Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36362e302f32342d3234203d3e203536323832.roa
File:                     3130332e3233312e36362e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          BJC/0LMvaLCMIQdkXKCX1NSx5mTazNBZgb2YbrMNRt4=
Subject key identifier:   B6:73:41:06:66:88:19:C5:8D:BC:DE:9D:58:E1:01:4E:4E:3A:F6:3F
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       70ADC80E286A137344D7B72135B85DE7CC319FE5
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36362e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:38:37 +0000
ROA not before:           Tue 09 Jun 2026 06:33:37 +0000
ROA not after:            Tue 08 Jun 2027 06:38:37 +0000
asID:                     56282
IP address blocks:        103.231.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ad:c8:0e:28:6a:13:73:44:d7:b7:21:35:b8:5d:e7:cc:31:9f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:33:37 2026 GMT
            Not After : Jun  8 06:38:37 2027 GMT
        Subject: CN=B6734106668819C58DBCDE9D58E1014E4E3AF63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ae:61:a9:32:84:69:9f:7d:b2:e8:36:7b:48:
                    3d:74:d7:b5:e8:a6:b7:0b:62:cd:68:3b:03:7e:75:
                    e9:16:0f:2b:eb:6f:5d:99:cd:55:1b:24:e9:08:55:
                    c5:42:fd:0d:39:33:aa:3d:27:a3:a8:b5:ac:9e:5b:
                    84:b1:d6:a8:a2:b8:4f:42:cd:f6:64:a2:d6:62:6a:
                    c0:2a:8c:9f:18:b9:61:04:2c:db:99:b5:43:ec:f2:
                    23:68:db:73:d6:4b:8e:02:62:ad:ba:07:12:77:1f:
                    22:3f:6c:f6:b7:6e:c9:9a:4a:6c:5c:18:13:aa:62:
                    29:21:4b:1d:49:2f:d9:a9:7b:2a:93:99:bb:35:58:
                    ea:bd:fa:0a:c8:19:ed:1c:78:bd:d5:4e:22:a7:31:
                    06:a6:f4:7d:25:ef:e1:45:84:d7:eb:76:4b:8d:ca:
                    69:98:69:e6:01:c8:b3:fa:e5:83:e8:e0:e3:9b:50:
                    cb:b1:6b:0d:4b:92:06:ed:7d:cf:65:79:55:9d:bd:
                    e5:94:c9:a9:7e:94:33:56:fe:33:97:18:64:f9:57:
                    31:81:48:fc:ae:02:04:6c:35:d7:72:45:8e:bd:0f:
                    26:1b:b7:64:e5:3e:56:98:e0:11:d0:5a:bf:8d:ac:
                    23:bb:cb:8b:34:96:7b:05:32:a2:cc:c3:40:e1:86:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:41:06:66:88:19:C5:8D:BC:DE:9D:58:E1:01:4E:4E:3A:F6:3F
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233312e36362e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:f9:e1:34:b9:cd:f7:53:01:d2:18:5b:69:32:cc:1f:92:
         32:8f:0f:0e:44:19:21:1a:93:03:1f:7d:1f:84:cb:e9:a7:86:
         86:d5:7f:d2:87:44:0c:67:02:88:66:04:81:30:10:3c:e8:45:
         fa:65:06:18:b4:c0:18:36:5b:a4:f6:86:ef:8c:b8:c5:e6:25:
         94:a4:4b:85:8b:9c:64:69:c9:49:49:a3:89:5c:50:bd:0c:3e:
         f8:03:40:f7:31:8a:dd:47:fe:ad:5c:f8:92:5d:3d:27:1d:d0:
         88:f2:ad:47:80:14:fd:23:a0:6a:c2:e7:d5:a4:7d:f6:d0:c7:
         03:b2:f5:20:be:3d:e3:fe:96:df:a0:bf:2a:85:5d:37:ed:a1:
         34:68:ea:08:d0:30:23:03:4b:62:90:4b:36:9a:e8:f3:cc:ee:
         1f:a6:2c:d5:f9:63:54:08:c1:7d:c5:bd:dd:c6:4a:af:96:29:
         55:dc:01:f3:38:41:85:03:23:b9:d8:ea:9d:2b:96:b3:4e:7c:
         13:c7:9b:d2:24:dc:07:92:e0:85:b7:9e:8f:e1:79:01:6d:e1:
         c0:85:4e:95:9c:70:96:64:e3:6b:ff:46:17:0f:02:7c:74:74:
         44:dd:6c:82:c4:8f:9a:21:0f:39:9d:e9:dd:26:5a:e7:34:bf:
         18:2f:dc:39
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:24 2026 by rpki-client