Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e382e302f32322d3232203d3e203233373234.roa
File:                     3130332e3233372e382e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          lcatvcLy6DxjF3ndiaT1MHWzV+yKkLKeVnYS3NSUebw=
Subject key identifier:   2D:04:FE:81:91:FF:7F:72:30:BC:06:D0:E3:89:7C:8D:4B:B5:B2:B8
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       035780BC531290335B0A66798663C84DB295EB7C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e382e302f32322d3232203d3e203233373234.roa
Signing time:             Thu 14 May 2026 07:58:01 +0000
ROA not before:           Thu 14 May 2026 07:53:01 +0000
ROA not after:            Thu 13 May 2027 07:58:01 +0000
asID:                     23724
IP address blocks:        103.237.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:57:80:bc:53:12:90:33:5b:0a:66:79:86:63:c8:4d:b2:95:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: May 14 07:53:01 2026 GMT
            Not After : May 13 07:58:01 2027 GMT
        Subject: CN=2D04FE8191FF7F7230BC06D0E3897C8D4BB5B2B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:cf:40:5d:ea:e9:d9:cc:de:14:44:e6:6f:
                    81:c3:b8:13:5a:7f:fe:93:85:99:df:65:5a:74:0d:
                    9a:6b:fa:0c:58:3c:33:2c:23:cb:25:02:31:a4:43:
                    8b:fe:7e:d2:b9:51:63:3d:25:3e:58:89:fc:b0:c3:
                    8d:25:d9:c9:2d:61:45:19:9d:58:90:ce:44:75:6a:
                    de:5b:90:3d:6f:45:d2:e3:cc:26:83:69:61:8d:4b:
                    50:97:5f:ac:ee:0f:45:ac:40:3a:66:51:fc:3b:5a:
                    0c:69:b5:c4:4c:b2:ec:b5:da:74:e3:0d:64:e2:39:
                    bd:5c:f6:22:90:4a:05:7d:9d:2e:6e:92:48:01:4c:
                    f5:0c:73:aa:cd:3f:73:79:a6:8f:16:b4:ac:e6:50:
                    54:5b:2b:88:f2:f7:e9:f1:7e:59:86:c6:17:fd:9e:
                    38:50:ae:59:9a:3e:08:0c:76:33:59:25:93:25:91:
                    77:2a:df:c8:93:f9:00:a3:77:c9:f3:5b:28:9c:c3:
                    fe:a4:3f:92:2f:8b:1f:4d:6a:b3:13:d0:b6:59:34:
                    78:32:ce:8a:89:c2:78:c5:00:15:97:f5:99:ce:cc:
                    d4:7a:86:fe:67:6a:9c:4e:80:8b:d3:92:6f:20:16:
                    78:87:58:34:64:66:b4:ca:41:9b:ac:06:b1:c9:20:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:FE:81:91:FF:7F:72:30:BC:06:D0:E3:89:7C:8D:4B:B5:B2:B8
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3233372e382e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:33:79:0b:99:a4:db:83:d8:b1:6e:95:06:f6:72:b9:bb:
         12:b5:f9:87:90:c6:56:b0:49:b8:f7:10:cc:01:ec:a4:42:bd:
         12:3c:6f:e1:9c:b8:c4:40:32:a1:42:e7:e6:5f:d3:b3:a9:7e:
         93:74:10:51:d9:64:46:99:f1:7c:af:82:82:cf:1d:bd:c4:c4:
         21:aa:35:74:b3:ee:a4:bb:56:76:58:b2:e0:e2:74:35:5c:99:
         e0:d4:b1:ed:3d:0e:a6:16:77:33:ee:78:d9:52:8c:51:2a:b8:
         e0:7f:b4:1d:92:f9:49:12:c4:39:c8:10:6b:0e:8a:6b:1e:22:
         f7:2f:c6:7e:e6:74:35:3c:27:d6:f9:85:7b:5d:b6:9d:16:4f:
         ab:6d:4b:d5:73:4e:47:87:49:18:ae:b5:29:51:3d:00:d9:fe:
         fa:f2:f2:78:f6:4c:e2:bf:cb:3e:d3:ae:19:d3:86:93:b8:98:
         4b:5a:22:b4:ca:b2:7d:88:91:27:f0:2e:bc:06:ca:6d:31:3e:
         43:5a:d6:12:62:3b:d8:ba:b8:c9:18:4b:c8:3f:df:cb:5f:f8:
         c9:6d:3c:4d:2a:a3:2d:59:cd:8e:23:36:81:be:7c:88:c2:c4:
         1c:1c:de:d0:f6:fc:23:0d:0f:8c:99:d6:a6:47:bb:9a:6d:f8:
         12:b4:54:7b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUA1eAvFMSkDNbCmZ5hmPITbKV63wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA1MTQwNzUzMDFaFw0yNzA1MTMwNzU4MDFaMDMxMTAvBgNV
BAMTKDJEMDRGRTgxOTFGRjdGNzIzMEJDMDZEMEUzODk3QzhENEJCNUIyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu89AXerp2czeFETmb4HDuBNa
f/6ThZnfZVp0DZpr+gxYPDMsI8slAjGkQ4v+ftK5UWM9JT5Yifyww40l2cktYUUZ
nViQzkR1at5bkD1vRdLjzCaDaWGNS1CXX6zuD0WsQDpmUfw7WgxptcRMsuy12nTj
DWTiOb1c9iKQSgV9nS5ukkgBTPUMc6rNP3N5po8WtKzmUFRbK4jy9+nxflmGxhf9
njhQrlmaPggMdjNZJZMlkXcq38iT+QCjd8nzWyicw/6kP5Ivix9NarMT0LZZNHgy
zoqJwnjFABWX9ZnOzNR6hv5napxOgIvTkm8gFniHWDRkZrTKQZusBrHJIJ0LAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQULQT+gZH/f3IwvAbQ44l8jUu1srgwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjY4NDgxLzAvMzEzMDMzMmUzMjMz
MzcyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmftCDANBgkqhkiG9w0BAQsFAAOCAQEAJrgzeQuZpNuD2LFulQb2crm7ErX5
h5DGVrBJuPcQzAHspEK9Ejxv4Zy4xEAyoULn5l/Ts6l+k3QQUdlkRpnxfK+Cgs8d
vcTEIao1dLPupLtWdliy4OJ0NVyZ4NSx7T0OphZ3M+542VKMUSq44H+0HZL5SRLE
OcgQaw6Kax4i9y/GfuZ0NTwn1vmFe122nRZPq21L1XNOR4dJGK61KVE9ANn++vLy
ePZM4r/LPtOuGdOGk7iYS1oitMqyfYiRJ/AuvAbKbTE+Q1rWEmI72Lq4yRhLyD/f
y1/4yW08TSqjLVnNjiM2gb58iMLEHBze0Pb8Iw0PjJnWpke7mm34ErRUew==
-----END CERTIFICATE-----
Generated at Sat May 30 00:41:51 2026 by rpki-client