Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
File:                     3130332e33352e33322e302f32302d3230203d3e203234343236.roa (raw, json)
Hash identifier:          baT0Y3rnlxqg6+Tjpm14IlEpAZB1yw2BqbplTQCBQ10=
Subject key identifier:   E4:59:53:EA:19:99:8B:98:A5:6F:9E:16:68:38:59:50:CF:70:B6:CE
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       11F1CE8C2B0DEC5702A6F16062A3B695842BB994
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:51:16 +0000
ROA not before:           Fri 05 Jun 2026 05:46:16 +0000
ROA not after:            Fri 04 Jun 2027 05:51:16 +0000
asID:                     24426
IP address blocks:        103.35.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f1:ce:8c:2b:0d:ec:57:02:a6:f1:60:62:a3:b6:95:84:2b:b9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:46:16 2026 GMT
            Not After : Jun  4 05:51:16 2027 GMT
        Subject: CN=E45953EA19998B98A56F9E1668385950CF70B6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:b6:df:21:36:b7:ab:e2:8b:3a:7c:bf:12:
                    cc:6d:55:64:e0:f9:c9:8f:1a:8b:d1:26:c1:0f:b0:
                    68:8d:05:ac:35:fb:84:c7:3f:9b:0b:b6:32:e6:c1:
                    3e:a7:a8:65:a3:34:05:84:56:fd:91:7c:d1:84:b7:
                    e6:a2:1c:40:69:f6:92:65:2a:73:b5:73:a6:ae:fd:
                    f8:c6:57:ae:f0:2b:25:d3:ff:eb:a6:0b:9e:dc:8d:
                    a4:b3:8a:f5:c1:8f:06:7a:e0:08:e1:c9:32:bd:cb:
                    72:13:56:43:5c:a9:85:82:a2:f1:5c:bc:12:cb:aa:
                    19:11:23:04:e9:60:38:be:03:20:c0:7e:0c:38:11:
                    5b:00:35:7e:82:a3:26:d6:a2:a5:9e:16:9a:6a:f2:
                    5c:65:2a:d5:0f:25:9e:c2:8b:51:8e:1d:e6:dd:20:
                    b0:57:26:7c:ab:75:da:ca:c3:b4:87:48:61:95:38:
                    f1:6c:61:84:e9:a7:25:7e:54:22:57:58:4c:d5:d4:
                    36:4a:9a:06:eb:a4:c8:99:6b:bf:66:80:cc:15:65:
                    4a:a3:4d:6e:be:e9:32:90:d7:01:c1:bf:78:53:45:
                    20:a5:cf:b9:ee:a0:b4:a8:d6:53:73:86:21:37:30:
                    a8:c2:c5:64:82:f2:d3:d7:b9:f5:b6:a5:4e:83:33:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:59:53:EA:19:99:8B:98:A5:6F:9E:16:68:38:59:50:CF:70:B6:CE
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e33322e302f32302d3230203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:83:86:e0:80:92:28:4f:d5:2a:65:fd:33:14:86:6b:cd:
         ec:a0:d0:8c:51:1b:6b:dd:17:fa:79:3a:d3:7c:36:f9:e6:e9:
         13:51:dc:63:25:6b:04:8b:f2:61:b2:03:1d:37:66:fb:6a:99:
         87:7a:c1:8d:f3:16:76:65:50:33:0f:ad:56:1e:48:50:78:39:
         f0:5c:f7:52:39:64:9d:eb:97:6d:3b:df:9f:2c:71:1e:32:cf:
         0b:91:92:67:20:77:82:3f:5d:2e:73:58:08:42:31:2e:2a:98:
         79:02:20:95:d7:d5:26:2f:dc:a6:a9:8d:3c:a2:3a:19:ed:9c:
         ef:07:67:20:de:c5:52:83:15:3e:cd:e8:19:76:ac:44:de:80:
         81:e7:c3:8b:af:d8:eb:80:a5:cf:9e:8b:56:07:2e:c5:cd:f1:
         fd:d0:8c:1d:37:c4:ae:d1:22:15:3a:00:03:bd:1d:04:f4:e2:
         16:fd:51:c5:29:51:09:e6:3c:24:f0:c0:42:1c:72:50:4d:d1:
         c6:b2:bb:7d:85:d1:35:be:82:ef:4b:2d:e3:e4:e9:a7:dd:0f:
         80:4c:95:9e:b7:9c:33:d7:db:94:5f:1f:8e:fe:67:13:97:ca:
         41:87:05:99:03:b3:54:c6:a7:47:e6:b7:0c:01:05:c0:1a:ba:
         e6:49:46:e5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEfHOjCsN7FcCpvFgYqO2lYQruZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQ2MTZaFw0yNzA2MDQwNTUxMTZaMDMxMTAvBgNV
BAMTKEU0NTk1M0VBMTk5OThCOThBNTZGOUUxNjY4Mzg1OTUwQ0Y3MEI2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6rbfITa3q+KLOny/EsxtVWTg
+cmPGovRJsEPsGiNBaw1+4THP5sLtjLmwT6nqGWjNAWEVv2RfNGEt+aiHEBp9pJl
KnO1c6au/fjGV67wKyXT/+umC57cjaSzivXBjwZ64AjhyTK9y3ITVkNcqYWCovFc
vBLLqhkRIwTpYDi+AyDAfgw4EVsANX6CoybWoqWeFppq8lxlKtUPJZ7Ci1GOHebd
ILBXJnyrddrKw7SHSGGVOPFsYYTppyV+VCJXWEzV1DZKmgbrpMiZa79mgMwVZUqj
TW6+6TKQ1wHBv3hTRSClz7nuoLSo1lNzhiE3MKjCxWSC8tPXufW2pU6DM+p1AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU5FlT6hmZi5ilb54WaDhZUM9wts4wHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzEzMDMzMmUzMzM1
MmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBGcjIDANBgkqhkiG9w0BAQsFAAOCAQEAgV+DhuCAkihP1Spl/TMUhmvN7KDQ
jFEba90X+nk603w2+ebpE1HcYyVrBIvyYbIDHTdm+2qZh3rBjfMWdmVQMw+tVh5I
UHg58Fz3UjlkneuXbTvfnyxxHjLPC5GSZyB3gj9dLnNYCEIxLiqYeQIgldfVJi/c
pqmNPKI6Ge2c7wdnIN7FUoMVPs3oGXasRN6AgefDi6/Y64Clz56LVgcuxc3x/dCM
HTfErtEiFToAA70dBPTiFv1RxSlRCeY8JPDAQhxyUE3RxrK7fYXRNb6C70st4+Tp
p90PgEyVnrecM9fblF8fjv5nE5fKQYcFmQOzVManR+a3DAEFwBq65klG5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:26 2026 by rpki-client