Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232382e302f32332d3233203d3e203536323832.roa
File:                     3130332e3233352e3232382e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          QViCqIM7MO1c1isLTHz+vF8wAOhIHIZH5AIYiUg3cls=
Subject key identifier:   27:B1:F4:2B:E9:26:A9:98:1F:93:23:22:6C:91:04:01:10:65:E5:6D
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       2E76DC3F7E8F534A02080E5DDD8425616220BA7C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232382e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:45:39 +0000
ROA not before:           Tue 09 Jun 2026 06:40:39 +0000
ROA not after:            Tue 08 Jun 2027 06:45:39 +0000
asID:                     56282
IP address blocks:        103.235.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:76:dc:3f:7e:8f:53:4a:02:08:0e:5d:dd:84:25:61:62:20:ba:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:40:39 2026 GMT
            Not After : Jun  8 06:45:39 2027 GMT
        Subject: CN=27B1F42BE926A9981F9323226C9104011065E56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:e4:cf:fa:e1:c9:89:95:13:e6:1e:94:86:
                    9e:c3:a7:1f:3a:91:e7:04:6a:9e:b4:8f:c2:cb:c2:
                    f0:7b:e5:23:b9:8f:bd:63:3e:89:2b:03:64:04:da:
                    e1:8f:1b:56:0a:04:ae:bf:71:78:3d:30:02:f3:26:
                    d0:d8:a7:a5:6c:63:61:55:d7:c6:84:94:3b:5c:64:
                    2f:f1:0d:6b:96:7b:34:39:1c:12:7c:34:ae:4a:53:
                    c5:87:5d:22:a9:a2:94:bc:aa:00:7a:48:a2:03:21:
                    a9:8a:5d:ed:0c:9b:96:64:47:06:85:f0:35:a2:2e:
                    81:bd:5e:c8:7b:86:5b:be:3f:74:6a:c3:ec:b0:7f:
                    c6:10:b6:68:18:29:1b:c5:92:c1:be:3b:97:9a:3f:
                    a4:0b:26:3c:c7:81:fd:cf:61:eb:ec:69:6e:50:94:
                    73:ed:40:04:ce:44:60:9c:4b:cd:ce:29:f9:d5:26:
                    41:ff:a2:d8:46:6c:90:28:d9:6d:eb:11:dd:9c:2e:
                    03:47:24:a3:49:fd:f0:05:1b:3c:8c:cf:7e:3a:cb:
                    91:76:3c:c0:20:ec:9a:5e:fa:a2:e4:13:64:54:9a:
                    fe:eb:95:0a:00:26:52:ad:ae:77:5e:08:a6:74:85:
                    fb:d1:db:51:db:38:03:eb:83:0c:e6:ae:ac:c2:ff:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:F4:2B:E9:26:A9:98:1F:93:23:22:6C:91:04:01:10:65:E5:6D
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3232382e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:65:6a:b5:c0:86:c8:95:90:2d:c0:42:3f:42:3a:53:73:f0:
         91:62:9b:ff:57:cd:5e:36:03:a5:22:06:e3:9c:ee:3a:59:a7:
         c0:57:76:05:b5:55:52:fa:ef:06:d9:90:eb:cc:79:da:40:c3:
         66:63:46:38:87:f7:b2:10:6a:1e:58:07:50:c9:d6:24:2b:53:
         6c:81:56:f3:d6:f3:14:e7:50:67:fb:cd:57:ac:5a:13:a4:fc:
         ac:86:0c:a6:18:d3:39:ec:70:f4:12:36:86:75:3d:7d:ba:f0:
         13:7b:dd:f6:c1:6d:e4:cc:f3:9e:2c:a1:02:ec:c8:95:e0:36:
         e0:5b:f7:b0:e2:f0:17:74:f8:45:c7:8e:f5:76:f7:3c:b4:e8:
         fe:62:49:10:d7:a7:86:fb:4f:61:71:5c:b1:22:1b:6a:2f:4d:
         b4:4b:3a:41:9b:18:b7:3e:3e:6c:27:80:2e:c9:c1:a4:2f:ce:
         3e:69:d2:e2:86:34:7d:38:24:66:6b:1c:7b:0b:2c:e2:9e:2c:
         f3:d5:25:05:12:55:fa:47:fc:ae:3f:24:d6:42:1a:5a:eb:bc:
         c4:45:d4:8f:e1:7c:5a:c0:9f:5e:ab:10:a4:55:04:3c:a4:1b:
         e8:f1:2f:a4:e3:98:76:f9:71:32:46:f9:d0:c6:f4:15:a8:90:
         d9:40:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:23 2026 by rpki-client