:ab:a2:2f:1a:6d:1e:c4:72:f0:d4:a1:1b:08:6f:0c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:43:51 2026 GMT
            Not After : Jun  8 06:48:51 2027 GMT
        Subject: CN=6E2DAB198B71C98BCAA14684A5905D1083205CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:2c:fa:41:56:1a:ff:f1:cc:d1:f5:77:fb:
                    6b:eb:ea:73:ca:38:c5:e6:8a:0f:d7:2d:9d:cb:21:
                    f4:3a:82:b0:36:f3:5b:59:12:2f:5e:bf:77:67:b4:
                    e2:15:a4:c4:af:08:d1:6e:ca:c1:56:e5:53:1a:89:
                    d2:12:f0:e1:d2:eb:c4:de:e5:78:40:e9:25:d0:a4:
                    d9:d3:72:9f:21:11:f0:9f:a8:fc:03:f7:5e:c4:8d:
                    65:d1:7f:26:f7:f5:c3:0d:07:44:66:e1:62:69:e6:
                    a2:57:62:cb:47:b4:8d:c5:5e:63:aa:2e:8d:e1:1d:
                    75:a8:23:f8:67:c1:5d:b1:1f:1a:01:61:f1:2f:63:
                    37:5b:a4:3b:1c:b6:d3:05:f0:78:fe:32:4b:0a:b3:
                    15:9d:7c:03:a1:df:7f:10:9d:95:e0:59:32:e5:ba:
                    fe:a9:47:8e:ea:d6:84:4f:07:eb:5f:82:23:77:59:
                    60:03:d9:4b:22:d3:c3:78:50:60:3f:20:46:2e:b8:
                    cd:ed:eb:8a:9b:26:a6:32:a6:b1:e5:c1:3b:90:58:
                    40:f0:42:4e:9a:38:30:4d:71:8e:fb:45:cc:d9:a1:
                    2e:06:9d:c3:00:f7:c4:64:8d:44:b0:d2:d1:36:4e:
                    41:7b:d7:8e:68:52:1f:9e:37:97:31:76:e3:c8:9a:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:AB:19:8B:71:C9:8B:CA:A1:46:84:A5:90:5D:10:83:20:5C:C2
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38322e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:66:e5:6b:01:30:44:7b:ac:c4:7a:76:92:5b:ee:3f:f4:18:
         50:83:99:a4:e5:a5:e0:4e:31:84:b9:1d:84:3f:9d:ba:5c:e7:
         2e:63:88:7c:92:25:02:5c:03:ec:db:18:d3:cb:d4:2e:a4:07:
         9d:15:8e:29:48:49:16:3c:44:56:59:d6:2e:46:c0:97:92:c1:
         e6:71:0f:e5:cb:ee:e3:b4:7d:4d:86:ba:fc:24:a2:05:45:aa:
         e7:05:b9:91:d9:4f:d3:41:a8:99:bd:3e:67:cd:a9:f4:66:6a:
         10:79:7a:12:d2:17:13:b1:70:c9:5c:da:3c:ba:28:72:85:80:
         ce:69:95:64:5a:14:a3:a9:7d:23:28:fa:8b:8b:be:66:aa:94:
         df:e2:11:7b:7d:45:8c:7e:2b:ce:72:8c:19:c2:c6:93:ff:1e:
         45:12:92:02:2b:bf:af:e8:53:64:71:ca:28:70:bf:a9:ab:06:
         af:5b:ef:07:52:e2:ce:c1:96:82:39:af:31:cc:94:2d:60:d4:
         02:2b:bb:23:5e:95:2e:9c:a4:9b:9d:11:ab:64:36:48:1a:7b:
         f4:84:17:02:8a:dd:41:20:1b:c1:81:ad:4a:b4:b9:82:35:80:
         19:8c:45:e1:65:25:12:d3:18:1b:66:a5:f8:bb:60:70:8b:c7:
         1a:3f:1c:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:22 2026 by rpki-client