Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e39322e302f32322d3232203d3e203536323832.roa
File:                     3136332e35332e39322e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier:          ilQNIH/IUAvt7p3G7pZtFg1d1jD+C5ZSiamudJQB1Ks=
Subject key identifier:   22:91:32:47:6F:EA:2C:FE:FD:0B:53:D9:C4:FA:1B:40:83:9B:F6:04
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       5FACA556B08332F73E26ECE1B070A7C76AD01385
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e39322e302f32322d3232203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:45:12 +0000
ROA not before:           Tue 09 Jun 2026 06:40:12 +0000
ROA not after:            Tue 08 Jun 2027 06:45:12 +0000
asID:                     56282
IP address blocks:        163.53.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ac:a5:56:b0:83:32:f7:3e:26:ec:e1:b0:70:a7:c7:6a:d0:13:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:40:12 2026 GMT
            Not After : Jun  8 06:45:12 2027 GMT
        Subject: CN=229132476FEA2CFEFD0B53D9C4FA1B40839BF604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:14:62:8f:7e:33:9b:f8:c4:0f:6b:07:25:
                    46:ed:61:21:87:84:86:0c:91:78:e0:13:85:3f:d5:
                    fb:6a:b0:aa:9d:a8:c3:3c:4d:bf:9a:9d:1e:f1:ce:
                    07:62:02:88:98:63:d7:35:87:b8:d0:f4:fe:54:c0:
                    bd:62:63:a1:bb:42:59:d9:97:b4:33:d2:1d:73:dd:
                    d3:fa:80:5d:e0:f2:8e:b0:98:64:d7:48:c0:2b:e2:
                    43:da:41:bc:0e:d2:e7:f1:f2:0f:96:8b:df:fa:42:
                    5f:2b:60:b0:d2:8f:b2:3d:06:09:7b:1d:7b:25:dc:
                    06:f7:01:df:a0:6a:b5:0d:93:3a:90:1b:79:2f:22:
                    07:bb:3f:55:31:bb:8e:6c:b3:86:37:f3:c0:2f:9b:
                    53:c4:fd:2d:ac:18:e5:5e:b9:37:66:21:63:18:0d:
                    95:9b:82:05:71:c6:e6:01:50:47:76:33:9b:90:46:
                    ee:0b:05:29:88:9c:5c:c3:df:a1:7b:69:b9:c1:b5:
                    6a:27:c4:97:8b:38:99:a4:a4:24:17:e3:7e:ee:24:
                    10:1f:c8:24:20:e5:da:5c:b0:27:b0:5d:51:ad:d2:
                    5a:0e:87:19:54:25:5a:51:de:c6:a0:8f:e4:49:89:
                    2e:b1:a2:55:d2:af:b2:27:74:8a:25:32:81:f6:1b:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:91:32:47:6F:EA:2C:FE:FD:0B:53:D9:C4:FA:1B:40:83:9B:F6:04
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e39322e302f32322d3232203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:31:9c:c5:7b:dd:34:0c:fa:27:4e:49:58:ed:a8:3f:f3:
         e1:82:18:60:10:8b:b7:a2:e5:7f:15:05:35:74:71:14:c3:1e:
         04:4a:e7:29:de:69:ac:7f:15:4a:f4:9b:76:13:ba:6f:30:ea:
         11:c1:56:34:2e:21:44:21:41:3e:b9:0e:fa:6b:f4:48:ee:51:
         b5:db:2b:8b:30:0c:8c:e4:ca:74:5f:65:5d:50:ab:dd:13:be:
         f7:c4:b2:d1:bb:1b:3e:21:db:52:ec:fe:fe:50:30:2f:44:d0:
         f8:1c:ce:e4:b8:4c:62:8b:fb:4e:04:c0:58:b5:2b:6b:66:b7:
         33:31:58:96:eb:3b:f7:cf:d2:95:92:da:62:73:a5:2d:25:fd:
         e2:c3:42:1b:ef:a4:af:45:95:97:59:e9:87:6b:6a:e1:e6:12:
         7d:9b:ca:d2:f2:cd:2b:d9:9c:06:2e:81:17:82:c2:19:cf:8a:
         ef:56:dc:63:ae:df:25:8e:72:c6:02:ca:31:4f:9f:ca:46:8f:
         8a:e3:8f:a7:e3:3e:83:cc:66:99:ec:a9:11:9a:17:fd:65:c2:
         92:67:af:e8:a3:a2:1c:ba:df:65:04:ff:c0:a2:2c:47:94:d7:
         40:e0:a6:e9:36:a9:74:1c:42:c4:41:e0:7f:88:89:af:34:f7:
         05:5a:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:24 2026 by rpki-client