Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34342e302e302f31392d3139203d3e203138313138.roa
File:                     3132302e34342e302e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier:          pq+U0lYmYCDlOegAGV6aXouHBGGPgMPN1mMz86emHJs=
Subject key identifier:   F1:70:19:D6:0D:7B:5F:A4:F3:9F:39:3D:38:57:F2:0E:10:AF:33:BF
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       3CCC801EDAD59DA143BA79DFC3F214086F622FCA
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34342e302e302f31392d3139203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:10 +0000
ROA not before:           Fri 26 Jun 2026 04:38:10 +0000
ROA not after:            Fri 25 Jun 2027 04:43:10 +0000
asID:                     18118
IP address blocks:        120.44.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cc:80:1e:da:d5:9d:a1:43:ba:79:df:c3:f2:14:08:6f:62:2f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:10 2026 GMT
            Not After : Jun 25 04:43:10 2027 GMT
        Subject: CN=F17019D60D7B5FA4F39F393D3857F20E10AF33BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:42:1f:69:67:c7:a5:ac:9b:0b:95:ac:eb:
                    8d:19:e4:41:b6:3c:cf:b7:0a:34:b1:f8:5a:fe:6f:
                    b9:d1:a5:c7:40:4d:e8:ce:53:d9:8d:2b:92:68:74:
                    df:ca:13:cc:26:a0:4d:5a:51:b4:81:30:fb:c6:47:
                    3f:ab:36:18:50:92:ad:d2:a9:7e:28:fd:2d:72:ee:
                    d7:94:97:f6:a4:73:eb:2c:0f:94:8e:62:49:25:0b:
                    f3:e2:33:9b:a8:bc:55:04:83:ed:1d:f0:9c:94:33:
                    72:15:96:78:b4:45:57:14:21:d8:ce:7d:b3:31:e3:
                    d0:e9:f4:ab:8b:7b:57:9f:55:21:83:4a:25:1c:e2:
                    b6:9c:93:51:ee:45:e1:5a:fe:0c:c5:35:61:a6:f1:
                    e3:7e:3a:41:e4:34:c3:8e:08:a0:ea:c8:24:a1:33:
                    1a:e2:10:3e:5e:85:01:c2:b3:41:74:0e:3a:cd:f3:
                    9c:d7:cf:0a:45:7d:bd:e7:ac:d7:bd:f0:18:73:ad:
                    67:f7:21:99:d7:f4:b1:d6:6d:07:0f:d2:d9:67:31:
                    a7:c4:d0:6f:30:80:4b:2d:1a:b0:1a:3a:34:23:81:
                    0a:85:ca:38:ce:cd:4d:48:7e:7a:9f:a1:84:a7:fa:
                    71:ed:58:41:e9:dd:86:3b:4c:54:58:de:aa:8c:5a:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:19:D6:0D:7B:5F:A4:F3:9F:39:3D:38:57:F2:0E:10:AF:33:BF
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34342e302e302f31392d3139203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.44.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:eb:08:2b:4e:70:bd:9f:5f:66:e2:d3:bc:2a:04:05:ec:
         52:89:15:e4:d2:37:cf:51:e0:7e:97:54:c8:13:79:e4:5b:0f:
         35:f2:30:fe:4c:75:f6:a5:f5:71:5d:ad:28:f3:88:4a:bf:89:
         58:8e:a4:a2:ce:f5:72:79:43:a8:f8:0b:cf:4b:9e:e4:a6:79:
         76:88:88:4b:8c:3d:1d:2e:c9:e3:8a:a8:61:8c:16:3b:dd:19:
         6d:e1:49:b3:81:de:e2:f0:d7:23:e4:36:56:43:ed:07:57:2c:
         71:bb:68:36:9e:70:6e:e8:2f:4f:be:2d:66:df:4c:0a:e2:80:
         a1:5c:fa:2b:91:97:61:79:bb:8d:4c:27:ee:8b:6b:8c:b1:b7:
         1c:40:04:a1:44:3d:3e:d0:92:f5:6e:99:d9:b7:09:74:91:04:
         53:12:68:77:dc:55:08:a6:06:54:6d:b7:cf:d9:3a:f0:d3:1a:
         6d:6c:98:1f:14:8e:bb:5e:e7:a3:66:29:e1:3e:56:9a:9b:50:
         9e:db:2e:4f:d1:c4:4b:ca:86:58:2d:02:a5:e1:27:93:4e:64:
         59:66:d1:b2:f8:90:4c:70:73:86:1d:47:b9:d6:5d:73:97:75:
         cd:2a:b6:52:4e:6d:19:e5:57:2d:d8:60:97:33:a3:56:a1:80:
         1c:5a:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:09 2026 by rpki-client