Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3134302e302f32342d3234203d3e203138313138.roa
File:                     3132302e34352e3134302e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          UrAJySrxDeTY3q+nRBL8/em3xS5owCMg7+UBqmy0fmw=
Subject key identifier:   A9:CB:8A:E4:AF:7D:77:23:69:B5:4F:DC:8C:31:14:CC:2A:E1:E5:C6
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       080CD05970A519D5DF22186815CC29F61DE48115
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3134302e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:09:54 +0000
ROA not before:           Fri 26 Jun 2026 04:04:54 +0000
ROA not after:            Fri 25 Jun 2027 04:09:54 +0000
asID:                     18118
IP address blocks:        120.45.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:d0:59:70:a5:19:d5:df:22:18:68:15:cc:29:f6:1d:e4:81:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:04:54 2026 GMT
            Not After : Jun 25 04:09:54 2027 GMT
        Subject: CN=A9CB8AE4AF7D772369B54FDC8C3114CC2AE1E5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:1b:7c:35:bb:92:3b:fd:df:9f:6f:ab:c2:
                    db:ae:cd:29:7f:81:b1:98:db:d0:d0:66:b9:56:13:
                    bd:7d:2f:bb:34:ec:18:5d:fe:e0:54:96:03:fe:43:
                    75:b6:a3:66:5c:3f:55:f3:82:49:bf:ce:e5:af:85:
                    b4:a6:08:a1:29:83:36:ee:e1:d5:7d:01:ab:8a:74:
                    cd:5a:c9:9c:87:35:bb:05:95:49:fa:df:7a:6d:eb:
                    42:0e:28:d7:7b:60:26:5f:2e:4a:c4:7f:14:6a:f4:
                    02:f1:d1:6f:87:15:24:89:9f:4e:72:67:23:ec:02:
                    28:d6:77:46:27:43:34:61:5c:d9:56:45:5f:86:3f:
                    6d:03:7d:2b:41:a2:c1:9b:0f:57:d9:74:57:06:b3:
                    15:3c:7a:58:f9:dc:cd:76:f7:f0:ef:54:c0:94:5b:
                    64:98:3c:0a:49:fe:5e:09:99:51:4c:d7:eb:49:c4:
                    d8:bd:36:20:65:e4:a9:a3:6e:d2:44:c7:97:c7:47:
                    2a:6d:f2:ec:37:16:90:8f:1d:10:15:1a:ca:8d:96:
                    2d:05:4a:bc:82:37:d3:da:c5:9f:c3:c6:8b:e4:9a:
                    b3:0f:61:e6:c4:90:74:22:8f:e7:b4:63:ab:2b:17:
                    50:e0:ba:2f:50:57:f1:ef:f2:74:5c:69:26:04:ab:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:8A:E4:AF:7D:77:23:69:B5:4F:DC:8C:31:14:CC:2A:E1:E5:C6
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3134302e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:70:55:1e:a4:16:9a:49:bc:fe:81:a7:17:13:13:a0:3f:7f:
         61:38:13:64:8a:02:ff:be:59:35:90:c8:d9:62:44:61:29:ee:
         47:bd:16:80:e6:fb:86:8a:66:8f:6c:48:ae:3c:06:fc:b7:51:
         d8:c5:c1:b7:39:5d:e5:b9:a7:e8:d5:1c:42:a7:01:f5:f6:4c:
         de:30:f9:ca:dc:55:0b:35:f0:eb:bb:40:24:13:96:d0:fc:9d:
         49:b7:72:1b:f8:8c:f2:6e:f2:0a:e8:72:5d:eb:92:b1:1a:9e:
         d2:0c:13:66:98:f6:f6:1b:6a:4e:9d:95:6e:11:2e:0b:e9:ea:
         ba:4e:82:27:2b:68:55:20:98:dc:14:84:ad:59:9a:04:30:ab:
         96:08:fe:31:16:17:91:00:f0:ca:a8:13:d6:f0:61:8c:d2:b1:
         b3:a3:ce:28:b3:04:eb:6a:7f:c8:3c:ad:e7:77:91:9b:63:c6:
         51:dc:84:43:53:2a:68:f8:0c:d3:36:6d:3b:31:df:ab:1c:2e:
         46:dd:5e:ea:c5:db:fb:de:ed:2a:08:ec:03:63:66:c8:bf:19:
         32:44:f4:1d:7f:84:1e:09:72:a3:26:48:d6:d2:f2:98:70:7a:
         14:e8:46:c0:f7:06:13:e3:f5:4d:52:2e:af:8a:b0:a3:97:b3:
         ab:ed:c1:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:31 2026 by rpki-client