Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36352e302f32342d3234203d3e203536323832.roa
File:                     3130332e3233312e36352e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          TOcuXc2RSehEKIkGoU/LDFThO+Ghy03viApLRXOyo1Q=
Subject key identifier:   BD:5A:23:36:26:77:51:6F:5A:B3:98:3E:1F:97:DE:51:AE:33:4E:16
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       3E49A9F91E87F56402B3420FF616B02223A8329C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36352e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:38:19 +0000
ROA not before:           Tue 09 Jun 2026 06:33:19 +0000
ROA not after:            Tue 08 Jun 2027 06:38:19 +0000
asID:                     56282
IP address blocks:        103.231.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:49:a9:f9:1e:87:f5:64:02:b3:42:0f:f6:16:b0:22:23:a8:32:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:33:19 2026 GMT
            Not After : Jun  8 06:38:19 2027 GMT
        Subject: CN=BD5A23362677516F5AB3983E1F97DE51AE334E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:43:97:b1:db:da:5b:ac:e2:5f:d5:e8:e1:
                    d8:c4:3d:47:c4:96:42:38:5c:ee:d6:ff:c8:27:8b:
                    47:db:5e:da:a1:9b:40:99:ba:ce:13:da:b4:90:0f:
                    e1:ad:d5:b6:6b:06:61:29:2d:be:db:79:7b:41:a7:
                    fb:d2:20:5c:f1:75:16:02:30:3d:e2:b0:0a:ba:82:
                    60:3c:77:6e:96:b4:fb:3e:55:00:d0:be:41:9d:ab:
                    b8:3a:d3:b4:8f:b0:91:dc:b2:63:60:cb:f5:94:2f:
                    92:65:0b:a9:7e:f4:0e:92:d7:d2:ef:8f:bd:d0:f3:
                    d0:cb:bc:03:e9:16:cb:22:b8:a1:2d:53:d1:0e:c6:
                    e4:e3:24:c8:fd:ab:f1:2d:a8:90:f9:f2:66:d4:a8:
                    25:75:43:9f:9c:fe:96:54:23:7d:ab:06:a9:5b:f7:
                    cd:72:cf:88:5b:99:96:0c:38:0d:03:0f:00:0a:03:
                    f5:59:21:ae:0a:7b:02:f0:cc:48:8c:ca:4b:69:62:
                    b3:16:75:6c:bc:20:e5:2e:9a:c6:7a:67:86:71:21:
                    8d:a2:14:c3:89:8d:0a:b5:1e:bf:94:c6:f7:19:b7:
                    b4:d0:9b:47:3c:38:c9:d1:85:e5:ec:de:94:63:e0:
                    36:4a:00:9c:c1:2a:1b:df:46:fc:7c:ef:a8:51:08:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5A:23:36:26:77:51:6F:5A:B3:98:3E:1F:97:DE:51:AE:33:4E:16
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36352e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f5:e8:e1:e2:1f:92:75:27:49:e8:13:9c:94:3e:a1:52:90:
         11:40:a1:98:a7:97:0e:ab:40:28:7f:bb:f9:05:b0:6a:00:de:
         28:de:94:a2:82:89:23:53:3c:34:d3:ff:be:92:62:f6:b6:03:
         f5:a4:05:e5:b9:e8:59:5a:df:8a:df:12:ae:c1:fe:5c:78:36:
         6f:c6:cb:ab:12:63:03:1f:6f:04:66:fa:b6:75:e2:f3:f3:59:
         8b:f2:a3:cd:ac:67:a0:58:14:36:0f:19:a5:e5:2b:fe:9f:94:
         12:a6:35:ce:df:c6:2d:9f:5f:27:b4:e9:53:7c:3e:52:bf:8a:
         7d:e9:b2:e5:77:d3:96:6c:5c:ee:11:ae:0f:0d:d8:05:ff:21:
         9e:7f:fd:e4:c5:14:26:54:fb:9f:89:9a:36:a3:d1:8b:d1:55:
         53:10:41:74:17:b5:d6:ab:55:19:cb:75:c3:d7:01:1a:59:e0:
         16:1e:2c:05:30:3e:74:59:ab:b5:32:c7:1b:55:2e:49:21:d4:
         20:db:d6:d6:f4:f7:4e:3b:2b:34:a1:66:70:0b:34:d0:d3:42:
         6c:0f:3b:2d:1c:cb:ca:c6:c1:bc:7b:f2:20:70:54:7e:11:9a:
         f5:b8:c9:ec:bf:5f:c8:08:34:c6:7a:83:a4:90:72:42:17:be:
         a4:55:ee:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:24 2026 by rpki-client