Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa
File:                     3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (raw, json)
Hash identifier:          VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=
Subject key identifier:   04:5B:A1:81:A5:68:9B:D8:81:94:4F:40:08:32:99:4B:76:DA:E7:08
Certificate issuer:       /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0
Certificate serial:       706CE5EABEDAA5C92EA5D0609A24A3A5B71E15EC
Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa
Signing time:             Fri 05 Jun 2026 06:35:33 +0000
ROA not before:           Fri 05 Jun 2026 06:30:33 +0000
ROA not after:            Fri 04 Jun 2027 06:35:33 +0000
asID:                     131506
IP address blocks:        160.250.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6c:e5:ea:be:da:a5:c9:2e:a5:d0:60:9a:24:a3:a5:b7:1e:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0
        Validity
            Not Before: Jun  5 06:30:33 2026 GMT
            Not After : Jun  4 06:35:33 2027 GMT
        Subject: CN=045BA181A5689BD881944F400832994B76DAE708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:1b:12:00:2c:c7:72:1c:34:f4:c3:da:30:
                    d6:18:1f:e0:b9:90:07:1e:42:94:35:d9:7f:aa:c8:
                    1d:92:b3:fa:b3:6e:8d:b1:35:17:5f:a7:fc:23:4f:
                    7a:5f:82:1a:5c:c0:72:f8:3d:8d:1c:9e:f9:5a:3b:
                    fb:a0:5c:2f:3d:6d:c9:48:44:7a:9a:06:1e:66:54:
                    f8:9a:3e:18:a6:d9:f1:f4:3e:e0:eb:fc:14:a2:9b:
                    34:68:e8:4b:8e:81:36:a6:6b:35:91:af:d4:c0:82:
                    09:5a:74:e7:4e:be:21:51:ef:82:91:9b:5c:a8:02:
                    d2:78:e3:2e:74:bb:81:95:e3:1a:1c:db:11:42:9e:
                    ca:6e:27:c9:5e:09:4e:46:4d:eb:1f:d3:f7:ff:bb:
                    e9:54:cb:02:e3:bf:d2:4d:2d:c2:97:ee:bf:82:f0:
                    12:89:15:21:46:32:6a:69:25:04:bc:1c:b2:ba:76:
                    46:5e:13:ed:09:b4:dd:15:55:56:a0:37:59:cf:ca:
                    8b:34:a0:82:5c:e1:85:b7:4b:c6:76:58:cf:31:a9:
                    40:d0:65:57:d7:fc:a8:1d:b7:1b:69:ee:a0:f3:24:
                    a7:b0:a6:2d:ea:77:61:72:e4:6a:1f:6d:88:c7:c2:
                    e0:84:d7:27:06:76:da:3b:86:be:bb:c6:02:20:f5:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:A1:81:A5:68:9B:D8:81:94:4F:40:08:32:99:4B:76:DA:E7:08
            X509v3 Authority Key Identifier:
                keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d5:06:d3:6b:89:12:cd:bd:5b:51:fd:f7:6c:01:18:3b:a0:40:
         b5:35:b9:2a:b2:79:88:33:ac:6d:fc:62:9a:98:a0:e0:05:97:
         46:72:49:75:a1:6e:db:ec:4f:ae:38:95:fe:24:e0:3f:46:9b:
         3e:ec:67:42:ba:7f:9f:ae:d0:7f:26:5b:5f:5e:b4:36:d1:47:
         9e:54:c6:74:ac:b4:2a:78:47:06:f6:6c:b2:72:50:40:40:56:
         7d:3f:f1:f7:fe:34:b9:3e:41:43:47:0e:d4:d5:ae:ca:05:41:
         7a:31:9e:48:0f:44:a5:e5:d6:f0:62:89:e2:73:30:8c:15:5f:
         d0:91:32:39:b8:31:4f:31:5c:bd:18:a8:f6:1b:7a:49:30:c9:
         32:51:30:83:cd:c2:f7:ca:35:bc:3c:b0:10:37:55:e2:b7:fa:
         16:f6:13:dd:a9:ab:51:19:a7:71:d4:c2:99:3d:27:61:60:b4:
         28:a5:17:1e:20:38:5f:a8:97:ae:ff:99:6b:31:68:a9:7f:7b:
         89:6b:07:b0:24:4c:cc:6a:e4:e4:c9:f0:6e:44:d5:13:93:de:
         66:19:3f:02:23:e3:df:38:2f:09:ba:71:d4:a9:9c:12:1f:77:
         db:0d:14:b5:e7:c6:d6:19:3e:3b:bf:66:d6:9d:f1:6e:90:13:
         07:d2:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:32 2026 by rpki-client