Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31302e302f32332d3233203d3e203536323832.roa
File:                     3130332e3233372e31302e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          F7ETox1PArCz71oNVn9qM1V3tgRYfq98T9oJywnlL9Y=
Subject key identifier:   E8:4C:E2:BC:D7:CC:BA:3F:D9:DE:C2:F5:EC:D0:B8:6D:26:22:04:68
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       542BC685776FB347C41654E275F755871DAC8C96
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31302e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:43:09 +0000
ROA not before:           Tue 09 Jun 2026 06:38:09 +0000
ROA not after:            Tue 08 Jun 2027 06:43:09 +0000
asID:                     56282
IP address blocks:        103.237.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2b:c6:85:77:6f:b3:47:c4:16:54:e2:75:f7:55:87:1d:ac:8c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:38:09 2026 GMT
            Not After : Jun  8 06:43:09 2027 GMT
        Subject: CN=E84CE2BCD7CCBA3FD9DEC2F5ECD0B86D26220468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e8:ad:a0:4d:91:11:8a:5e:6a:f9:4a:2c:a6:
                    8f:41:5e:47:f7:a6:c2:de:10:52:4d:59:67:4a:6a:
                    71:c5:35:98:6e:e9:c5:09:16:75:ff:fd:af:da:75:
                    8a:67:e5:a3:6e:fa:40:9f:dd:bc:96:b0:1d:5c:b4:
                    d9:87:db:df:ad:c4:66:24:f1:2d:9f:60:9b:df:15:
                    21:99:3e:f1:fb:24:99:7f:60:0a:e6:9a:bf:5a:d6:
                    42:21:13:38:05:0e:02:e1:c1:99:47:c9:f9:c0:cd:
                    56:73:31:3e:46:e3:da:81:30:20:f4:65:e1:26:a3:
                    78:07:5a:9e:e0:f5:ee:87:23:71:e2:6d:76:71:e9:
                    22:73:6b:3f:aa:01:1d:02:cc:cf:e0:e6:53:e1:35:
                    01:64:84:f9:b0:6e:21:37:fb:bf:ac:cd:ec:ec:28:
                    5c:09:e5:c1:66:b0:d5:c0:a9:ce:42:a4:38:1d:44:
                    22:67:ff:97:5b:fb:d6:ad:f9:19:66:2d:93:b8:00:
                    69:03:43:07:e0:3e:79:bd:97:ec:34:14:d0:66:ef:
                    76:14:30:72:12:72:8e:d2:38:e2:88:fc:e7:48:22:
                    75:1d:29:c9:0c:4b:a4:0c:bc:94:03:c3:e5:f3:20:
                    76:5f:bc:7f:61:9e:c4:1c:25:3e:57:7d:66:fa:1f:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4C:E2:BC:D7:CC:BA:3F:D9:DE:C2:F5:EC:D0:B8:6D:26:22:04:68
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e31302e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:06:5b:c3:59:75:69:9b:fb:55:8f:61:61:fe:53:30:31:19:
         67:81:58:bb:03:73:4c:8d:b8:9e:08:c5:01:23:5b:64:92:8f:
         22:2c:b8:97:b3:a8:b0:88:f0:d1:80:c8:85:10:2c:9f:00:86:
         80:3d:85:a6:d3:8f:0d:b5:ca:a9:1d:79:1a:18:99:d1:90:4d:
         f6:bb:e2:c1:28:56:5c:49:5e:4d:b4:09:bd:25:37:6b:55:6d:
         26:c1:0c:f6:dd:ed:6a:ee:ee:5a:1c:6f:4a:21:7e:c5:89:af:
         6a:75:38:bf:76:3b:67:64:69:4d:61:4e:72:f6:82:fb:12:8d:
         b9:5b:61:79:45:de:cc:9c:9c:8e:8c:4f:7b:03:56:51:ba:66:
         e0:d9:1a:df:2f:c2:74:e4:d9:a6:4f:7d:19:ab:b7:ba:b0:94:
         28:c1:d0:e7:22:74:5c:b7:60:d8:d2:04:28:cc:f8:d4:59:60:
         3d:ea:cc:3d:af:ab:b1:26:71:ca:cf:39:50:3a:dd:7e:09:56:
         be:06:11:a9:9b:a9:c7:c3:3c:cc:e9:af:33:bc:0d:ad:4f:6e:
         bd:b1:c4:07:45:7a:2d:7f:c4:0f:47:ae:e6:07:ae:58:ea:1b:
         14:43:e7:0e:61:ce:90:56:69:7a:2e:56:9c:89:43:0e:ad:e4:
         37:93:18:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:02 2026 by rpki-client