Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa
File:                     3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier:          IdGmejI8pBxZ7gAwmWMjmEHJtsgE5JChulYspKCWk/E=
Subject key identifier:   4D:EE:EF:DB:9B:55:12:27:6C:F5:A4:C0:CA:6A:24:E5:38:C8:47:1A
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       596BABEB648E7695FF8EDDB9C3BB4C794B24B4BE
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:50:05 +0000
ROA not before:           Tue 09 Jun 2026 06:45:05 +0000
ROA not after:            Tue 08 Jun 2027 06:50:05 +0000
asID:                     56282
IP address blocks:        103.235.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6b:ab:eb:64:8e:76:95:ff:8e:dd:b9:c3:bb:4c:79:4b:24:b4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:45:05 2026 GMT
            Not After : Jun  8 06:50:05 2027 GMT
        Subject: CN=4DEEEFDB9B5512276CF5A4C0CA6A24E538C8471A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:72:7a:c5:2f:ea:7a:ec:3e:60:2d:cf:99:
                    a7:f6:cd:d5:c6:05:50:03:23:a5:07:ce:8d:78:bb:
                    55:eb:b3:f4:5f:81:90:82:19:cb:07:ee:df:aa:65:
                    64:a1:ab:8b:20:56:e1:c5:14:ff:c4:05:c9:63:af:
                    09:68:a2:3f:3b:36:6f:50:73:6a:16:9f:b3:8b:4d:
                    79:78:96:83:5c:cc:68:7f:db:7a:c0:7d:8d:42:2b:
                    ee:3d:4c:da:9c:63:55:b0:9e:a6:51:27:5d:83:2d:
                    12:5d:34:64:e0:f0:42:15:bb:df:4e:b2:95:20:5b:
                    a4:25:c1:74:9f:5f:13:fb:ed:b6:52:db:8a:5b:05:
                    2c:99:32:a7:58:30:ec:e2:7e:57:04:60:49:a5:88:
                    80:cc:3b:4b:95:40:c5:d9:7a:57:a3:16:22:44:00:
                    b0:a8:1c:4c:46:fb:59:bc:52:ba:9b:a9:15:c0:2d:
                    02:e2:00:e5:a5:bc:bb:9a:00:23:f5:aa:dd:a5:1a:
                    93:0a:48:b1:79:6e:0f:b0:38:05:4b:c9:69:10:44:
                    86:e5:3a:27:20:9b:d8:25:f9:b6:8b:62:cb:2f:9e:
                    28:15:5e:92:e4:39:b1:40:00:c2:d2:90:99:91:e6:
                    e4:72:e4:94:b4:8f:df:73:83:1d:88:2f:40:dc:37:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:EF:DB:9B:55:12:27:6C:F5:A4:C0:CA:6A:24:E5:38:C8:47:1A
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32322d3232203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:08:26:eb:01:8a:f1:60:74:5c:8a:58:c7:c1:f9:26:9a:21:
         f1:2d:a3:82:b8:f2:72:77:32:a0:3b:09:44:d3:cb:60:9a:59:
         99:9b:e4:23:4c:f0:4e:d0:20:0d:ba:cf:ec:70:64:66:be:bc:
         a7:11:41:4b:de:26:cb:10:f1:58:e1:a3:50:cd:54:44:32:68:
         33:37:b6:d3:b2:ee:c6:7f:57:fd:b1:93:b6:aa:cd:c8:1a:b7:
         92:bd:15:67:90:6c:44:80:f0:08:19:83:16:0e:d7:4c:7d:25:
         e2:00:e9:37:d4:5d:13:5a:c1:ca:eb:44:47:8b:83:75:09:9d:
         c2:0b:09:7d:8e:2f:b5:a3:8f:45:d5:17:82:a2:93:00:70:8a:
         d9:46:0c:eb:be:e5:c4:65:c8:74:68:e7:bc:f4:5f:bf:18:3d:
         7d:56:aa:a5:57:46:58:18:79:8b:cd:26:88:3d:68:60:f2:86:
         bc:35:74:45:50:a7:0f:dd:d8:b8:21:af:81:b0:ad:2f:65:c9:
         87:43:f8:53:f9:47:9e:46:22:73:6e:fe:9c:14:78:97:fe:4d:
         ed:5f:fb:c3:4b:86:bc:8f:11:9e:17:90:87:18:2c:d6:81:26:
         8b:a1:02:51:a5:d5:cd:35:b1:a2:f0:b4:44:c4:03:12:06:fb:
         4d:7a:e4:c6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUWWur62SOdpX/jt25w7tMeUsktL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjQ1MDVaFw0yNzA2MDgwNjUwMDVaMDMxMTAvBgNV
BAMTKDRERUVFRkRCOUI1NTEyMjc2Q0Y1QTRDMENBNkEyNEU1MzhDODQ3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbHJ6xS/qeuw+YC3Pmaf2zdXG
BVADI6UHzo14u1Xrs/RfgZCCGcsH7t+qZWShq4sgVuHFFP/EBcljrwlooj87Nm9Q
c2oWn7OLTXl4loNczGh/23rAfY1CK+49TNqcY1WwnqZRJ12DLRJdNGTg8EIVu99O
spUgW6QlwXSfXxP77bZS24pbBSyZMqdYMOziflcEYEmliIDMO0uVQMXZelejFiJE
ALCoHExG+1m8UrqbqRXALQLiAOWlvLuaACP1qt2lGpMKSLF5bg+wOAVLyWkQRIbl
Oicgm9gl+baLYssvnigVXpLkObFAAMLSkJmR5uRy5JS0j99zgx2IL0DcN9zDAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUTe7v25tVEids9aTAymok5TjIRxowHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC8zMTMwMzMyZTMy
MzMzNTJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMyMzgzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfr8DANBgkqhkiG9w0BAQsFAAOCAQEAkggm6wGK8WB0XIpYx8H5
Jpoh8S2jgrjycncyoDsJRNPLYJpZmZvkI0zwTtAgDbrP7HBkZr68pxFBS94myxDx
WOGjUM1URDJoMze207Luxn9X/bGTtqrNyBq3kr0VZ5BsRIDwCBmDFg7XTH0l4gDp
N9RdE1rByutER4uDdQmdwgsJfY4vtaOPRdUXgqKTAHCK2UYM677lxGXIdGjnvPRf
vxg9fVaqpVdGWBh5i80miD1oYPKGvDV0RVCnD93YuCGvgbCtL2XJh0P4U/lHnkYi
c27+nBR4l/5N7V/7w0uGvI8RnheQhxgs1oEmi6ECUaXVzTWxovC0RMQDEgb7TXrk
xg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:38 2026 by rpki-client