Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32382e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e32382e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          R3bhvDrIO47oPPVi1k3cQTmkt2NCGlTXBRD8se+4PZM=
Subject key identifier:   BB:E1:C5:80:37:0A:E4:41:C4:47:E4:84:49:38:53:F8:64:EA:CB:98
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       61E64676A92300E6E9E09CBF5F3F39D53532525A
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32382e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:49:19 +0000
ROA not before:           Fri 05 Jun 2026 05:44:19 +0000
ROA not after:            Fri 04 Jun 2027 05:49:19 +0000
asID:                     24426
IP address blocks:        103.236.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e6:46:76:a9:23:00:e6:e9:e0:9c:bf:5f:3f:39:d5:35:32:52:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:44:19 2026 GMT
            Not After : Jun  4 05:49:19 2027 GMT
        Subject: CN=BBE1C580370AE441C447E484493853F864EACB98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:cb:7f:1b:3f:c7:fc:dc:23:d2:e1:77:08:
                    3a:28:13:46:0f:b2:43:65:d7:67:7f:d5:6d:cd:99:
                    2f:6d:f5:2c:45:fb:59:ca:b9:b6:d9:be:6e:6f:c3:
                    d9:ac:24:21:52:fb:e8:83:25:9d:52:ca:83:61:b3:
                    ad:4b:c5:6e:4e:f1:c9:32:17:51:04:fc:8c:c7:3c:
                    92:53:d6:a7:8c:e7:2a:98:9f:b2:79:dc:1e:60:b6:
                    ad:d9:7e:a8:ad:e2:88:41:3b:09:7d:cf:b7:05:15:
                    f2:31:f4:9d:cf:1c:88:65:33:70:46:14:99:aa:1b:
                    35:54:a4:43:4d:bf:16:52:a8:f1:94:ad:ea:7f:a5:
                    c1:41:34:de:42:76:07:c5:70:c0:6b:1d:9b:06:bb:
                    8e:3d:b4:14:8a:a5:8a:9c:ff:e7:d5:58:c1:06:fc:
                    b4:d2:68:37:2b:f0:9f:a1:08:5b:7c:fc:6f:3c:6a:
                    71:e1:8e:c5:f8:c2:5c:3e:17:4b:4f:ca:18:4f:3a:
                    7e:8b:45:a5:33:e8:4a:63:fa:be:94:bb:17:c5:43:
                    33:9c:1f:b1:90:5e:82:91:81:e2:2a:7e:d1:6a:09:
                    74:70:3d:3c:f4:bd:36:9b:5d:52:42:92:37:78:5d:
                    56:8d:59:81:55:1c:0e:5b:03:5a:0a:8c:c5:cf:6b:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E1:C5:80:37:0A:E4:41:C4:47:E4:84:49:38:53:F8:64:EA:CB:98
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e32382e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:a2:68:3e:33:1c:e6:1f:94:4a:f2:95:75:a4:9a:f5:71:92:
         e1:f6:c2:18:3c:fe:67:f3:74:51:56:31:e7:b9:98:8b:91:d1:
         07:d9:dc:ed:d3:2d:9d:c8:07:dc:47:5e:dd:0c:ed:3f:a2:5d:
         04:98:ca:6e:56:dd:1c:39:02:d2:3e:74:62:4f:a1:a4:4f:fd:
         31:23:b1:35:0a:44:3b:87:f8:dc:80:80:f2:43:77:53:89:d1:
         0d:cb:6f:30:3d:65:15:21:4d:35:8b:8d:13:dc:a0:b4:16:ac:
         73:11:69:95:44:8a:4c:65:78:40:29:ba:81:af:01:df:ff:f7:
         62:4b:98:a3:35:fa:09:b1:c3:3b:e1:5b:2f:1b:7f:17:98:b7:
         05:fb:e4:0c:3e:d9:e5:ce:7a:2d:33:c1:cc:fe:76:b6:f7:82:
         c7:35:6b:63:74:1d:c1:3a:2c:a9:81:bb:73:26:95:a0:59:86:
         33:76:8f:b2:e1:ff:52:55:9f:03:fe:db:16:63:17:1e:b8:b6:
         23:93:f2:cd:b7:45:57:d8:02:6d:d1:71:5b:29:49:55:36:65:
         6d:a9:b7:de:6c:e4:db:87:51:09:90:9f:63:8a:2b:f7:09:87:
         f1:27:7b:64:38:b4:c2:7e:98:e2:29:90:38:a5:66:a3:f0:bb:
         64:e8:23:66
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYeZGdqkjAObp4Jy/Xz851TUyUlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQ0MTlaFw0yNzA2MDQwNTQ5MTlaMDMxMTAvBgNV
BAMTKEJCRTFDNTgwMzcwQUU0NDFDNDQ3RTQ4NDQ5Mzg1M0Y4NjRFQUNCOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXn8t/Gz/H/Nwj0uF3CDooE0YP
skNl12d/1W3NmS9t9SxF+1nKubbZvm5vw9msJCFS++iDJZ1SyoNhs61LxW5O8cky
F1EE/IzHPJJT1qeM5yqYn7J53B5gtq3Zfqit4ohBOwl9z7cFFfIx9J3PHIhlM3BG
FJmqGzVUpENNvxZSqPGUrep/pcFBNN5CdgfFcMBrHZsGu449tBSKpYqc/+fVWMEG
/LTSaDcr8J+hCFt8/G88anHhjsX4wlw+F0tPyhhPOn6LRaUz6Epj+r6UuxfFQzOc
H7GQXoKRgeIqftFqCXRwPTz0vTabXVJCkjd4XVaNWYFVHA5bA1oKjMXPayFvAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUu+HFgDcK5EHER+SESThT+GTqy5gwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODE0MDU0Ny8wLzMxMzAzMzJlMzIz
MzM2MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfsHDANBgkqhkiG9w0BAQsFAAOCAQEADqJoPjMc5h+USvKVdaSa9XGS
4fbCGDz+Z/N0UVYx57mYi5HRB9nc7dMtncgH3Ede3QztP6JdBJjKblbdHDkC0j50
Yk+hpE/9MSOxNQpEO4f43ICA8kN3U4nRDctvMD1lFSFNNYuNE9ygtBascxFplUSK
TGV4QCm6ga8B3//3YkuYozX6CbHDO+FbLxt/F5i3BfvkDD7Z5c56LTPBzP52tveC
xzVrY3QdwTosqYG7cyaVoFmGM3aPsuH/UlWfA/7bFmMXHri2I5PyzbdFV9gCbdFx
WylJVTZlbam33mzk24dRCZCfY4or9wmH8Sd7ZDi0wn6Y4imQOKVmo/C7ZOgjZg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:49 2026 by rpki-client