Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa
File:                     AS63567.roa (raw, json)
Hash identifier:          DWWX/OGUwb5UtXDdAkHKcEzptEhODNtNLqhXQ2YBxAM=
Subject key identifier:   FF:CE:E4:8B:53:A0:50:F8:3D:C6:8C:21:81:CF:D0:3E:A8:F5:F3:09
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       65CC5B39B3E32A9256CFCC96B455833E16EFAE17
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa
Signing time:             Thu 11 Jun 2026 07:29:35 +0000
ROA not before:           Thu 11 Jun 2026 07:24:35 +0000
ROA not after:            Thu 10 Jun 2027 07:29:35 +0000
asID:                     63567
IP address blocks:        43.248.184.0/21 maxlen: 24
                          103.40.12.0/22 maxlen: 22
                          103.45.160.0/22 maxlen: 24
                          103.205.252.0/22 maxlen: 24
                          103.239.244.0/22 maxlen: 24
                          111.223.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 10:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cc:5b:39:b3:e3:2a:92:56:cf:cc:96:b4:55:83:3e:16:ef:ae:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Jun 11 07:24:35 2026 GMT
            Not After : Jun 10 07:29:35 2027 GMT
        Subject: CN=FFCEE48B53A050F83DC68C2181CFD03EA8F5F309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:0b:07:e8:64:d5:83:ff:c9:6a:63:dd:dc:
                    eb:75:b6:54:40:08:fa:4e:d5:68:e2:e9:a1:1c:af:
                    2e:ec:58:a7:70:91:ae:de:ed:47:d0:40:fe:c0:69:
                    c9:a0:18:47:6e:92:2a:da:05:ea:7e:cf:67:ea:02:
                    38:58:df:01:8a:f6:33:cc:c3:7e:41:e9:d5:11:86:
                    7a:2e:c4:bf:9f:9c:16:bb:f4:10:50:d3:8a:e7:dd:
                    c7:8c:13:4d:12:f3:cb:b5:00:4a:89:33:07:f8:80:
                    14:64:e7:5b:a3:e2:ad:0c:93:a6:93:1f:22:fb:43:
                    38:61:c4:d8:3b:85:29:1b:f7:6b:58:7e:5c:ad:77:
                    47:98:42:3c:d7:b0:ea:09:24:cf:a4:97:67:9e:18:
                    6f:3e:f8:78:7e:3b:2b:1e:6c:57:ae:96:d3:f7:dd:
                    c1:f1:e7:0f:91:0a:d9:61:78:85:db:dd:12:63:25:
                    27:08:7f:6c:8f:0c:2a:c4:e2:19:c6:7b:74:07:e9:
                    69:f6:0b:3b:2b:9c:58:9a:75:2c:8c:82:73:bf:77:
                    f4:da:f9:46:f4:be:ab:b0:78:ad:d4:0a:84:5c:4e:
                    3f:75:ca:d8:5d:bc:60:2e:42:e2:01:e5:45:c2:2f:
                    80:5c:7a:99:f0:2d:40:18:fb:8c:b1:f8:02:2d:e4:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CE:E4:8B:53:A0:50:F8:3D:C6:8C:21:81:CF:D0:3E:A8:F5:F3:09
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/AS63567.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.184.0/21
                  103.40.12.0/22
                  103.45.160.0/22
                  103.205.252.0/22
                  103.239.244.0/22
                  111.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:8e:cc:96:20:cb:26:e1:1d:6f:dc:61:2c:0b:9c:68:d0:
         24:a2:0e:e3:6b:8b:75:76:e9:e0:19:b2:e4:c2:03:4d:f7:16:
         13:f6:d4:75:2c:91:4d:56:d3:37:27:bf:20:13:1b:9e:d6:76:
         53:9e:e1:1a:3c:d1:a1:37:2d:67:88:bf:e0:33:a8:32:4e:08:
         0f:3f:fa:0a:a3:5e:1b:ba:e6:43:48:a2:de:d3:fe:37:d7:6c:
         6d:b4:4a:2d:20:6c:d2:b7:ee:9e:c2:69:fe:2e:26:82:b5:9f:
         1b:6b:79:92:b2:a2:c4:65:e7:51:96:31:02:e5:52:8f:8e:f6:
         97:4b:8f:b3:b2:28:0c:56:f7:83:dd:10:dd:31:3e:9d:e6:d2:
         2e:7d:8a:9d:2e:a4:58:6d:44:7d:ba:a8:72:eb:f9:e1:c8:46:
         1e:e8:50:5f:a9:ce:fe:53:69:6a:fd:95:7d:ed:65:b2:24:cf:
         68:c6:7b:c4:6c:1e:82:ed:e0:26:18:c6:8f:6e:8c:fa:98:4f:
         dd:8a:88:64:c3:46:1c:46:f0:67:da:df:2a:e3:60:0d:5e:41:
         d2:51:1f:27:1b:3d:a1:ca:eb:3c:e4:99:a9:11:8e:29:5f:37:
         de:c1:9d:de:9e:ce:99:e5:b4:20:3e:76:86:a9:4f:ec:93:06:
         29:2f:9d:8b
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUZcxbObPjKpJWz8yWtFWDPhbvrhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA2MTEwNzI0MzVaFw0yNzA2MTAwNzI5MzVaMDMxMTAvBgNV
BAMTKEZGQ0VFNDhCNTNBMDUwRjgzREM2OEMyMTgxQ0ZEMDNFQThGNUYzMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKgsH6GTVg//JamPd3Ot1tlRA
CPpO1Wji6aEcry7sWKdwka7e7UfQQP7AacmgGEdukiraBep+z2fqAjhY3wGK9jPM
w35B6dURhnouxL+fnBa79BBQ04rn3ceME00S88u1AEqJMwf4gBRk51uj4q0Mk6aT
HyL7QzhhxNg7hSkb92tYflytd0eYQjzXsOoJJM+kl2eeGG8++Hh+OysebFeultP3
3cHx5w+RCtlheIXb3RJjJScIf2yPDCrE4hnGe3QH6Wn2CzsrnFiadSyMgnO/d/Ta
+Ub0vquweK3UCoRcTj91ythdvGAuQuIB5UXCL4BcepnwLUAY+4yx+AIt5H6pAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQU/87ki1OgUPg9xowhgc/QPqj18wkwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC9BUzYzNTY3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIA
ATAkAwQDK/i4AwQCZygMAwQCZy2gAwQCZ838AwQCZ+/0AwQCb98MMA0GCSqGSIb3
DQEBCwUAA4IBAQAfLo7MliDLJuEdb9xhLAucaNAkog7ja4t1dungGbLkwgNN9xYT
9tR1LJFNVtM3J78gExue1nZTnuEaPNGhNy1niL/gM6gyTggPP/oKo14buuZDSKLe
0/4312xttEotIGzSt+6ewmn+LiaCtZ8ba3mSsqLEZedRljEC5VKPjvaXS4+zsigM
VveD3RDdMT6d5tIufYqdLqRYbUR9uqhy6/nhyEYe6FBfqc7+U2lq/ZV97WWyJM9o
xnvEbB6C7eAmGMaPboz6mE/diohkw0YcRvBn2t8q42ANXkHSUR8nGz2hyus85Jmp
EY4pXzfewZ3ens6Z5bQgPnaGqU/skwYpL52L
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:31 2026 by rpki-client