Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234322e302f32332d3233203d3e203536323832.roa
File:                     3130332e3233352e3234322e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          bUd7LhlN14xo942IOjkJVCY5yfZezWoSES01d87qDtI=
Subject key identifier:   B7:39:72:1C:D1:1B:4B:C0:C8:74:B7:3E:4B:93:05:63:DB:8B:EA:C4
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       082B593A8EB75FC631CB267B2943EC946A329CA1
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234322e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:50:31 +0000
ROA not before:           Tue 09 Jun 2026 06:45:31 +0000
ROA not after:            Tue 08 Jun 2027 06:50:31 +0000
asID:                     56282
IP address blocks:        103.235.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2b:59:3a:8e:b7:5f:c6:31:cb:26:7b:29:43:ec:94:6a:32:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:45:31 2026 GMT
            Not After : Jun  8 06:50:31 2027 GMT
        Subject: CN=B739721CD11B4BC0C874B73E4B930563DB8BEAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:97:ca:bb:9a:8a:22:f0:22:10:b3:28:5c:
                    dc:bb:22:bb:fb:81:f8:52:f1:b4:01:f1:75:10:5f:
                    cf:0b:df:cf:cb:8e:71:65:a6:d5:ff:48:22:cb:4b:
                    7c:99:a7:8e:fc:4c:98:11:52:f7:17:28:8b:52:07:
                    95:97:40:13:d0:6b:db:d0:d4:55:a0:fe:bb:55:02:
                    60:58:31:4b:1c:6a:04:f2:8f:39:a4:9e:9d:d8:18:
                    8e:7b:4d:7e:aa:9d:13:2c:f4:3c:6d:09:d4:fe:0d:
                    f4:a2:af:65:91:b3:a0:fa:5c:b7:4e:de:e4:c5:ed:
                    11:fc:49:93:bd:65:ce:da:e0:e7:d1:f3:b0:fd:c3:
                    8c:27:dd:66:09:c2:8d:ff:33:87:47:0e:a4:99:da:
                    a6:66:18:34:db:c1:7b:78:3e:b7:0a:c6:c7:6a:0a:
                    f1:ca:ad:c6:59:e7:36:d8:20:d9:a2:7a:af:19:ee:
                    7e:f0:cb:44:65:7b:c2:88:7d:44:0a:ee:02:e0:49:
                    61:9c:31:d8:fb:62:4f:bf:d1:7a:a9:62:4d:fc:7e:
                    9e:4c:d8:f8:9c:ac:18:be:2f:90:8d:51:62:ee:d1:
                    25:b9:3e:0b:18:29:f1:3d:66:cd:50:53:4d:14:8b:
                    ca:b5:67:4b:ce:76:58:4c:90:7b:9f:b9:57:09:2c:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:72:1C:D1:1B:4B:C0:C8:74:B7:3E:4B:93:05:63:DB:8B:EA:C4
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3234322e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:15:d1:ac:a1:9e:54:8b:ba:33:81:8e:a7:c2:9d:ae:c9:
         c0:41:30:51:c9:f6:9b:e3:a4:d2:d7:38:c2:9d:ca:33:66:25:
         09:fe:ac:83:34:c6:d9:7c:50:63:7c:80:32:eb:54:ad:42:4f:
         0b:53:1d:4a:a6:60:9a:0c:3c:d3:3a:31:67:41:88:e4:de:d4:
         5f:5c:62:5a:f1:17:fe:70:1f:82:f7:3b:96:67:e3:96:2b:25:
         e4:45:e3:62:8d:0f:d2:dd:cd:9d:8f:3c:a1:39:f7:2d:a5:4f:
         4e:1c:e8:5f:64:7f:b9:34:f8:8c:68:90:91:42:59:a6:33:0b:
         0e:0c:ca:42:9d:05:5c:d8:ce:04:b1:c7:a6:af:9f:ed:42:07:
         f1:3e:0c:4b:86:b6:c8:e5:b9:6e:cf:11:aa:8f:72:66:cf:83:
         4c:27:e1:0d:e2:28:31:58:00:9c:cd:72:62:b5:1b:7d:96:42:
         a1:df:e4:16:20:39:f6:4f:09:4b:89:2e:26:1b:cf:da:cf:31:
         1f:b6:d8:ea:02:65:d8:23:55:87:e5:e1:2e:2b:d5:10:ab:b9:
         c5:84:d0:54:2a:d1:5f:56:67:dc:70:9c:ca:c3:0f:f8:2d:21:
         47:02:5c:1c:f2:3e:0e:3a:c0:c1:4d:26:33:1f:24:c9:7a:d0:
         09:3c:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:23 2026 by rpki-client