Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232352e302f32342d3234203d3e203536323832.roa
File:                     3130332e3233352e3232352e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          G9W2FcbTYPoPW1Lt4cvmF0X4kdMaN6zbQq4cmxsQDyI=
Subject key identifier:   5B:C2:11:A0:E8:79:D0:4E:DC:E6:F9:D4:4E:0E:7A:5B:F6:9B:00:C7
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       165BA44EDD8624B2AEAB8118425C7B926951E06F
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232352e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:44:45 +0000
ROA not before:           Tue 09 Jun 2026 06:39:45 +0000
ROA not after:            Tue 08 Jun 2027 06:44:45 +0000
asID:                     56282
IP address blocks:        103.235.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5b:a4:4e:dd:86:24:b2:ae:ab:81:18:42:5c:7b:92:69:51:e0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:39:45 2026 GMT
            Not After : Jun  8 06:44:45 2027 GMT
        Subject: CN=5BC211A0E879D04EDCE6F9D44E0E7A5BF69B00C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:bd:2b:5c:81:aa:66:2f:e9:79:ce:f3:5b:
                    b4:c5:c1:3c:d4:21:c4:93:18:0f:da:11:3e:2f:0d:
                    e2:3a:29:b2:a8:ff:55:72:db:90:1e:f0:58:d8:39:
                    e7:e8:ee:39:0d:fe:e7:f2:ae:61:d9:2d:1a:bc:24:
                    85:79:cf:ef:44:67:d1:6b:ac:88:57:e3:3b:f1:d6:
                    b1:20:71:01:8a:a3:fc:4c:df:ea:2b:72:bb:f3:af:
                    64:3f:a5:c4:62:ba:b6:ab:b3:ae:2a:5d:e1:42:2c:
                    42:e3:a2:b0:2a:19:90:d0:5b:f7:73:88:24:7b:07:
                    0b:eb:d6:fc:dc:0d:67:4d:10:82:b0:6f:1f:e2:17:
                    70:ad:f5:b4:1a:90:8e:53:a4:1e:d0:88:9f:a3:41:
                    32:ff:35:ab:fe:d6:c3:40:0e:94:f9:f5:f0:b7:f4:
                    cb:e8:26:77:6e:74:c1:bb:95:21:5e:cd:8f:9c:4a:
                    a7:9e:73:10:b6:53:2e:14:58:77:7b:8c:59:31:03:
                    66:23:25:62:6d:85:7d:55:f6:6f:82:93:47:d4:17:
                    96:84:b7:f6:53:01:a0:87:38:0c:02:3f:a1:da:92:
                    c3:af:ff:9e:0d:8c:01:00:7e:f7:2b:05:0f:fa:d3:
                    b9:ea:36:b5:da:1f:66:a1:ea:fc:e6:39:0e:19:6b:
                    ad:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C2:11:A0:E8:79:D0:4E:DC:E6:F9:D4:4E:0E:7A:5B:F6:9B:00:C7
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232352e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:b7:b1:73:77:16:4e:db:e6:ed:d1:0b:8f:ca:e0:d3:14:
         fa:16:d0:e6:9e:86:d4:08:c6:7c:9f:95:19:41:a5:90:52:62:
         e3:89:10:8f:18:32:83:15:36:00:cc:e7:94:de:d1:84:e3:b3:
         16:cb:2d:57:08:82:aa:64:9d:76:b6:46:b0:2f:bf:3a:a5:f8:
         57:cd:14:9d:2e:bd:76:76:79:75:ea:40:0f:33:33:99:0a:54:
         81:89:33:6f:27:7a:b7:cf:de:9d:a4:db:df:53:b7:01:67:b8:
         ed:85:63:42:99:54:61:79:ea:2f:64:e3:fc:73:81:1a:39:57:
         9e:05:bf:e1:96:42:e2:5d:e6:35:2d:69:c0:e2:3f:61:c5:0a:
         30:3b:3a:81:36:12:56:2a:50:01:8d:c8:0e:fc:02:87:6f:93:
         04:92:28:1b:8d:21:92:18:46:4a:fe:9b:d8:e3:8c:0f:93:4e:
         fc:52:54:6c:07:65:3f:cf:d9:1d:db:0b:84:27:b0:90:9a:ff:
         36:2c:44:3f:d8:7b:5d:91:72:01:27:35:c1:11:7b:a4:2d:0e:
         18:9f:10:01:ef:d8:91:81:ed:b3:1f:76:3b:86:51:cb:f6:5b:
         43:48:4b:70:fb:78:29:ff:6d:d9:1b:3e:32:7a:d7:14:0d:91:
         53:67:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:36 2026 by rpki-client