Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130332e3230322e3135322e302f32322d3232203d3e2030.roa
File:                     3130332e3230322e3135322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          oQZodAZjFJVBmHCTwzqVblCPOHIpoUnFF2tkSAt6qBs=
Subject key identifier:   0C:0B:CB:68:39:17:B7:19:38:18:05:B0:C5:C6:BD:78:24:9E:3C:D6
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       40B63C3998706BBFB71053FE41A65D18D4282956
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130332e3230322e3135322e302f32322d3232203d3e2030.roa
Signing time:             Fri 05 Jun 2026 05:57:32 +0000
ROA not before:           Fri 05 Jun 2026 05:52:32 +0000
ROA not after:            Fri 04 Jun 2027 05:57:32 +0000
asID:                     0
IP address blocks:        103.202.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b6:3c:39:98:70:6b:bf:b7:10:53:fe:41:a6:5d:18:d4:28:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:52:32 2026 GMT
            Not After : Jun  4 05:57:32 2027 GMT
        Subject: CN=0C0BCB683917B719381805B0C5C6BD78249E3CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:62:68:74:d7:ba:ff:ff:6e:7c:88:0a:af:
                    eb:5c:83:09:07:7e:b8:06:7a:f0:6b:8c:e7:62:1a:
                    3e:c7:7a:43:40:05:e2:91:f2:e9:30:a7:db:3e:fb:
                    e6:3c:fd:1f:78:7d:f7:d3:42:b5:f5:80:45:92:de:
                    42:27:c4:73:35:52:68:c5:3c:7e:36:1d:63:94:b8:
                    73:9c:81:1f:02:e6:1b:91:44:a7:bc:0f:25:41:c5:
                    34:39:ff:ba:77:1e:42:22:4a:74:71:fe:48:25:d7:
                    2f:35:a3:5f:bb:41:08:67:e3:a8:7d:0e:76:0b:50:
                    69:f8:82:c4:a1:a6:05:3b:9d:2a:73:4c:54:09:8b:
                    ad:29:08:f7:97:29:91:5e:49:b3:51:68:48:ec:18:
                    4e:d4:76:00:d9:67:89:ec:83:65:e5:d5:04:51:29:
                    78:2a:a0:ef:57:98:0a:7b:18:2c:69:42:a1:64:a3:
                    9d:a9:11:ce:5e:c0:cb:c4:8d:06:a2:15:fd:ea:88:
                    bf:0d:ec:53:0b:d2:7a:c4:21:6e:b4:61:7f:39:21:
                    e3:4d:b8:8e:bb:77:3a:12:e5:58:ed:4c:00:b9:d2:
                    06:8d:75:da:27:88:fd:14:b5:90:ea:ed:27:d1:cc:
                    10:27:90:77:b8:d8:39:b7:d3:65:38:dd:7b:cd:e7:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:CB:68:39:17:B7:19:38:18:05:B0:C5:C6:BD:78:24:9E:3C:D6
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130332e3230322e3135322e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:4c:d2:bc:40:62:6f:f1:3a:24:d3:80:e6:05:8e:03:10:
         96:a2:43:61:19:94:28:a7:f7:ef:16:84:0e:af:63:6f:26:3a:
         5b:3f:6a:3e:c3:b5:49:e3:e6:6e:b9:47:95:ce:f4:21:7c:52:
         f8:2e:4a:71:78:26:bf:ae:c4:4c:65:5d:4c:8b:bd:56:b6:33:
         9e:bd:cc:85:9c:ac:57:3b:a6:4d:96:a5:8f:1b:30:80:50:2d:
         a2:28:07:13:23:cb:0f:84:a1:04:fc:a8:e9:39:55:3a:46:38:
         53:9d:8e:e2:e3:d6:1c:51:06:2d:b9:3b:fb:12:a5:12:be:2b:
         4d:00:4c:50:b5:5b:23:3d:7c:95:c6:92:74:61:91:71:b3:8a:
         a3:ce:b7:0d:2b:3e:1b:a0:b2:90:64:21:d2:9c:99:7b:97:c1:
         86:70:cb:fd:a7:82:4a:60:de:0d:d8:d7:48:d2:8c:8c:e8:da:
         ee:d0:56:8f:06:7e:8f:b8:f0:53:0f:8b:5a:b1:a2:52:98:f5:
         8d:e7:fc:4a:41:42:0d:28:95:4d:2a:1b:4b:8d:42:b9:9a:b9:
         44:de:da:b0:bf:24:1b:01:2c:51:f5:f6:69:15:fd:29:ea:ce:
         9c:7e:78:aa:5d:62:3d:6b:c1:cd:13:e8:59:89:ff:5c:04:a8:
         00:67:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:54:27 2026 by rpki-client