Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa
File:                     3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier:          djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=
Subject key identifier:   04:4E:9A:9D:4B:50:95:06:63:E2:1A:F4:40:63:BB:AC:76:0D:E6:04
Certificate issuer:       /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0
Certificate serial:       4C858FE297B1CF54EF34077CC7196F0DD9C88F90
Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa
Signing time:             Fri 05 Jun 2026 06:35:33 +0000
ROA not before:           Fri 05 Jun 2026 06:30:33 +0000
ROA not after:            Fri 04 Jun 2027 06:35:33 +0000
asID:                     131506
IP address blocks:        160.250.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:85:8f:e2:97:b1:cf:54:ef:34:07:7c:c7:19:6f:0d:d9:c8:8f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0
        Validity
            Not Before: Jun  5 06:30:33 2026 GMT
            Not After : Jun  4 06:35:33 2027 GMT
        Subject: CN=044E9A9D4B50950663E21AF44063BBAC760DE604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:1c:ee:c4:44:32:39:16:6c:ea:63:73:bf:
                    b1:e2:fa:45:51:a9:33:22:06:42:6e:ce:4d:83:e4:
                    cf:b2:ed:d1:7c:85:6e:26:89:c5:be:ef:9d:f7:bf:
                    e3:db:6a:30:f4:10:95:65:ab:a3:35:ad:84:cf:c8:
                    9f:9f:19:f6:39:27:fb:1e:b8:6b:93:0e:48:d3:66:
                    30:7c:eb:70:52:f9:4e:46:28:a4:25:99:46:bf:ba:
                    25:79:e8:10:d9:8e:23:77:01:10:93:da:fd:b6:e4:
                    03:19:4f:bc:0e:ae:a5:69:69:07:63:8e:79:ac:43:
                    60:b6:4d:46:ec:7e:17:18:e1:b3:76:ee:23:67:7c:
                    a1:e8:e2:52:d4:30:1e:c5:fb:8d:fe:18:92:93:41:
                    7d:5b:ef:f3:66:3d:88:df:b5:aa:f1:3f:1d:07:cd:
                    11:e4:ca:18:66:fa:6d:5a:03:6d:b0:95:32:98:c1:
                    44:b5:42:2d:b3:99:64:7f:be:1b:41:7b:aa:58:cb:
                    fa:fc:ea:97:68:d7:bf:f2:58:c7:f9:b4:24:f1:4a:
                    67:80:d0:6e:e8:8d:68:83:6b:cc:c8:07:02:0d:b4:
                    1c:7e:d3:d5:6a:f6:d2:c0:f7:d0:ac:9e:29:1a:88:
                    68:3e:00:70:b6:f9:ee:25:79:30:ab:0d:e8:20:a3:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:9A:9D:4B:50:95:06:63:E2:1A:F4:40:63:BB:AC:76:0D:E6:04
            X509v3 Authority Key Identifier:
                keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:34:0c:0a:08:a7:e8:02:a8:61:ce:e2:05:52:64:19:3e:a9:
         44:1c:31:11:f2:d7:cf:83:1a:a5:4a:3f:b4:1d:c6:5f:27:1b:
         f8:a0:81:5e:ed:9c:57:11:58:09:35:35:2f:df:08:b0:47:41:
         91:cc:19:ad:7d:d3:c2:26:a9:e8:29:2f:e9:39:13:4b:96:8e:
         ca:23:27:16:35:bf:79:40:9b:63:5c:13:e1:03:cc:dc:77:bf:
         d1:84:92:56:f4:51:26:e5:cc:a6:35:1a:24:d2:43:ad:5d:32:
         4e:3a:50:c9:6e:bc:2b:15:76:cc:f2:29:da:6b:e2:b1:d0:f0:
         96:cc:29:b2:53:dd:c4:9b:ef:b0:46:d9:b3:89:c0:e5:bd:02:
         ad:f1:6d:6a:be:08:71:9d:ab:1b:9a:37:2a:a2:54:9e:05:49:
         44:a5:a6:55:d6:64:eb:94:88:98:b2:c2:b4:2b:0c:27:3a:ca:
         4c:f9:88:de:c7:8a:c6:df:af:1f:6a:e6:c8:b7:04:ab:af:03:
         ad:ef:f4:d5:67:bf:69:f1:52:47:b5:21:b0:71:2f:f0:64:68:
         89:28:90:fa:72:d8:f2:c5:10:82:31:50:b1:eb:01:d8:64:9f:
         43:fe:76:7c:f9:0b:47:c8:79:56:5a:7d:2b:5b:65:7b:c5:e9:
         88:5d:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:31 2026 by rpki-client