Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32332d3233203d3e203536323832.roa
File:                     3130332e3233352e3232342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          jJ5QCjdNzbabMM6I7ZDvpYBlZg33tLigj3s19W43TU8=
Subject key identifier:   6D:50:F8:C0:0B:C0:BE:71:76:FC:EA:13:65:73:5A:87:30:9E:98:96
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       0B202F9A2FC086070F22B8C568A7B116F2B0EA36
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:44:58 +0000
ROA not before:           Tue 09 Jun 2026 06:39:58 +0000
ROA not after:            Tue 08 Jun 2027 06:44:58 +0000
asID:                     56282
IP address blocks:        103.235.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:20:2f:9a:2f:c0:86:07:0f:22:b8:c5:68:a7:b1:16:f2:b0:ea:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:39:58 2026 GMT
            Not After : Jun  8 06:44:58 2027 GMT
        Subject: CN=6D50F8C00BC0BE7176FCEA1365735A87309E9896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:57:51:35:b0:08:6d:6c:56:7e:5d:16:8d:
                    b8:26:4d:6e:c5:d0:1c:f3:29:33:22:36:14:d7:95:
                    23:1e:dc:a0:92:0c:74:70:5a:ff:ac:b1:83:4b:30:
                    43:1c:07:12:30:1a:6f:e9:46:2d:50:5f:37:0c:17:
                    19:95:5e:85:5a:77:5c:22:53:3a:41:1e:f3:eb:eb:
                    da:98:72:75:1b:61:73:fc:8c:94:31:d3:ae:fc:bd:
                    d4:db:e3:2d:85:e1:15:f6:87:34:e9:cf:34:aa:47:
                    30:66:a2:ef:01:41:e8:08:e8:05:cb:c2:49:8c:2d:
                    e3:85:aa:52:94:23:f1:2a:ff:20:d9:71:ce:86:f1:
                    41:4a:6f:2d:8c:55:a9:90:69:53:3e:f0:1f:bd:0f:
                    93:cd:3e:6f:86:08:ba:0b:dc:27:fd:7a:a4:c8:31:
                    eb:5c:9f:af:e2:12:60:55:63:bf:c3:d1:02:4e:89:
                    0b:88:96:81:b1:1b:10:44:c3:ed:f7:61:f4:6c:45:
                    65:b8:d1:fd:2b:d9:c8:65:b2:24:9a:98:89:5e:6d:
                    cb:fe:70:ef:72:0b:87:24:d8:85:99:07:bf:b1:50:
                    83:cf:bc:74:cd:d2:7d:5c:b7:75:04:c3:79:6c:80:
                    cb:79:46:b4:7b:ab:5d:4b:33:d0:b0:05:bf:02:5c:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:F8:C0:0B:C0:BE:71:76:FC:EA:13:65:73:5A:87:30:9E:98:96
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232342e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:09:48:4e:95:c2:31:57:16:1f:aa:ab:b4:10:bf:20:57:
         ae:ce:70:39:cf:bb:29:f1:41:d3:ae:bc:b4:5e:67:df:c2:a5:
         54:ee:a1:52:fe:79:b7:29:bd:61:71:73:d2:db:be:8c:96:f3:
         38:f7:1f:38:e1:a6:77:de:a9:4a:ff:be:e8:c0:ec:1b:b6:21:
         cf:e9:f8:79:14:f8:fa:f1:c3:6f:7d:0c:2b:1c:c2:ab:c2:c1:
         7b:ec:88:10:bc:7c:f8:18:01:c8:09:76:40:4d:1e:73:6f:e3:
         50:69:e4:09:e1:09:3f:84:8c:c7:d9:5c:be:da:da:e2:56:88:
         cc:3d:81:c4:65:76:67:a9:fd:d9:2e:c5:3e:6a:85:fc:96:55:
         58:11:8a:1b:9c:c1:f2:14:19:a9:ec:3d:50:71:7e:55:3e:63:
         ca:b4:64:19:95:db:c3:d1:dd:5a:69:54:9c:dc:e0:a1:32:a7:
         ed:33:2c:59:60:bd:7c:61:ca:18:bf:ad:31:09:03:84:0f:3e:
         b4:a8:31:63:39:f4:69:34:8d:d7:c6:e2:fc:0e:5c:85:d6:58:
         a8:05:bd:b7:92:f4:37:01:71:dd:33:07:30:f6:79:d1:9f:be:
         d5:c3:6a:91:81:64:e7:64:70:30:b1:5c:b9:93:ae:11:f2:74:
         a2:ed:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:06 2026 by rpki-client