Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa
File:                     3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier:          TUB4Lqbv7e8SdRbH40PVbwwCiWR5VNp6aUB2GMt1d4c=
Subject key identifier:   8D:DD:56:03:AF:C4:4E:A3:CD:65:97:B4:3F:96:66:B9:39:33:1D:DE
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       4CB71BA3EEDC418F18300AAFFAC19F7E558065FB
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa
Signing time:             Wed 13 May 2026 05:31:43 +0000
ROA not before:           Wed 13 May 2026 05:26:43 +0000
ROA not after:            Wed 12 May 2027 05:31:43 +0000
asID:                     4812
IP address blocks:        103.243.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b7:1b:a3:ee:dc:41:8f:18:30:0a:af:fa:c1:9f:7e:55:80:65:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: May 13 05:26:43 2026 GMT
            Not After : May 12 05:31:43 2027 GMT
        Subject: CN=8DDD5603AFC44EA3CD6597B43F9666B939331DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:0e:55:02:67:7a:d7:ac:65:f4:3b:b9:6b:
                    ad:3c:6e:18:8a:76:4e:d0:2d:fa:09:f0:27:f5:83:
                    02:87:89:18:ae:1b:f7:56:9a:5f:8a:a5:79:0c:fc:
                    fc:33:9f:37:c9:d1:72:74:d9:bc:9e:77:0a:4d:b1:
                    6f:69:c6:ff:d7:f5:84:2f:e8:4d:28:c9:c9:63:c3:
                    24:9d:e8:8b:49:d1:f3:28:03:3f:99:c2:1f:d0:b4:
                    f8:0f:a0:03:3d:aa:01:a3:85:d1:8c:98:fd:14:71:
                    e0:32:b7:e6:44:a1:bd:87:92:3a:38:4d:9b:f2:c1:
                    3c:c1:64:65:7c:02:e1:bb:2b:3d:a9:00:50:f2:44:
                    ab:65:e4:0a:15:65:fc:d4:c6:e3:52:ab:45:19:ae:
                    a4:78:e3:57:30:78:3d:00:84:71:95:93:e4:f3:5c:
                    2c:3c:04:28:b5:04:c4:b0:e1:ef:99:23:71:ab:6b:
                    4a:d9:a3:73:a3:38:0a:ee:55:74:8a:69:03:41:1c:
                    0d:71:48:d4:98:55:2c:51:ab:b4:d0:d0:6c:ba:d0:
                    4a:01:9c:84:5b:2c:91:8d:38:69:b4:8a:93:17:58:
                    af:05:78:59:cd:db:e2:20:b3:ee:68:eb:72:7f:12:
                    f3:f0:99:80:f2:89:16:0c:52:b8:b5:7c:42:c8:a2:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:56:03:AF:C4:4E:A3:CD:65:97:B4:3F:96:66:B9:39:33:1D:DE
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235322e302f32322d3232203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:ef:56:c5:c0:9a:2b:10:40:c0:18:20:30:43:25:e9:40:05:
         7d:02:82:9e:17:7e:76:7a:89:38:77:80:98:cc:53:c2:22:45:
         7b:e9:d9:d5:e6:32:51:48:ff:03:a6:20:10:92:23:64:d5:e0:
         c5:76:7f:19:87:bc:41:5e:25:96:94:d4:67:57:a2:1e:ac:0e:
         c3:62:de:2a:89:b4:73:ab:ab:38:a1:68:27:3c:d0:77:74:81:
         ee:77:66:9d:ab:74:44:cf:ad:0c:2b:26:df:b1:95:71:69:16:
         bf:e7:e6:b4:e7:38:3b:2f:a1:c7:7c:bc:f8:fa:bd:89:32:79:
         d0:76:34:eb:f0:5f:b3:56:92:82:0a:b6:30:d6:cd:4f:41:54:
         6f:37:d4:b9:19:5e:b1:81:08:04:c6:33:5f:fc:f5:86:f6:7c:
         14:bf:5b:01:5a:a9:bf:86:21:20:2b:7c:1e:a4:fc:a4:22:8e:
         e3:23:d2:cd:8a:f5:3c:42:c9:0f:0e:37:9e:f7:0a:19:d5:21:
         86:47:1a:07:af:e9:77:2b:de:0d:93:81:39:e3:be:d9:59:3e:
         34:92:4e:a8:3d:9a:65:15:c7:51:81:a4:10:01:dd:72:91:bb:
         12:f2:86:5b:fc:2b:05:d0:43:72:d0:57:1c:74:cf:05:1a:2a:
         82:e1:1b:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:30 2026 by rpki-client