Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e203138313138.roa
File:                     3132302e34352e3133362e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          dDK7mENcPHJnbWZIY2BsJ8HBTKTO2CXqc8PbgazvQbA=
Subject key identifier:   EE:0F:A8:E9:73:5E:0A:0F:89:73:40:A6:63:AC:DA:FB:56:7F:67:F6
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       65F7AEE9588ACC26BC9451C368948DF55ACD3EE6
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:09:54 +0000
ROA not before:           Fri 26 Jun 2026 04:04:54 +0000
ROA not after:            Fri 25 Jun 2027 04:09:54 +0000
asID:                     18118
IP address blocks:        120.45.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f7:ae:e9:58:8a:cc:26:bc:94:51:c3:68:94:8d:f5:5a:cd:3e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:04:54 2026 GMT
            Not After : Jun 25 04:09:54 2027 GMT
        Subject: CN=EE0FA8E9735E0A0F897340A663ACDAFB567F67F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:1b:41:3d:69:61:a1:7f:f8:4b:47:cc:e0:
                    56:26:b5:c2:93:aa:8f:99:d2:14:b0:b1:1f:0e:cb:
                    80:0c:b8:34:59:70:67:36:15:b8:49:b2:06:43:e3:
                    08:36:b8:ef:5d:c5:b7:a4:fd:83:39:15:fd:32:9e:
                    4c:ef:25:9d:1a:64:ba:71:3d:0a:df:61:26:b2:63:
                    97:f7:78:db:cf:98:0e:68:27:d4:61:af:62:e6:2a:
                    7f:34:53:e8:b2:e0:97:84:3b:77:d0:6d:ac:63:00:
                    60:ad:e5:f3:a6:9e:86:01:16:17:bb:61:9f:ca:bc:
                    cd:c5:b4:9c:ee:99:ec:77:62:e0:0d:7e:20:47:ee:
                    cd:52:f9:75:a7:81:b2:65:4b:17:e6:19:cb:d2:0b:
                    bc:50:2d:ac:e6:b5:6a:52:25:0f:42:65:34:36:2b:
                    52:0a:42:95:11:d0:16:c6:f8:e1:7a:b8:3a:5e:55:
                    ea:71:d0:57:32:dc:66:24:e9:97:37:c8:e6:43:63:
                    de:a8:fa:c3:ee:c5:a6:18:83:b6:b4:73:bf:9c:ff:
                    77:6a:11:32:99:ce:11:f1:ce:41:b1:27:c6:eb:2d:
                    47:06:40:86:0c:c2:26:37:89:72:ed:ab:f3:68:e1:
                    8e:91:13:ca:0f:68:97:f3:d9:11:b9:88:a9:c5:b3:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0F:A8:E9:73:5E:0A:0F:89:73:40:A6:63:AC:DA:FB:56:7F:67:F6
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c1:7c:44:12:29:96:d4:67:90:70:4e:a1:de:b6:c5:66:a4:
         96:a6:3a:86:ef:5c:d1:73:94:74:7f:ef:e8:03:c6:f1:a9:a0:
         bc:dd:ec:51:37:54:31:44:73:c0:41:59:40:e9:da:3d:90:70:
         6d:74:07:b5:7e:c8:32:e1:3c:04:83:b4:eb:a8:f1:29:85:f5:
         0e:31:b0:44:b6:62:32:ff:da:22:03:9e:20:7b:6d:3a:48:90:
         8f:1d:0b:22:1b:c9:0a:82:07:89:29:e4:a0:77:22:93:64:80:
         d5:66:16:fa:2f:9a:48:81:81:8e:ee:36:b7:8c:62:6c:f2:b5:
         c2:9e:3f:02:bc:f7:68:75:53:22:6c:16:6a:d2:ef:9c:5d:53:
         b7:c6:e9:72:72:62:f2:8d:38:80:69:4d:e3:8a:99:28:56:ee:
         95:6f:c4:c7:cf:6e:fd:6b:e6:b4:f8:a7:6a:4b:5d:54:29:5e:
         bd:fe:fe:14:fa:4b:18:09:ec:b6:5d:93:c9:a4:cc:c2:74:93:
         48:3a:65:43:be:d9:c0:98:a9:53:36:60:4d:53:15:6b:11:03:
         e5:f5:32:33:c8:7e:ff:99:3b:1b:9a:bb:1a:d5:3c:3c:7c:31:
         36:90:e8:2b:fa:f9:c6:c3:44:53:9a:ba:fa:73:5f:26:b1:4e:
         2b:b4:26:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:17 2026 by rpki-client