Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38302e302f32322d3232203d3e203536323832.roa
File:                     3231312e3135352e38302e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier:          brNtBBGEay7eZV2vJYH+/IUt2gcUUNmsHLAM/QDFUIA=
Subject key identifier:   56:8A:E9:AE:99:5F:C4:ED:35:3B:03:6E:E2:A0:84:5F:B4:2E:A3:A8
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       5AE7D7B89C1D1EBABD863C272A348EEECE3E4225
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38302e302f32322d3232203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:12:35 +0000
ROA not before:           Tue 09 Jun 2026 06:07:35 +0000
ROA not after:            Tue 08 Jun 2027 06:12:35 +0000
asID:                     56282
IP address blocks:        211.155.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e7:d7:b8:9c:1d:1e:ba:bd:86:3c:27:2a:34:8e:ee:ce:3e:42:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:07:35 2026 GMT
            Not After : Jun  8 06:12:35 2027 GMT
        Subject: CN=568AE9AE995FC4ED353B036EE2A0845FB42EA3A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:95:0c:bb:21:83:b8:43:d8:0d:fa:14:d7:
                    3a:d0:8d:b0:03:74:64:b4:97:73:0e:97:d6:0d:b5:
                    b7:5f:07:6f:04:fa:68:82:22:8d:83:37:21:c1:7f:
                    c9:9a:99:e8:25:30:e2:12:7c:75:af:d7:ca:4e:1f:
                    a2:03:4d:5e:34:c7:65:9c:1d:82:3e:b2:c0:18:3c:
                    eb:36:99:f3:4b:f0:f9:36:f0:04:95:78:87:b7:0d:
                    97:63:d9:f0:4c:84:f6:ee:78:fc:fe:a2:8e:e1:a0:
                    d6:6e:e9:7a:6f:be:5a:67:be:74:d4:56:36:8e:0a:
                    dc:81:6e:b2:73:c0:fa:b7:23:3d:c6:e4:99:14:2d:
                    7e:5f:13:fa:52:a0:75:69:1e:0d:be:8d:73:c2:c9:
                    6e:87:26:be:bd:4b:28:6e:92:9b:aa:14:39:5a:06:
                    ec:d1:a1:ba:22:4b:ad:54:8c:5d:ef:ee:c0:5b:ed:
                    d8:d0:da:b4:a3:76:18:f9:35:34:ed:9c:b6:30:e5:
                    1d:26:1f:60:6b:f4:d2:45:60:c8:b0:3e:22:f3:02:
                    db:f5:61:8e:1d:ed:f1:41:be:a4:37:98:42:f9:dd:
                    80:9e:12:0b:5d:67:89:b7:23:26:7e:eb:6a:82:30:
                    96:13:eb:34:77:c1:3c:26:af:25:b3:e4:58:6a:a6:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:E9:AE:99:5F:C4:ED:35:3B:03:6E:E2:A0:84:5F:B4:2E:A3:A8
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3231312e3135352e38302e302f32322d3232203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:50:3c:0c:aa:82:d1:65:07:dc:56:ba:90:76:eb:9e:a3:80:
         5f:73:a1:d3:9c:bc:3d:e0:8f:d7:7e:9b:9a:38:55:8b:b4:2a:
         2a:ec:b5:8f:e1:fb:4b:3a:78:84:d4:d2:15:b2:cd:13:e1:e6:
         25:2b:9c:8b:48:de:4d:dd:43:f6:7e:ce:d7:a8:b7:72:4f:a9:
         69:49:83:80:fc:0e:b6:f1:50:39:0b:94:44:f7:38:0e:d7:be:
         98:bd:da:9f:5d:9c:d6:b7:a8:fc:5f:4e:b0:45:64:60:ef:2e:
         18:49:02:65:e9:1d:56:19:6d:f4:d6:e7:f5:40:56:a7:67:5a:
         73:b5:36:4b:ae:35:88:c8:0a:60:bd:bf:d9:17:11:54:d2:f1:
         cc:2e:71:57:c5:8b:9b:74:9a:e6:97:b0:2d:36:3b:40:70:4d:
         d5:b7:f6:66:d8:9d:69:b1:fa:64:8f:2b:57:6e:0e:0e:a3:96:
         27:c8:5f:59:3e:57:b1:b3:f6:10:3e:53:50:9f:e1:0f:e6:12:
         7c:ed:57:45:d1:d7:91:76:94:02:8b:cc:a8:9f:e9:56:69:60:
         58:bb:11:51:09:b3:0d:81:c5:0c:ee:76:82:1a:9a:1c:59:4f:
         92:bf:5b:59:c9:3a:9c:8c:a4:cd:fd:b6:b5:1e:dd:3c:65:40:
         a0:85:e5:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:20 2026 by rpki-client