Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3135302e3132392e3139322e302f32332d3233203d3e203536323832.roa
File:                     3135302e3132392e3139322e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier:          skK/cGIAyPNFSK49kjk4jVRq5+Q2y2S8T1nnp5xFWeA=
Subject key identifier:   AD:F3:D8:08:05:76:DD:4E:54:0C:1B:E1:FB:00:DD:8D:40:4B:48:FE
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       393A99A1CD9BD53CD68B42A04222DAD04DB309A1
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3135302e3132392e3139322e302f32332d3233203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:37:53 +0000
ROA not before:           Tue 09 Jun 2026 06:32:53 +0000
ROA not after:            Tue 08 Jun 2027 06:37:53 +0000
asID:                     56282
IP address blocks:        150.129.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3a:99:a1:cd:9b:d5:3c:d6:8b:42:a0:42:22:da:d0:4d:b3:09:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:32:53 2026 GMT
            Not After : Jun  8 06:37:53 2027 GMT
        Subject: CN=ADF3D8080576DD4E540C1BE1FB00DD8D404B48FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:81:d5:56:ac:05:ee:bd:04:bf:92:c1:99:
                    32:75:35:74:8a:7e:8b:a3:b9:f0:d0:d8:3a:5c:87:
                    7b:83:1c:63:3c:7a:ae:5b:d4:4d:d7:0f:6a:44:3c:
                    5c:57:6b:d3:6b:d5:93:77:5d:7f:2f:60:96:ea:11:
                    c3:72:2a:b6:64:88:ff:94:fd:c3:f3:65:c6:6d:25:
                    18:f9:58:a8:31:6f:65:4c:c1:37:e4:a3:c1:71:ca:
                    f0:65:e6:76:1f:15:69:6b:2e:b8:20:eb:5e:fb:e7:
                    1e:ec:93:2d:4e:fc:9e:83:8b:96:27:00:14:28:bb:
                    96:0f:b8:7d:be:0b:61:08:4b:87:8e:f8:0f:13:32:
                    78:60:a2:74:7d:7f:28:67:5a:02:a3:b0:fc:98:3f:
                    f7:77:0a:86:9a:48:fa:68:15:c9:1e:11:39:22:ab:
                    be:59:6e:c2:93:1f:77:48:e6:1b:dc:a2:d8:84:ec:
                    62:a1:cd:5b:3f:6f:25:07:c5:86:7f:61:97:c1:1c:
                    32:4b:10:44:cf:33:6c:d9:b7:cb:71:90:5f:b5:32:
                    19:97:d3:0b:90:72:28:cb:89:3f:2f:57:af:6c:dd:
                    2e:d5:50:e5:05:37:3c:1e:57:25:43:1a:eb:fa:95:
                    56:ae:41:8b:79:5e:5f:89:76:51:60:e2:94:3c:75:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F3:D8:08:05:76:DD:4E:54:0C:1B:E1:FB:00:DD:8D:40:4B:48:FE
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3135302e3132392e3139322e302f32332d3233203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:3c:33:c0:51:fd:0f:f7:20:3e:d3:96:d7:66:a5:97:9e:
         1c:37:1c:80:23:6f:6b:fc:a5:f2:d4:79:4e:b6:f7:1f:8f:c2:
         fd:6e:a6:6a:57:83:47:89:2f:3f:8f:12:81:00:59:13:12:42:
         87:a8:70:81:56:04:92:09:43:8b:6c:df:0f:e3:b6:e8:cf:d9:
         d8:db:36:9d:c3:c1:1f:36:36:52:e1:68:14:ad:d8:e1:cd:e8:
         57:a4:6f:22:7b:2c:45:22:c6:35:98:29:2b:2e:4d:5c:23:82:
         a6:12:15:00:0f:11:16:fa:b8:e7:67:33:1e:fb:cc:f7:b2:fa:
         9d:8e:d0:55:bf:e0:f3:e5:78:9f:29:86:78:20:60:10:00:7a:
         f2:b0:13:ff:d7:0a:bb:36:6c:26:96:ce:e7:6c:e9:ea:3e:96:
         b8:d5:73:bf:64:44:50:c5:13:0b:56:c9:0d:70:ff:f4:58:10:
         06:11:a8:c5:02:3f:60:ba:71:de:3d:fa:f3:6e:b4:46:20:27:
         34:e0:1a:f0:74:74:4c:f6:d9:3b:81:c9:37:9f:c2:62:45:07:
         d5:df:30:42:d6:82:bf:fa:9d:18:8b:19:60:05:32:32:f2:ee:
         33:94:de:08:7a:1c:80:44:af:da:61:f7:53:ec:96:81:c9:73:
         be:ab:3f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:21 2026 by rpki-client