Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa
File:                     3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          yiAr2l5lzWHM34TDSuNETMJw4oOh7mEQAhx8VzZY/vE=
Subject key identifier:   43:AE:A1:9A:E9:FB:34:32:2F:09:11:01:7B:D7:44:33:D1:C5:3C:6E
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       125FA52690D82E1412CEEECA4D4AFE87345FAD33
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:41:16 +0000
ROA not before:           Tue 09 Jun 2026 06:36:16 +0000
ROA not after:            Tue 08 Jun 2027 06:41:16 +0000
asID:                     56282
IP address blocks:        103.235.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5f:a5:26:90:d8:2e:14:12:ce:ee:ca:4d:4a:fe:87:34:5f:ad:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:36:16 2026 GMT
            Not After : Jun  8 06:41:16 2027 GMT
        Subject: CN=43AEA19AE9FB34322F0911017BD74433D1C53C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:c7:01:97:bb:af:2b:31:e9:c1:dc:f4:ae:
                    c6:50:77:a9:5b:a8:69:e7:d1:17:01:5f:de:0f:54:
                    ed:95:9a:61:75:dd:a0:92:64:46:fc:c3:8a:c4:6a:
                    ab:39:00:20:e5:5a:45:2d:61:a3:ca:7f:e1:b9:db:
                    20:91:60:b8:9a:73:63:d8:4a:5d:19:0c:8b:41:bb:
                    c6:a1:cf:db:c7:c0:39:f5:58:0f:da:2a:58:c7:45:
                    c8:5c:d7:7b:95:fa:89:3b:d9:7f:35:28:6d:6f:7a:
                    f3:b8:ff:c4:23:23:11:b4:cd:db:58:b9:9a:c6:45:
                    e4:7c:5e:b1:ed:5a:0d:f7:9b:85:79:97:e7:bb:2b:
                    d2:0d:ab:cb:7d:c7:24:f9:8b:91:84:4b:a1:ce:7c:
                    1b:eb:36:c8:e5:70:25:36:33:c1:63:90:bc:98:68:
                    d1:a4:83:65:15:8e:52:f2:65:95:6c:e4:b7:78:77:
                    40:5c:33:73:f5:4b:a5:9a:b8:a6:29:83:a4:9f:97:
                    e3:c4:71:58:34:ef:e7:e8:5d:2b:76:5a:27:10:97:
                    2a:55:0f:bb:d4:c0:d3:07:3c:d5:e4:6f:37:da:b6:
                    f9:c0:0a:19:37:2f:65:c9:89:d8:c8:8c:b4:61:0e:
                    ca:d0:c4:2e:0f:7a:3e:03:a9:01:99:8d:c7:03:26:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:A1:9A:E9:FB:34:32:2F:09:11:01:7B:D7:44:33:D1:C5:3C:6E
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233352e3235302e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:f0:09:0d:4f:95:b3:e6:59:b0:f1:80:9b:72:7b:3f:c6:
         93:49:7d:6f:7e:32:5b:76:3e:37:30:ab:c7:e3:72:45:03:cc:
         51:ef:e8:3f:14:63:ba:24:29:3d:8d:38:34:b0:7a:39:dd:83:
         3c:93:b3:0d:a1:18:61:99:3a:55:bb:f0:1a:e2:1a:3b:cc:4e:
         5e:32:a1:57:b7:1a:82:00:f6:14:d0:03:1a:fd:45:c6:94:80:
         f4:04:d2:6c:55:72:0b:38:45:63:9a:c1:1d:07:cb:b2:3e:5d:
         32:4d:2b:82:94:14:dd:d9:4f:bc:b5:aa:b6:e0:c0:13:c8:e8:
         d2:eb:e7:a7:51:93:93:c9:52:54:d4:81:db:0f:2d:0e:46:53:
         9a:ec:64:ad:b4:3b:04:f7:ed:5f:c3:c9:62:8b:88:ba:cd:f6:
         e6:60:2d:02:a5:93:1b:f0:10:9a:2d:78:59:a7:de:4f:ac:9c:
         69:f5:64:67:5c:d5:ed:4c:69:8d:e0:cb:46:ce:a5:25:73:c8:
         de:3f:0a:60:cd:fe:13:1a:4c:43:b5:bd:72:28:bf:49:c6:90:
         26:09:bd:d3:ac:48:18:1c:a1:aa:6b:05:35:80:ca:33:df:24:
         7d:f3:0e:34:b7:ea:25:b0:3e:19:8d:e0:d3:c9:1e:65:7f:48:
         19:4e:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:34 2026 by rpki-client