Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e302e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          cOPYQEfToDNyo3lR8/3gEDQjD9uy7QkzUYeEaYHrRoo=
Subject key identifier:   2F:64:50:36:12:56:CC:F2:CA:2A:7A:7D:77:51:AC:DF:6B:68:04:32
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       621ED038298CA91B700DD384557D91638E5858AD
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e302e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:49:19 +0000
ROA not before:           Fri 05 Jun 2026 05:44:19 +0000
ROA not after:            Fri 04 Jun 2027 05:49:19 +0000
asID:                     24426
IP address blocks:        103.236.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:d0:38:29:8c:a9:1b:70:0d:d3:84:55:7d:91:63:8e:58:58:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:44:19 2026 GMT
            Not After : Jun  4 05:49:19 2027 GMT
        Subject: CN=2F6450361256CCF2CA2A7A7D7751ACDF6B680432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:df:e1:87:08:b2:7a:b9:2f:99:00:4f:7e:
                    10:af:fe:e7:d9:5e:fd:f1:d3:60:25:13:28:a4:30:
                    48:d6:ca:9f:2d:75:d3:e9:03:de:80:11:13:81:04:
                    b1:47:81:ec:4a:1b:40:07:2c:cd:a0:c7:16:0e:3e:
                    a2:1a:31:be:02:b1:44:b2:b9:07:7f:ee:4d:1c:45:
                    77:aa:75:c0:48:8b:07:06:45:f9:30:4f:a8:12:65:
                    e1:5d:31:ae:c6:17:f0:51:6d:67:04:b4:ef:9f:e7:
                    88:93:8f:65:37:ec:2b:1f:78:67:d0:6b:fc:5c:0b:
                    3b:bd:fd:ee:1b:c6:9d:e8:87:5e:12:68:dd:ef:1c:
                    38:f8:7a:72:42:2c:4b:02:35:bd:49:c1:06:8a:a8:
                    9e:d1:b8:84:36:13:99:d3:81:e5:22:1d:72:61:96:
                    c1:0c:86:e2:78:20:68:a9:23:6a:f5:9c:4a:b2:1d:
                    6a:7d:85:5e:5b:93:ff:7d:ff:1f:00:22:34:e9:8e:
                    a3:14:52:b7:51:35:af:a6:7f:19:65:1f:65:30:d6:
                    98:84:eb:26:15:75:ff:22:aa:6c:92:9e:8c:75:b2:
                    57:59:22:e5:e1:81:5e:0c:91:c9:4b:96:1e:11:5d:
                    a8:6e:45:9d:c8:be:72:29:bf:2b:e7:d1:11:93:7d:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:50:36:12:56:CC:F2:CA:2A:7A:7D:77:51:AC:DF:6B:68:04:32
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e302e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:fb:52:7b:35:fc:11:54:e2:f3:ea:86:fa:db:46:ae:f1:
         7f:7c:f3:2a:a6:41:f8:1b:eb:3e:89:1a:ea:07:6e:ab:eb:17:
         a1:8a:b7:0a:8e:47:69:74:d4:37:37:3b:8f:1e:4b:b6:21:ec:
         88:c0:9a:e7:c5:40:99:85:29:f6:ea:3a:3b:30:3d:8e:57:70:
         87:34:7a:98:c2:11:03:76:66:1e:af:b4:59:e7:0c:c9:68:d5:
         c6:79:08:79:79:0f:8e:58:a3:b1:d6:1a:23:28:74:34:56:a3:
         84:ef:de:7f:f4:ff:5a:89:d2:ff:14:a7:f2:d5:dd:0b:fc:5d:
         40:bc:12:ea:2f:be:24:cf:e2:45:b6:87:91:be:1a:d9:8b:78:
         b1:c8:f2:77:27:36:0f:ef:76:f5:16:61:35:0f:cb:b7:50:33:
         74:82:9f:02:93:0b:a7:40:5f:e3:3e:9e:6a:b8:d6:29:82:73:
         96:44:fa:6f:e8:19:2f:4b:ab:9f:f7:0a:72:23:8c:55:3e:a2:
         1f:65:d6:04:fd:75:9d:36:2a:1b:62:48:40:9e:64:a1:a6:af:
         c2:17:41:cd:84:e9:62:24:9e:61:3a:46:42:05:89:50:40:36:
         98:24:82:83:2f:18:2a:0a:88:2c:67:20:35:38:58:00:d2:82:
         c2:40:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:20 2026 by rpki-client