Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38322e302f32342d3234203d3e203536323832.roa
File:                     3130332e3232372e38322e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          gYBBr9XxJEAjVOKUhTcMzzfnFhuTGOg8utlzmI9IH3Q=
Subject key identifier:   AB:C1:D1:D9:18:4B:96:B8:69:1D:E4:7F:6B:78:CF:32:A3:C1:63:0F
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       5D577D8EFF4A88BF7F59D1DB7ACCDF79564E63FE
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38322e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:49:01 +0000
ROA not before:           Tue 09 Jun 2026 06:44:01 +0000
ROA not after:            Tue 08 Jun 2027 06:49:01 +0000
asID:                     56282
IP address blocks:        103.227.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:57:7d:8e:ff:4a:88:bf:7f:59:d1:db:7a:cc:df:79:56:4e:63:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:44:01 2026 GMT
            Not After : Jun  8 06:49:01 2027 GMT
        Subject: CN=ABC1D1D9184B96B8691DE47F6B78CF32A3C1630F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:c6:c8:7c:62:94:f8:5f:9e:d3:6a:87:43:
                    60:da:ae:a7:fe:59:d8:bc:ad:97:1d:4a:4c:bf:3e:
                    66:d6:b8:81:8d:28:a5:6a:ab:65:75:01:90:1a:f3:
                    c8:7a:0b:a5:01:28:d0:23:49:b1:f8:63:59:10:19:
                    91:2f:ba:4e:10:74:38:7a:ae:cf:c8:33:20:79:3e:
                    b0:5a:63:d5:e0:26:09:ce:23:da:c5:0c:00:bb:87:
                    d6:85:1b:3c:bc:7b:40:ac:8a:69:e8:41:31:d2:b0:
                    57:2e:ad:47:0f:2e:f2:a0:e4:82:ca:7e:ea:e8:4f:
                    ba:7e:42:eb:5e:9c:11:46:00:a1:25:a3:84:d3:c3:
                    5e:24:53:16:98:3f:5b:85:0c:bf:23:2d:2e:11:e6:
                    7a:8e:ee:04:7d:53:59:fe:c7:4d:11:51:fc:0b:28:
                    a6:f5:76:f9:a3:04:c1:f0:9b:83:30:3a:e8:ab:4c:
                    1f:dc:12:3c:9b:b3:a9:91:a4:8b:8e:22:c2:5e:e6:
                    8c:4a:89:6a:e1:b7:79:45:dd:8b:4f:e8:39:1c:31:
                    76:a7:ae:2b:34:0a:e8:2a:c3:70:98:a6:28:23:13:
                    d9:17:a9:e7:b9:b9:d3:18:f6:cc:e9:61:0a:01:30:
                    e2:5e:ec:b6:da:32:03:2e:7f:65:03:5f:a8:62:9f:
                    91:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:D1:D9:18:4B:96:B8:69:1D:E4:7F:6B:78:CF:32:A3:C1:63:0F
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3232372e38322e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:13:ea:37:81:8f:2d:35:82:31:b9:b6:db:c2:28:d4:8b:
         c6:12:70:3a:66:fb:1a:e8:e7:ea:f3:19:b5:31:7e:3b:f3:53:
         8c:bb:f0:db:d8:41:95:32:80:82:2e:ca:20:8e:5b:50:b0:79:
         4c:b3:c3:44:1f:46:40:ec:88:43:df:49:ca:a1:72:a0:c9:b4:
         d7:34:e9:b9:64:47:38:01:6c:3a:cd:e4:61:85:0e:29:3b:f8:
         28:02:28:38:78:89:7b:68:10:24:d3:8e:6f:4d:ac:fe:09:fb:
         4c:7f:cf:95:0f:d0:17:f8:7a:a0:8e:e0:f6:c4:aa:50:02:93:
         30:ba:1a:80:95:6f:c1:1b:c2:79:cf:0a:bd:28:60:bb:ad:eb:
         e2:20:42:53:86:29:df:b9:bc:3b:23:31:dd:8c:93:81:27:81:
         d2:5d:4e:b8:2e:18:9a:68:8b:4f:66:ea:67:72:20:95:87:e1:
         e1:a2:95:1d:49:3a:a6:9f:48:76:49:46:c8:17:50:fa:fc:40:
         f1:28:8b:d1:58:4c:62:e2:50:2c:90:a8:3f:3d:18:4b:71:4f:
         46:78:ac:82:8c:e8:7e:35:10:4e:e3:c1:ed:7a:90:f5:61:6d:
         db:94:5d:31:d5:ec:d6:f2:6e:9a:bb:e7:47:bf:6a:08:03:18:
         a8:66:54:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:37 2026 by rpki-client