Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235342e302f32332d3233203d3e203536323832.roa
File:                     3130332e3234332e3235342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          yctBK8hkHcipe08rlgP+54gYiJFT5shZC5z201yeHZc=
Subject key identifier:   6F:5F:63:23:FD:AB:49:F2:34:94:3F:17:C7:5C:FE:8C:99:BA:00:17
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       37C9432CA78D9DA98566D7F6AC78A1CE6AEFFC34
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235342e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:37:31 +0000
ROA not before:           Tue 09 Jun 2026 06:32:31 +0000
ROA not after:            Tue 08 Jun 2027 06:37:31 +0000
asID:                     56282
IP address blocks:        103.243.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c9:43:2c:a7:8d:9d:a9:85:66:d7:f6:ac:78:a1:ce:6a:ef:fc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:32:31 2026 GMT
            Not After : Jun  8 06:37:31 2027 GMT
        Subject: CN=6F5F6323FDAB49F234943F17C75CFE8C99BA0017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:aa:5c:1a:ea:e2:d3:7f:4f:94:2a:cf:ff:
                    54:09:d4:1d:0a:49:b1:c5:53:d5:9d:4e:ab:4b:00:
                    54:f9:67:c9:47:d9:99:fd:df:19:d6:30:de:59:c5:
                    4b:62:43:cb:88:e1:d8:0e:ab:ab:5a:9a:74:9f:c2:
                    aa:e0:d0:15:6a:de:83:a3:0f:33:8c:d7:cd:fb:12:
                    cf:a5:97:9a:c2:8e:f4:17:21:4b:35:28:13:6d:00:
                    52:37:45:d0:0d:ec:e1:40:ec:6a:a5:03:34:15:71:
                    16:a8:c5:06:25:df:39:59:89:30:13:bb:37:e3:bd:
                    7c:91:dd:56:d7:f7:91:95:7c:87:6c:93:fb:65:91:
                    3a:15:56:87:32:23:39:89:1c:d2:45:4b:c0:53:61:
                    31:d5:68:11:c5:c7:2e:bb:e3:9c:9e:d8:ac:96:c8:
                    7b:99:a1:c4:19:c9:88:37:58:23:b4:17:ed:fd:c7:
                    91:2c:f3:89:22:9a:5a:a0:72:5c:13:27:f8:d0:38:
                    9f:a1:79:7b:b6:e1:56:cb:d9:0e:a0:dd:8a:85:28:
                    44:5e:36:01:eb:8a:41:6b:fb:81:74:f1:da:d3:99:
                    9d:0a:da:2c:8b:f1:f1:96:47:11:08:8f:41:32:0a:
                    6f:e2:41:14:24:9a:b2:39:c0:a4:6d:06:d7:d8:c5:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:63:23:FD:AB:49:F2:34:94:3F:17:C7:5C:FE:8C:99:BA:00:17
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234332e3235342e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:06:05:ee:57:5c:b4:32:37:82:d1:31:e0:20:7c:58:22:
         53:bb:4f:32:c4:e2:5d:51:1e:b1:0a:32:af:86:ec:92:72:5f:
         ae:dd:56:87:ca:98:a2:97:43:46:c3:31:04:18:ff:25:bf:86:
         09:31:09:84:52:d5:8e:50:fa:9a:e2:72:66:3c:ac:91:bb:87:
         6e:4a:18:2c:fa:ac:7d:de:41:cc:16:4c:c1:d6:4b:c6:20:4e:
         9b:cb:f4:d4:4f:85:b7:d5:88:cb:f2:20:19:3e:9e:4e:32:1c:
         fd:da:5f:1f:4f:22:f5:83:5c:95:b4:58:ac:4a:29:60:20:17:
         fd:0b:f4:38:e9:0f:b6:32:57:75:f5:0a:2a:77:15:a5:75:97:
         38:17:2b:6b:51:52:43:50:b0:31:b2:5b:26:e0:88:f8:cb:ef:
         a7:a7:f1:31:bf:59:9f:a4:02:9a:5f:53:29:fd:91:f4:95:b4:
         cc:32:1a:7a:20:0a:95:6a:75:0e:b7:8a:04:fd:cf:e9:7f:46:
         73:15:2b:d7:fb:e0:46:55:bd:a1:b2:58:1a:9d:05:f5:b6:7a:
         ff:8c:2e:af:3f:6b:33:04:c8:4a:2a:aa:62:d3:91:21:c1:46:
         3d:64:11:67:9b:ba:8d:19:f8:a9:4c:01:00:d0:52:9d:58:22:
         51:cc:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:18 2026 by rpki-client