Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e31362e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e31362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          YzV1pPYB60I01GjzUsXQh08I307GXT+s9GWeFQXlBxY=
Subject key identifier:   EB:67:06:8D:35:D4:DC:15:3D:9E:7D:A6:BC:95:4F:8B:9D:E4:EE:59
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       271196E079E2090D0ED7C6A49B2B7FC9199C0081
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e31362e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:49:19 +0000
ROA not before:           Fri 05 Jun 2026 05:44:19 +0000
ROA not after:            Fri 04 Jun 2027 05:49:19 +0000
asID:                     24426
IP address blocks:        103.236.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:11:96:e0:79:e2:09:0d:0e:d7:c6:a4:9b:2b:7f:c9:19:9c:00:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:44:19 2026 GMT
            Not After : Jun  4 05:49:19 2027 GMT
        Subject: CN=EB67068D35D4DC153D9E7DA6BC954F8B9DE4EE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:7d:d5:15:68:26:b8:3b:05:9b:fe:dc:c5:
                    cf:e1:6b:d2:0d:61:3c:62:08:84:c0:e3:df:19:d2:
                    c9:1b:62:57:6e:45:79:3a:a5:db:b0:89:50:cc:1b:
                    92:a2:b5:83:27:a3:da:d2:b0:da:d1:c4:a7:64:28:
                    a8:9a:36:e5:af:7f:ae:9b:8e:e1:03:2b:75:e8:42:
                    c8:a3:90:d9:17:01:28:a8:8c:6b:e1:65:5e:6a:6b:
                    fb:28:6e:7e:ec:a5:bc:8d:e9:ec:ad:2f:88:20:d0:
                    dd:27:b3:d3:ec:be:82:8a:81:7b:05:6f:07:85:aa:
                    65:cc:97:52:66:2b:8a:18:ac:fc:27:a4:a2:b5:37:
                    7d:79:fd:b8:52:e8:0f:cf:ef:32:50:31:86:f3:23:
                    f3:71:3d:60:70:8e:9d:bd:e2:0d:c9:53:e7:c6:29:
                    58:13:91:11:6d:6a:2b:40:77:f7:49:61:d3:59:66:
                    ae:d9:23:07:1f:0e:53:67:1a:29:14:45:d6:a1:4c:
                    e7:ef:cc:46:3a:bc:1c:4b:43:e1:4a:7a:2e:20:0b:
                    fd:49:4b:d7:50:4f:c6:4e:ec:54:af:c5:64:5d:0a:
                    1c:8f:e9:af:63:7b:6f:fe:65:74:98:45:82:18:3d:
                    79:44:f2:53:7a:2e:04:91:f9:86:b8:ff:dd:c7:f7:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:06:8D:35:D4:DC:15:3D:9E:7D:A6:BC:95:4F:8B:9D:E4:EE:59
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e31362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:1a:13:9d:c4:ac:db:12:8e:9e:ce:fc:d4:35:e5:b5:fe:4e:
         0a:58:25:15:aa:28:8c:d3:1c:6c:12:ff:a5:e6:6e:f9:76:f3:
         d2:b4:69:db:4e:d1:7b:93:19:af:d2:b1:cf:0d:71:2e:df:f4:
         6b:35:bc:cc:e5:62:39:86:b2:27:ca:77:5a:4f:8c:ae:28:81:
         7f:1b:46:07:bd:b8:59:26:b2:3b:af:ad:4d:0d:76:61:06:7d:
         e1:2b:02:6b:82:e3:c8:e1:8d:8d:c7:1e:3a:ea:b4:17:98:bb:
         76:a2:de:77:f6:58:51:5e:c9:a8:b6:71:d3:a9:14:3d:2c:77:
         36:fb:fa:a1:00:e1:5b:60:38:67:bb:99:25:93:e9:40:22:0f:
         67:7e:47:6f:13:d7:69:ae:79:5a:25:16:14:48:a8:2d:1e:11:
         1f:9c:20:15:2c:53:a0:b5:49:43:db:8f:8f:05:23:47:ef:72:
         a8:b4:0b:47:c1:89:d0:d5:91:18:c3:04:c9:7a:6a:c4:1a:42:
         23:4a:23:e5:6c:0b:b7:c5:91:06:62:66:a2:5c:bc:43:55:36:
         4a:b7:08:e1:dd:cc:89:3b:c6:55:a4:1c:ea:b9:ca:bd:13:d8:
         31:e4:6c:bb:0e:7a:b5:fe:25:58:67:70:92:1a:47:48:c3:04:
         8c:85:d3:53
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJxGW4HniCQ0O18akmyt/yRmcAIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQ0MTlaFw0yNzA2MDQwNTQ5MTlaMDMxMTAvBgNV
BAMTKEVCNjcwNjhEMzVENERDMTUzRDlFN0RBNkJDOTU0RjhCOURFNEVFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFl33VFWgmuDsFm/7cxc/ha9IN
YTxiCITA498Z0skbYlduRXk6pduwiVDMG5KitYMno9rSsNrRxKdkKKiaNuWvf66b
juEDK3XoQsijkNkXASiojGvhZV5qa/sobn7spbyN6eytL4gg0N0ns9PsvoKKgXsF
bweFqmXMl1JmK4oYrPwnpKK1N315/bhS6A/P7zJQMYbzI/NxPWBwjp294g3JU+fG
KVgTkRFtaitAd/dJYdNZZq7ZIwcfDlNnGikURdahTOfvzEY6vBxLQ+FKei4gC/1J
S9dQT8ZO7FSvxWRdChyP6a9je2/+ZXSYRYIYPXlE8lN6LgSR+Ya4/93H99qBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU62cGjTXU3BU9nn2mvJVPi53k7lkwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODE0MDU0Ny8wLzMxMzAzMzJlMzIz
MzM2MmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfsEDANBgkqhkiG9w0BAQsFAAOCAQEAExoTncSs2xKOns781DXltf5O
ClglFaoojNMcbBL/peZu+Xbz0rRp207Re5MZr9Kxzw1xLt/0azW8zOViOYayJ8p3
Wk+MriiBfxtGB724WSayO6+tTQ12YQZ94SsCa4LjyOGNjcceOuq0F5i7dqLed/ZY
UV7JqLZx06kUPSx3Nvv6oQDhW2A4Z7uZJZPpQCIPZ35HbxPXaa55WiUWFEioLR4R
H5wgFSxToLVJQ9uPjwUjR+9yqLQLR8GJ0NWRGMMEyXpqxBpCI0oj5WwLt8WRBmJm
oly8Q1U2SrcI4d3MiTvGVaQc6rnKvRPYMeRsuw56tf4lWGdwkhpHSMMEjIXTUw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:48 2026 by rpki-client