Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38302e302f32302d3230203d3e203536323832.roa
File:                     3231312e3135352e38302e302f32302d3230203d3e203536323832.roa (raw, json)
Hash identifier:          HEvEi9066Hbqh4HDHHjWn21kp5SEAkEghLLqW6GEXik=
Subject key identifier:   F7:68:C9:E4:98:D5:60:5B:31:97:6F:E9:C2:68:9F:26:43:52:F5:52
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       5BD987EDF831E903C8CF9040C00A4F4841FE7852
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38302e302f32302d3230203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:46:25 +0000
ROA not before:           Tue 09 Jun 2026 06:41:25 +0000
ROA not after:            Tue 08 Jun 2027 06:46:25 +0000
asID:                     56282
IP address blocks:        211.155.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d9:87:ed:f8:31:e9:03:c8:cf:90:40:c0:0a:4f:48:41:fe:78:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:41:25 2026 GMT
            Not After : Jun  8 06:46:25 2027 GMT
        Subject: CN=F768C9E498D5605B31976FE9C2689F264352F552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:2d:b2:38:f3:79:c5:db:96:ef:35:eb:c4:
                    66:bf:28:58:fc:16:f3:c9:19:32:d2:ac:e3:74:07:
                    6c:91:cb:2f:48:3e:3e:40:d5:50:0a:5d:45:15:a4:
                    31:6d:3b:03:24:be:6c:d0:fe:1d:4c:46:65:58:43:
                    02:f2:b9:fe:44:23:e7:cd:7e:50:ed:67:65:4f:f6:
                    d1:e2:cb:e4:73:3c:c6:03:90:1b:90:ca:5d:ec:03:
                    65:fe:26:b2:13:9c:19:8f:c3:c9:af:8d:5f:9d:2d:
                    61:0b:6d:68:6a:07:d0:c9:f3:7b:3e:44:be:88:66:
                    15:67:7d:15:61:96:f6:8d:fa:8a:30:fc:e1:d6:f8:
                    e8:7c:c8:96:e1:18:2f:a8:3a:3c:d4:3b:a2:eb:ab:
                    bf:2d:cb:2e:48:35:6d:d7:a1:92:f2:1d:31:6b:35:
                    eb:ee:28:b3:5f:4f:43:15:83:26:37:59:75:3c:eb:
                    a9:27:58:2a:aa:ca:6c:b3:23:b5:84:f6:f4:d4:7c:
                    76:59:52:13:2b:b7:94:5d:2e:99:3c:66:55:eb:b7:
                    58:44:dc:6d:ed:54:48:4d:ee:0e:6a:d7:26:3c:bf:
                    b5:70:4b:9a:ce:25:da:9b:4f:a9:55:08:8a:57:ef:
                    40:e2:f3:80:f9:56:b0:32:d0:e5:09:74:ab:28:61:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:C9:E4:98:D5:60:5B:31:97:6F:E9:C2:68:9F:26:43:52:F5:52
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38302e302f32302d3230203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:c5:68:6a:f1:0d:71:5f:99:e8:9e:8d:ca:5b:85:56:82:b1:
         07:69:06:b6:7c:00:d2:46:c5:5f:94:09:24:f1:61:7b:c0:41:
         b0:c2:4f:5e:8a:84:47:ac:e3:bf:bf:bc:0c:c3:56:59:42:3a:
         65:29:81:2a:11:99:29:47:76:a3:48:ac:ce:bc:b9:1b:a4:e9:
         30:03:93:6e:41:18:25:65:d7:b5:34:62:92:ab:95:a0:c8:9e:
         05:fd:59:5c:48:8c:ee:53:fd:9e:8b:57:b4:ef:64:7f:20:2c:
         91:b0:53:57:d1:c1:29:fe:0d:a0:53:98:01:a7:85:e5:73:1d:
         3b:8a:f5:b8:54:2c:fd:1b:07:a0:e9:6d:de:32:04:ac:21:89:
         51:3f:4e:9c:23:f9:17:97:45:14:b5:8b:4d:e7:38:3a:3a:d6:
         1a:b2:78:f1:0c:ac:ae:14:a5:b9:a0:e3:51:17:ef:a2:29:61:
         db:6e:30:8f:39:a7:ac:ef:d6:78:ac:27:0f:14:7b:7b:67:53:
         20:15:e0:c9:3b:f1:09:ae:0f:61:2c:32:45:1a:c0:12:4f:1a:
         e5:b9:40:c2:29:1f:21:f5:04:96:5a:e6:f0:5f:c6:fe:75:b0:
         02:42:f6:c4:fd:62:e1:4e:b7:fb:9f:ed:c1:f9:2b:0a:8c:b6:
         84:2b:4d:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:27 2026 by rpki-client