Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa
File:                     3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          q6AUvvaQkbFA+AupLPwTDUNUYhtvpxkZdNaHTWCmlvw=
Subject key identifier:   EA:47:62:A3:B3:29:50:E4:4F:DD:2B:C0:4C:94:D7:E5:AB:21:76:CC
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       5E539EDC5F229328FED7C80C4B3B62FE202F0E87
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:50:23 +0000
ROA not before:           Tue 09 Jun 2026 06:45:23 +0000
ROA not after:            Tue 08 Jun 2027 06:50:23 +0000
asID:                     56282
IP address blocks:        103.235.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:9e:dc:5f:22:93:28:fe:d7:c8:0c:4b:3b:62:fe:20:2f:0e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:45:23 2026 GMT
            Not After : Jun  8 06:50:23 2027 GMT
        Subject: CN=EA4762A3B32950E44FDD2BC04C94D7E5AB2176CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:93:92:2b:7e:f0:6b:b7:e6:dd:c0:9d:6d:
                    d2:57:03:09:9c:ae:0f:7f:3f:9c:68:3c:b7:b6:03:
                    21:a2:1f:79:a0:c2:bc:7b:c7:de:f3:53:fe:bd:14:
                    6b:bc:75:b4:35:1b:63:3d:10:18:ca:e6:98:7e:95:
                    bf:00:d3:68:9e:a7:0f:2a:f0:52:7c:e5:43:ce:75:
                    3c:37:28:f4:d7:94:dd:e9:f1:b8:95:cb:f0:1b:f1:
                    06:8f:19:8f:33:42:79:47:a9:72:0b:3e:e9:46:13:
                    59:90:2e:a0:ca:92:14:8a:57:cf:38:6e:dd:41:e2:
                    d7:e5:91:44:96:45:71:cf:d8:fa:5e:79:7c:4c:28:
                    ae:2f:25:6a:87:9b:5d:37:88:d0:b4:9c:bc:37:b7:
                    34:1b:a2:4a:5a:15:03:f1:95:1b:93:1c:f6:bf:6d:
                    eb:8d:11:ce:29:17:79:69:dc:c6:6b:6a:1d:f4:13:
                    83:79:6c:1c:e4:94:2a:89:15:de:fc:c9:f6:41:65:
                    73:89:51:a4:72:be:0e:65:95:f0:29:51:69:26:8d:
                    a6:7c:b0:ec:dc:7d:89:b1:c1:95:b2:ec:17:27:28:
                    88:d4:71:e4:7f:10:bf:71:8a:15:3b:5c:50:1a:97:
                    37:cd:a4:4d:21:cc:3d:7f:61:47:c0:75:0b:6a:d1:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:47:62:A3:B3:29:50:E4:4F:DD:2B:C0:4C:94:D7:E5:AB:21:76:CC
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234302e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:2f:9c:82:bb:92:37:77:9a:6c:70:74:c3:c9:4e:c3:5a:e5:
         4d:33:9a:1d:aa:f6:b5:d3:95:13:1b:e1:fe:dc:bc:e7:a9:1b:
         e5:91:a1:c1:f6:5d:f5:fd:42:19:da:41:a7:d8:47:0c:d4:35:
         f4:45:2a:ea:4b:39:96:00:48:ac:ee:3e:a9:ac:83:4a:c7:fb:
         b5:ed:df:fa:d0:c7:0a:e5:b9:e4:55:c8:20:d5:bc:e5:d5:95:
         05:4c:03:fc:2e:ed:27:10:2f:ec:1c:90:1b:2e:d9:de:dc:70:
         67:4a:5e:89:f2:80:46:79:fc:89:89:d3:16:c3:f3:56:ed:54:
         3a:58:56:d4:b5:03:35:08:f9:77:a9:6f:85:18:be:8c:40:f9:
         6e:c6:89:4a:86:b7:43:b7:33:2e:3d:86:1c:ca:ad:23:43:77:
         06:99:c1:44:ad:15:ec:90:dd:7e:ad:24:55:1d:ce:20:85:04:
         5c:6a:74:32:1d:81:4e:ba:04:50:dc:30:c4:83:39:c2:52:5d:
         1d:1d:25:77:77:c0:02:a7:c0:b3:8e:b4:fe:87:27:9a:f1:4f:
         7b:13:c3:c8:4e:f0:79:92:05:f7:41:ae:e6:ac:05:5a:0b:67:
         45:03:43:48:48:66:10:2d:08:e6:97:e7:3e:1e:a0:91:1d:c7:
         17:f7:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:22 2026 by rpki-client