Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa
File:                     3130332e3233362e33362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          Uqk4Zuplz7gcFkkTvhJDr4/vJKv0Wsd1LpPkxOTAI2c=
Subject key identifier:   B9:07:19:EE:C0:7E:F4:78:33:99:14:FC:00:80:7D:90:1E:7A:AD:FD
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       1857412F1DF0E80D664703A7A915F6577F5BD5EE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:48:12 +0000
ROA not before:           Fri 05 Jun 2026 05:43:12 +0000
ROA not after:            Fri 04 Jun 2027 05:48:12 +0000
asID:                     24426
IP address blocks:        103.236.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:57:41:2f:1d:f0:e8:0d:66:47:03:a7:a9:15:f6:57:7f:5b:d5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:43:12 2026 GMT
            Not After : Jun  4 05:48:12 2027 GMT
        Subject: CN=B90719EEC07EF478339914FC00807D901E7AADFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:1b:27:aa:75:fb:f0:8d:5f:69:81:c7:bb:
                    c4:36:55:78:bb:aa:9e:14:9f:ec:ad:bb:80:bf:86:
                    9d:e8:1c:a3:2c:73:be:73:ec:f6:6c:db:ca:7f:8c:
                    8a:32:c4:34:5f:eb:cc:b0:4f:2a:6b:ca:85:2d:cb:
                    90:41:01:dd:b4:e1:8f:65:75:49:a6:f0:f5:da:f6:
                    3c:f0:90:60:fb:30:a7:1e:20:a7:d8:de:18:53:f7:
                    b6:a9:2e:46:2d:ab:e7:31:6a:00:49:79:f9:8a:10:
                    78:cd:b1:f6:80:2a:f6:ca:49:a8:88:5c:93:0a:c0:
                    a5:ce:9a:6a:83:4c:80:a1:1b:d7:22:10:53:95:66:
                    d9:3d:af:da:be:75:ea:85:2b:1d:22:42:37:5d:c0:
                    88:61:00:f2:ba:a6:e9:fa:86:7a:80:7e:99:8f:3a:
                    0b:33:af:0d:c7:bd:d6:b9:83:3f:96:23:8d:a5:aa:
                    94:c5:19:32:ac:46:60:8a:bc:bb:9f:c4:3c:b1:5c:
                    68:cf:50:c8:58:83:de:9f:d1:b2:e8:8a:97:f7:8b:
                    36:87:9d:ea:56:55:ac:7b:e9:0f:63:d0:60:86:7e:
                    05:56:88:b9:8b:b5:46:2c:f5:11:7d:13:35:cc:65:
                    73:4f:30:4d:af:76:c8:18:82:06:f8:cf:1f:27:e7:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:07:19:EE:C0:7E:F4:78:33:99:14:FC:00:80:7D:90:1E:7A:AD:FD
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e3233362e33362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:03:5c:07:c3:10:cb:25:a4:9e:01:97:c3:a7:94:53:eb:b7:
         93:0b:8b:54:3e:2c:c1:45:b3:75:8e:d6:f2:9d:b7:84:a7:bc:
         1c:48:95:c3:0b:15:6e:2d:24:7e:53:eb:dd:d7:e7:73:10:9b:
         a9:92:c5:3c:e4:b6:1c:7d:a2:63:58:5f:13:64:97:de:5c:14:
         22:32:7f:01:fa:3b:7d:6f:b8:ff:19:c3:a9:f3:c2:f0:80:ba:
         85:1a:94:fe:ef:81:b7:ca:c1:36:3e:45:78:08:ab:84:af:26:
         0a:15:d8:1d:20:f5:24:2c:af:83:0d:7e:40:1e:3c:56:cf:06:
         01:e0:4f:15:ae:a7:e1:83:f5:e6:9c:a9:5e:93:92:a3:20:81:
         e8:a0:ac:75:aa:be:ff:bb:c5:f9:3a:e4:5f:f7:85:a9:d6:47:
         5a:cb:91:2b:6d:ac:1d:57:26:2a:0f:66:c4:de:73:44:dc:6f:
         ab:1f:30:c8:59:b7:78:0a:f4:6d:c5:63:45:a1:0a:1f:d2:65:
         4d:60:41:56:5b:a7:1a:96:d1:ae:d1:0e:30:68:6c:6c:bb:e9:
         e0:e7:4f:2e:81:f4:9f:3e:78:ce:ba:f2:63:17:aa:bd:a1:74:
         6d:99:3d:b1:a0:ab:f5:fb:7e:66:0a:ca:29:f6:bb:73:83:9b:
         39:ff:96:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:52 2026 by rpki-client