Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e34382e302f32322d3232203d3e203234343236.roa
File:                     3130332e33352e34382e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          PCy+3/9S9rgqF8z4q4+WzPT/xtRzxVjDj0iQBw5gSZs=
Subject key identifier:   EF:7C:A0:DC:07:11:20:FB:A8:71:0B:3E:CE:9E:C2:68:EB:10:BC:68
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       50022D1EE639D63B24B9B5CECFCE4D53307D4FAF
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e34382e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:48:47 +0000
ROA not before:           Fri 05 Jun 2026 05:43:47 +0000
ROA not after:            Fri 04 Jun 2027 05:48:47 +0000
asID:                     24426
IP address blocks:        103.35.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:02:2d:1e:e6:39:d6:3b:24:b9:b5:ce:cf:ce:4d:53:30:7d:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:43:47 2026 GMT
            Not After : Jun  4 05:48:47 2027 GMT
        Subject: CN=EF7CA0DC071120FBA8710B3ECE9EC268EB10BC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:c8:a1:ac:5d:7b:10:5c:77:45:39:a7:f3:
                    8f:40:47:b3:e2:c2:4d:2a:b4:36:2b:a4:9d:a4:14:
                    c3:ba:15:ce:cb:76:68:ad:55:95:1f:96:a8:9c:7e:
                    6b:29:24:fb:e1:e9:15:59:e9:49:4c:86:80:dd:79:
                    60:32:ea:7e:e9:c3:7b:36:3b:92:d9:9f:31:63:1c:
                    8e:5f:89:b6:dc:ea:01:82:33:c1:21:f4:b3:ff:cd:
                    19:92:86:df:be:a5:f2:be:7f:a2:d7:d5:88:1f:28:
                    aa:78:df:9b:80:8d:51:c9:ae:0b:b0:4b:c2:36:b8:
                    29:d9:7f:f3:1d:e9:9d:bd:b0:47:07:8f:3c:e2:22:
                    45:a5:f1:ad:0b:83:06:f5:e1:c3:6e:b5:61:7d:18:
                    a7:84:e5:b5:5f:5b:1b:04:00:01:04:0f:92:cc:7e:
                    01:30:72:55:ce:37:23:49:e8:67:27:89:8c:88:58:
                    c9:12:41:91:b9:6b:5b:96:a3:78:f9:18:89:23:0b:
                    dd:eb:00:bf:ed:e4:5e:12:a2:68:5f:22:fc:46:40:
                    be:74:a6:2f:4b:a9:83:ce:01:0d:76:2f:76:0f:99:
                    51:11:bb:ee:0f:11:a9:2d:10:36:2d:37:a1:30:32:
                    26:8a:ed:14:a5:73:ac:3b:60:35:96:7e:3f:78:ef:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7C:A0:DC:07:11:20:FB:A8:71:0B:3E:CE:9E:C2:68:EB:10:BC:68
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/3130332e33352e34382e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:f0:a8:70:5a:de:f2:41:71:d0:88:2e:b3:3b:fd:f7:e1:
         72:54:07:44:25:14:b2:d9:08:99:8d:2d:c7:f8:ed:33:c9:c6:
         74:b8:80:e5:69:e8:6b:12:f4:b1:59:d7:5b:4b:48:81:60:c8:
         af:c2:43:13:4b:dd:63:50:a2:49:99:c2:1a:6e:92:9a:a2:f3:
         71:88:68:5d:ad:d5:a7:8c:7e:7e:ab:8b:be:2d:5b:ac:71:a0:
         54:1f:69:26:03:45:f1:bc:99:14:3c:17:f3:9a:3a:77:bc:68:
         94:df:12:f0:9b:97:50:de:cd:6c:68:d9:6c:30:22:41:bd:3f:
         60:b4:1b:ee:a5:1e:b6:4c:6c:a0:b7:b3:79:38:81:02:9d:07:
         ef:66:c8:76:aa:f5:4c:09:b5:2b:d0:cd:7d:0b:c0:31:47:56:
         14:f7:52:7b:ce:6f:ba:66:1a:26:d2:4f:c4:34:55:8e:f0:56:
         03:1e:7d:2d:20:31:ae:b9:75:1b:6d:7a:a1:cc:ea:6e:35:96:
         c3:53:4c:70:d7:e2:e1:f5:26:29:45:e7:64:ef:a7:80:d6:74:
         59:1d:5e:d1:82:0d:37:f9:f4:45:67:eb:fe:4d:8c:12:cb:ab:
         ff:ce:36:3d:de:ee:20:c6:e1:d1:a8:1e:a6:97:4b:5d:9d:c9:
         ef:ed:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:19 2026 by rpki-client