Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232322e302f32332d3233203d3e203536323832.roa
File:                     3130332e3233352e3232322e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          A6pvlDgEmUpNzimCSqxrrBhIBfaRryEjuhcYvZSLDIs=
Subject key identifier:   3C:E3:BA:05:1F:67:0E:80:27:7B:79:67:A1:6C:87:F5:C4:26:13:C3
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       405DF4EA988B57C9541DA90C42D5C990E6668B41
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232322e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:44:03 +0000
ROA not before:           Tue 09 Jun 2026 06:39:03 +0000
ROA not after:            Tue 08 Jun 2027 06:44:03 +0000
asID:                     56282
IP address blocks:        103.235.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5d:f4:ea:98:8b:57:c9:54:1d:a9:0c:42:d5:c9:90:e6:66:8b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:39:03 2026 GMT
            Not After : Jun  8 06:44:03 2027 GMT
        Subject: CN=3CE3BA051F670E80277B7967A16C87F5C42613C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:21:76:00:79:1d:0c:4d:70:3f:02:e7:fa:
                    61:dc:ef:c4:fa:f7:e0:89:00:61:4d:e4:20:d6:d8:
                    c6:5d:cd:e9:b9:f1:ea:5c:28:48:f3:79:a6:c5:59:
                    85:d0:25:76:90:7d:81:c2:cf:69:79:2c:c9:c6:32:
                    7d:cc:db:c2:84:72:64:62:29:ef:42:90:d3:a1:52:
                    4e:99:88:e5:75:84:5f:dc:67:c3:4e:ac:2a:3f:66:
                    9e:29:50:25:db:c6:f7:6b:44:9a:2a:47:5f:d2:1a:
                    27:e6:1f:44:e8:9c:cf:5e:50:55:50:1b:d1:5f:cc:
                    46:47:3a:d2:8e:59:23:e4:56:a0:2c:9a:82:53:6f:
                    88:df:27:b2:10:4a:0a:d8:be:2f:1a:15:c0:54:01:
                    55:9b:c4:10:0c:ec:47:b9:2a:a2:be:f8:4e:aa:b5:
                    4a:7d:80:03:de:88:02:54:47:62:82:db:7d:47:db:
                    db:7a:84:7a:a7:ee:00:f8:fe:9c:b4:08:5a:d2:60:
                    ee:c4:b9:ae:1d:2b:15:20:7d:22:25:b9:5a:33:41:
                    5c:7f:c5:2c:88:cc:72:47:b9:20:4d:62:2b:5f:40:
                    8f:c2:ef:1c:e1:ce:e3:5e:44:a3:6a:e8:47:9a:33:
                    4c:e0:09:99:0a:5d:bf:b8:95:02:b0:43:32:45:73:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:BA:05:1F:67:0E:80:27:7B:79:67:A1:6C:87:F5:C4:26:13:C3
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232322e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:03:95:ac:ef:f4:64:c4:f7:bc:66:a6:3c:0c:87:ea:d5:a4:
         9d:e5:7d:c9:73:66:db:97:11:32:c7:a7:55:8f:83:41:4f:9d:
         e4:3f:6b:4d:1e:a9:45:14:f1:fc:62:d8:80:d4:86:50:a0:84:
         26:16:a2:77:93:9e:f1:3f:2b:9e:a9:70:0f:00:a4:0f:52:4c:
         3f:9d:75:f7:8b:86:9e:bd:92:4e:35:a0:cb:1b:d7:71:89:90:
         29:14:cf:6d:34:0f:46:87:35:30:a5:a3:e8:d6:dd:2b:da:2d:
         16:32:21:c9:7d:54:1d:c4:86:1a:7e:08:5b:ad:46:a1:e5:57:
         fa:9a:65:44:54:08:52:ec:cf:8e:2b:c4:57:fc:fa:d4:9d:24:
         27:2c:53:83:de:5e:65:01:3a:76:f9:8b:26:da:c9:af:c8:94:
         7f:b0:87:8a:51:98:aa:ba:37:4c:ba:c3:97:4f:bd:f5:a7:67:
         12:2d:49:b8:51:8e:cc:14:89:8e:f1:e0:37:12:5f:b5:10:da:
         3d:fc:43:e9:5e:7a:5e:11:13:ea:fb:a0:61:8b:8c:b9:bf:76:
         46:10:5f:dd:ef:73:37:d8:64:5f:24:c3:98:fd:7e:70:ea:4b:
         5e:5b:02:99:da:c2:42:95:6f:26:d2:5a:45:0e:e7:ae:77:9f:
         0f:c6:f1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:21 2026 by rpki-client