Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa
File:                     3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          NubyLl6exTFXOgBHG1tjbVb2M+ZnW0g8yq2aZ9aMnik=
Subject key identifier:   DB:EA:A8:E2:7D:FD:7D:9E:C0:13:C7:02:BC:2F:14:54:08:6F:D6:A2
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       63BCA63BA3CEBFD68A08DE11D1C9A8AFC24575E3
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:13:46 +0000
ROA not before:           Tue 09 Jun 2026 06:08:46 +0000
ROA not after:            Tue 08 Jun 2027 06:13:46 +0000
asID:                     56282
IP address blocks:        103.249.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bc:a6:3b:a3:ce:bf:d6:8a:08:de:11:d1:c9:a8:af:c2:45:75:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:08:46 2026 GMT
            Not After : Jun  8 06:13:46 2027 GMT
        Subject: CN=DBEAA8E27DFD7D9EC013C702BC2F1454086FD6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:6d:54:52:69:30:63:46:27:52:28:58:36:
                    7c:6b:19:af:43:c9:62:60:6c:1f:9a:20:b7:12:6b:
                    1c:48:49:63:a1:f1:1b:cb:a9:10:72:21:9a:79:d1:
                    19:2a:06:9a:e9:f8:9e:df:74:48:f3:d9:a1:11:c6:
                    65:1a:2b:2e:d2:52:7f:06:7a:55:31:08:b4:1e:02:
                    54:72:e8:89:5a:16:93:ac:67:7a:3a:ee:18:75:fb:
                    61:82:82:29:ec:ba:33:e6:a7:cf:02:97:6b:ee:d2:
                    d0:8f:b4:e3:0e:be:62:e3:d0:91:eb:61:c3:ae:71:
                    33:c6:5e:22:bd:a7:d0:ca:92:17:74:8c:5b:94:78:
                    20:43:f8:66:65:51:a2:9d:f2:b2:af:b5:42:3e:d2:
                    dc:ff:2a:3c:2d:78:03:ef:4d:43:24:4c:c9:dd:b1:
                    48:ec:f3:66:ba:d1:20:bb:a3:49:a8:a3:b0:a0:3b:
                    d6:00:e7:06:b4:b1:63:ca:34:1e:93:c6:ea:de:52:
                    15:70:de:9a:d6:ce:24:1d:1f:fa:ca:e0:40:fa:ff:
                    3c:79:8a:f9:45:8b:9a:6e:c1:c7:1d:ae:95:99:87:
                    04:fb:e8:16:6c:72:3c:05:3f:18:16:00:4e:e2:a7:
                    e8:2f:41:a8:24:57:2f:c7:9a:22:86:f5:02:5b:60:
                    07:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EA:A8:E2:7D:FD:7D:9E:C0:13:C7:02:BC:2F:14:54:08:6F:D6:A2
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3130332e3234392e3235342e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:b2:d0:5a:91:86:88:5f:57:2f:8c:6f:77:af:ee:cb:d1:12:
         2d:e0:dc:eb:0b:cb:73:55:9f:83:e0:e8:76:4d:0d:ff:f4:db:
         87:d4:20:c3:96:40:ae:df:a7:7a:52:06:12:a9:b6:57:da:29:
         f0:92:83:78:11:9a:c2:9e:21:5c:2a:4c:80:db:e8:43:5f:95:
         3e:2e:ca:d2:30:e2:e6:ab:e3:e6:c5:0e:ec:ac:33:76:2e:d6:
         17:3d:2d:a6:f0:5c:99:86:70:8d:0f:3a:15:00:b6:e9:b4:68:
         7b:8d:86:10:dd:dd:24:88:0a:63:ed:3f:95:1b:7d:cb:1d:c1:
         22:ac:57:9e:15:08:ee:43:4f:6e:53:9e:b2:95:96:8f:ce:70:
         9c:6a:6c:07:ac:8f:00:bc:7c:9d:52:ee:e4:d4:c8:67:96:4f:
         38:74:e1:b8:42:d3:57:9f:a5:7c:7a:00:60:d5:5a:bf:6c:61:
         cd:d6:ea:0c:0a:25:82:30:52:0f:ea:43:61:17:76:13:61:18:
         fc:f3:81:0b:2a:be:d3:7f:27:cf:c1:9f:d3:6d:86:25:e8:db:
         04:c3:4d:24:19:cb:ee:45:d8:60:73:ec:ba:2c:6d:54:bb:a3:
         21:08:d7:0f:a5:a6:c1:2c:e2:27:c9:bc:15:f9:af:d5:5a:f8:
         2b:ed:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:36 2026 by rpki-client