Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32332d3233203d3e203536323832.roa
File:                     3130332e3234392e3235322e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          mcNGEETwjbBZQUSQfu595xA+dPaAjVFu6yVtI4UrJqM=
Subject key identifier:   93:E9:1D:77:4E:7F:04:64:EF:41:21:1D:49:3A:AE:95:0F:8E:C7:60
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       05C740A91EE179FAE5D02C919A74C880017A916C
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:13:34 +0000
ROA not before:           Tue 09 Jun 2026 06:08:34 +0000
ROA not after:            Tue 08 Jun 2027 06:13:34 +0000
asID:                     56282
IP address blocks:        103.249.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c7:40:a9:1e:e1:79:fa:e5:d0:2c:91:9a:74:c8:80:01:7a:91:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:08:34 2026 GMT
            Not After : Jun  8 06:13:34 2027 GMT
        Subject: CN=93E91D774E7F0464EF41211D493AAE950F8EC760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:9f:92:98:fd:2a:7c:2f:a9:2f:93:fb:68:
                    59:c3:a5:af:c7:36:32:c6:f3:d5:64:4f:66:07:52:
                    11:1d:5a:2c:53:ba:4f:80:4a:2a:a1:30:1b:67:00:
                    ac:c6:e6:37:72:28:76:27:bb:14:cd:81:ae:c7:96:
                    07:3a:de:77:98:75:b2:3e:95:84:ac:51:37:7e:3a:
                    62:b0:6b:db:3a:19:34:30:87:5c:00:aa:ec:b5:1a:
                    29:73:4d:52:d5:88:9f:fa:d0:28:dc:a5:cf:14:3b:
                    c5:c3:f3:32:15:4d:e0:6d:bc:c6:0f:15:cb:1e:da:
                    1a:50:f4:a9:2c:64:a4:8d:15:9e:50:2d:b6:89:ad:
                    95:a4:4a:2a:68:ca:c2:f4:77:11:9b:07:a1:bc:31:
                    c5:a3:3e:49:a8:69:47:cd:68:30:dc:08:6c:5a:e5:
                    59:c5:49:c9:2b:6d:92:f0:d7:76:3c:4c:be:af:c3:
                    7f:e3:5f:88:fb:25:8a:7c:82:b8:7d:53:9c:8f:4b:
                    d6:fb:cc:1e:d5:51:aa:8f:0d:b6:31:b4:eb:2b:90:
                    77:b9:c8:ae:f8:51:4a:eb:b4:1b:aa:bb:4f:6d:a1:
                    0d:2c:ba:d4:d0:bc:fd:df:19:17:b0:e2:f2:a3:37:
                    16:42:8b:a8:25:8e:b1:d2:f2:43:84:29:cf:42:d4:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E9:1D:77:4E:7F:04:64:EF:41:21:1D:49:3A:AE:95:0F:8E:C7:60
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235322e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:51:e5:b7:ba:77:99:e8:ba:a7:1e:32:38:c0:1c:42:f8:
         86:8d:7a:b2:24:3c:51:77:a9:1d:94:b4:2b:51:be:d8:0c:09:
         13:06:8a:91:b8:29:71:9b:f9:17:f3:a4:37:85:01:17:89:b5:
         8d:37:41:83:b9:a1:9c:9d:8d:ca:29:eb:a5:0e:22:10:9e:3e:
         53:d9:ef:2a:b6:09:f5:13:62:37:0b:fb:0c:8a:5b:0e:23:5b:
         68:4f:1e:38:29:9d:fb:c8:d5:1c:06:e5:79:5e:45:62:9b:40:
         eb:4f:e8:c3:45:4a:cd:39:46:5f:ee:16:ef:75:2e:88:fb:58:
         25:2d:19:5a:25:73:38:fe:16:e0:41:9d:45:e0:46:65:5f:25:
         7b:03:ba:64:1b:ec:a9:bc:73:1c:5d:ff:c7:5f:94:8b:13:1b:
         e6:d8:b1:25:59:52:06:77:50:13:82:dd:da:10:40:8a:f7:2e:
         38:5f:d4:54:2c:20:67:d0:e7:9c:e5:47:51:b9:12:31:4b:d8:
         dd:da:29:ff:5b:86:50:a9:12:6f:d3:33:19:39:0a:91:7a:c7:
         7f:29:88:de:76:bc:6a:24:8e:62:66:c8:be:38:35:6b:06:de:
         14:d1:f2:81:f8:2c:c2:bf:1e:b1:5a:f7:4c:dd:8b:c9:6b:30:
         5e:01:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:37 2026 by rpki-client