Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
File:                     3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier:          QeEJOQ4nVeqdi6bjKTiBxFo5H7hpFJwlb3iy7aluj3E=
Subject key identifier:   97:AC:77:FC:E3:54:28:FF:D9:B0:CE:C3:11:CD:4A:4B:53:A9:BD:C8
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       06BA2C44526DBE80899B0138BC5DFE376880038B
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:39:00 +0000
ROA not before:           Tue 09 Jun 2026 06:34:00 +0000
ROA not after:            Tue 08 Jun 2027 06:39:00 +0000
asID:                     56282
IP address blocks:        103.231.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ba:2c:44:52:6d:be:80:89:9b:01:38:bc:5d:fe:37:68:80:03:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:34:00 2026 GMT
            Not After : Jun  8 06:39:00 2027 GMT
        Subject: CN=97AC77FCE35428FFD9B0CEC311CD4A4B53A9BDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:e6:89:40:9d:64:19:f5:16:1f:f8:97:e3:
                    86:01:d8:04:08:a6:74:1b:28:50:82:c9:9a:6c:79:
                    39:ed:cd:ae:ed:4b:c1:6a:01:36:8b:e2:1b:8e:63:
                    d3:de:6b:90:8b:6e:49:7d:30:d4:31:5c:f4:cf:86:
                    9c:14:25:3e:b4:f9:cf:68:18:69:8d:fc:10:aa:f7:
                    9d:cd:1c:ea:bd:a5:b7:e7:e6:2f:e6:97:ec:d0:72:
                    7a:46:1d:dc:ea:97:a8:4b:d8:0d:73:a1:93:e7:43:
                    4a:51:ab:af:f2:64:95:8a:57:51:15:9b:88:f9:22:
                    9c:34:3c:60:94:b2:04:36:69:86:92:f8:11:6e:19:
                    24:78:28:1b:6a:c3:be:53:98:18:de:4c:79:4f:38:
                    a0:8d:bf:99:94:90:0d:e4:02:7a:87:a4:14:db:b4:
                    88:fa:96:03:3d:7d:ec:a1:f2:58:9a:09:84:cb:9a:
                    0e:ba:0b:e4:a3:a8:4e:cd:33:67:b1:75:03:4a:d2:
                    67:4c:a3:14:4e:72:72:b4:ad:08:b3:86:d5:d1:3d:
                    81:b8:2d:80:4a:6f:20:00:1d:2b:1f:fc:e6:26:47:
                    78:1e:5d:22:6c:76:fe:ac:c2:23:d9:4c:64:53:7a:
                    9d:74:48:b3:0f:e9:2d:83:4c:bd:c7:30:6c:f8:7c:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AC:77:FC:E3:54:28:FF:D9:B0:CE:C3:11:CD:4A:4B:53:A9:BD:C8
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36342e302f32322d3232203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:18:7a:98:a0:88:c5:93:1a:67:27:0b:cc:61:a1:a4:47:a1:
         1b:fb:08:93:53:d8:1c:a7:0c:b6:d8:1d:d4:15:70:fe:f1:a1:
         8a:9b:1f:97:26:24:fe:af:f7:74:88:74:27:f5:b8:e1:23:eb:
         be:a9:25:1b:6e:9c:81:7d:bc:6f:9c:04:86:2c:9f:bb:87:9a:
         22:fe:f1:13:d4:2c:d6:d8:91:b0:32:5f:2e:09:2d:1c:0f:57:
         3b:94:23:7c:b7:9e:d0:1a:a2:e5:a4:52:50:11:77:d6:e3:7f:
         2b:16:0e:1c:d0:8b:8c:17:45:7f:c2:0e:e6:f7:34:2e:7f:4b:
         0a:38:3c:c1:2b:a4:5e:d7:85:28:ae:11:7d:75:b9:eb:8d:e1:
         6e:30:ae:7c:6b:55:67:12:e7:4b:8b:1e:04:94:af:42:ae:d8:
         b7:5b:ed:56:4d:a8:e1:76:7c:13:c8:4a:1e:07:4b:b3:38:f1:
         31:de:38:57:5e:d6:f5:b5:28:8f:e7:d4:5b:7d:21:a8:4b:99:
         02:ba:b4:35:3f:f4:ac:24:59:da:9f:80:68:b0:42:d7:35:fc:
         62:e8:b3:5d:9c:23:36:11:a4:c3:83:43:fd:b0:37:bd:d5:cb:
         ed:8a:b2:ce:9d:c1:6f:f1:ef:34:79:75:e4:3c:62:a5:33:1d:
         3e:9a:93:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:23 2026 by rpki-client