Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34342e33322e302f32312d3231203d3e203138313138.roa
File:                     3132302e34342e33322e302f32312d3231203d3e203138313138.roa (raw, json)
Hash identifier:          iyN4Jc/8wrlg63nrbPxQOJtmofD/YKEpKtcg/7DGskE=
Subject key identifier:   E8:B6:92:DA:62:E9:80:14:E6:F9:A4:8D:C3:3A:F1:38:86:3F:23:C5
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       01F06AFB5CA3B04C39ACB752D71011EA3655ABAF
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34342e33322e302f32312d3231203d3e203138313138.roa
Signing time:             Mon 29 Jun 2026 09:35:58 +0000
ROA not before:           Mon 29 Jun 2026 09:30:58 +0000
ROA not after:            Mon 28 Jun 2027 09:35:58 +0000
asID:                     18118
IP address blocks:        120.44.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f0:6a:fb:5c:a3:b0:4c:39:ac:b7:52:d7:10:11:ea:36:55:ab:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 29 09:30:58 2026 GMT
            Not After : Jun 28 09:35:58 2027 GMT
        Subject: CN=E8B692DA62E98014E6F9A48DC33AF138863F23C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:c0:a2:f6:90:9c:27:9d:f2:b1:9b:21:52:
                    6a:59:33:03:ac:fe:4f:16:3f:a0:d8:ac:56:17:99:
                    d6:f5:95:ab:b4:d5:45:37:bd:dd:c3:95:eb:33:09:
                    0e:23:f9:52:cc:8d:60:4e:83:cd:b0:b1:5b:76:90:
                    56:ed:02:ba:17:1b:e7:5c:4b:20:7b:9a:26:f6:4d:
                    67:45:74:0f:a4:92:68:2f:f1:ad:b6:90:da:63:e4:
                    af:61:11:ec:27:c1:4d:02:6a:90:5f:ab:57:9c:6c:
                    48:f1:6c:51:4c:93:38:82:21:75:f1:35:5f:6e:57:
                    8f:30:ee:03:02:c7:ea:f4:94:cd:49:c2:7b:ea:54:
                    64:f3:3a:ff:01:0c:77:20:cc:2b:ec:96:76:9b:73:
                    61:c4:7c:d6:3e:0a:69:2c:c3:a7:7e:a6:19:84:2a:
                    cd:8e:38:98:a0:e4:b8:55:09:79:86:37:ec:14:d6:
                    00:c1:5f:14:58:a4:4f:b8:f8:18:db:f8:2d:9a:93:
                    2b:a8:b5:ac:38:c9:ce:23:99:aa:ba:0b:3b:05:18:
                    8c:8a:a5:71:56:aa:b4:d3:ad:9b:86:1f:51:47:59:
                    5e:0a:2a:02:87:eb:5d:33:58:68:29:1a:a3:7a:e3:
                    14:3d:9b:93:f5:cc:18:cb:db:78:37:cd:f6:ef:24:
                    08:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:92:DA:62:E9:80:14:E6:F9:A4:8D:C3:3A:F1:38:86:3F:23:C5
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34342e33322e302f32312d3231203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.44.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:57:93:32:ce:b8:e4:17:fe:10:04:20:4a:b0:b1:2b:3b:
         41:f5:65:4e:79:74:c6:5c:c2:13:86:22:aa:52:8c:74:80:7b:
         f6:4c:7d:8f:25:f7:b4:9c:e5:93:90:3e:20:25:f7:df:f0:13:
         5c:ba:a5:25:f4:40:17:86:1e:d5:d3:dc:ea:b9:8d:96:2e:06:
         e7:1e:d8:67:58:da:94:6c:f3:b5:cd:cb:bf:a3:ff:e4:07:db:
         9d:6f:b7:d0:38:a9:26:cb:fd:a7:da:65:01:42:4a:71:69:8f:
         46:16:be:99:ae:72:e9:d6:93:a8:1c:95:70:1c:6f:d2:2e:10:
         27:5f:c1:8a:b6:3b:4c:46:dc:c6:87:32:92:e3:08:33:fd:f5:
         7a:9c:be:69:2e:48:fa:b5:0d:44:b8:16:2d:f0:31:8d:ef:1f:
         aa:a5:c8:07:da:5c:d8:59:96:bf:2d:e1:0f:43:1d:ff:7e:ff:
         53:f3:11:76:56:31:84:9c:bb:f8:00:76:e6:95:4a:23:56:99:
         e3:2f:68:d3:6c:0b:26:f7:c8:28:78:22:d5:9e:d6:60:ec:1f:
         30:ee:51:71:32:8e:00:d9:8b:10:83:bf:1b:6e:c1:73:3b:21:
         f4:31:ab:85:18:82:5b:63:44:f1:e3:b5:c1:cf:3f:98:6c:c0:
         ee:bc:c9:de
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUAfBq+1yjsEw5rLdS1xAR6jZVq68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjkwOTMwNThaFw0yNzA2MjgwOTM1NThaMDMxMTAvBgNV
BAMTKEU4QjY5MkRBNjJFOTgwMTRFNkY5QTQ4REMzM0FGMTM4ODYzRjIzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCMCi9pCcJ53ysZshUmpZMwOs
/k8WP6DYrFYXmdb1lau01UU3vd3DleszCQ4j+VLMjWBOg82wsVt2kFbtAroXG+dc
SyB7mib2TWdFdA+kkmgv8a22kNpj5K9hEewnwU0CapBfq1ecbEjxbFFMkziCIXXx
NV9uV48w7gMCx+r0lM1JwnvqVGTzOv8BDHcgzCvslnabc2HEfNY+Cmksw6d+phmE
Ks2OOJig5LhVCXmGN+wU1gDBXxRYpE+4+Bjb+C2akyuotaw4yc4jmaq6CzsFGIyK
pXFWqrTTrZuGH1FHWV4KKgKH610zWGgpGqN64xQ9m5P1zBjL23g3zfbvJAh7AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU6LaS2mLpgBTm+aSNwzrxOIY/I8UwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM0
MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzODMxMzEzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3gsIDANBgkqhkiG9w0BAQsFAAOCAQEAaU1XkzLOuOQX/hAEIEqwsSs7QfVl
Tnl0xlzCE4YiqlKMdIB79kx9jyX3tJzlk5A+ICX33/ATXLqlJfRAF4Ye1dPc6rmN
li4G5x7YZ1jalGzztc3Lv6P/5AfbnW+30DipJsv9p9plAUJKcWmPRha+ma5y6daT
qByVcBxv0i4QJ1/BirY7TEbcxocykuMIM/31epy+aS5I+rUNRLgWLfAxje8fqqXI
B9pc2FmWvy3hD0Md/37/U/MRdlYxhJy7+AB25pVKI1aZ4y9o02wLJvfIKHgi1Z7W
YOwfMO5RcTKOANmLEIO/G27Bczsh9DGrhRiCW2NE8eO1wc8/mGzA7rzJ3g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:39 2026 by rpki-client