Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e31362e302f32302d3230203d3e203138313138.roa
File:                     3132302e34352e31362e302f32302d3230203d3e203138313138.roa (raw, json)
Hash identifier:          70QVvYKwfUh//RhL6zt5tnJtC/yKcH7GTRHxS4RUn7s=
Subject key identifier:   14:98:1E:84:E9:60:92:8B:B1:9E:32:79:0A:7B:36:7C:29:44:BA:EB
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       2F4960DC09E53471F686CF719792F390B7A7F51F
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e31362e302f32302d3230203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:09:54 +0000
ROA not before:           Fri 26 Jun 2026 04:04:54 +0000
ROA not after:            Fri 25 Jun 2027 04:09:54 +0000
asID:                     18118
IP address blocks:        120.45.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:49:60:dc:09:e5:34:71:f6:86:cf:71:97:92:f3:90:b7:a7:f5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:04:54 2026 GMT
            Not After : Jun 25 04:09:54 2027 GMT
        Subject: CN=14981E84E960928BB19E32790A7B367C2944BAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:f7:22:b7:93:10:ec:d4:c1:86:06:27:b4:
                    0f:c1:84:68:04:48:62:24:86:a0:32:cf:a6:d8:d2:
                    bf:37:64:3a:05:34:61:26:f1:16:b6:b2:9d:8d:5e:
                    12:a7:83:74:e9:21:c7:cf:99:a7:39:aa:63:27:74:
                    07:95:bc:6a:c3:72:2f:1a:11:b2:c7:d7:16:e8:92:
                    f3:d5:c0:e5:9e:df:33:b2:e4:4e:53:aa:57:cd:66:
                    b2:bf:34:cd:71:92:c8:3c:c9:67:84:51:dc:55:35:
                    37:4e:b5:31:76:b0:e9:77:10:e9:55:ac:de:c5:92:
                    7f:14:1d:1c:23:f8:be:1b:a3:f1:4d:58:b6:2d:78:
                    ef:c2:ea:eb:33:79:5d:77:80:70:75:ea:1e:2f:e5:
                    b6:23:87:97:1e:c3:87:6a:29:76:dd:d2:c6:d9:de:
                    ec:f2:e9:ab:b4:41:01:ac:9a:96:46:e6:f9:d7:a7:
                    d1:ce:5b:a0:83:f0:8c:f1:55:59:eb:ed:e0:5a:73:
                    79:d6:bf:e3:a1:7a:92:bb:05:80:01:49:d6:10:65:
                    81:f9:c2:b2:38:be:8a:13:07:ed:c9:4a:10:fb:06:
                    45:a0:51:80:ec:76:ce:bd:7f:3b:76:6e:6b:c7:48:
                    62:22:75:7e:34:ea:2c:83:19:99:60:16:df:d8:4c:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:98:1E:84:E9:60:92:8B:B1:9E:32:79:0A:7B:36:7C:29:44:BA:EB
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e31362e302f32302d3230203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:59:3d:79:a2:7f:f8:c8:04:45:ff:2d:bd:c4:0d:b3:5c:
         9c:6b:10:fa:d5:1b:7a:4a:de:32:d5:f6:eb:28:28:91:49:22:
         7e:4e:f7:ba:aa:f2:59:12:53:c2:22:a9:f8:4f:a6:4a:e0:f6:
         f0:e1:8d:9b:c0:cb:d6:1e:c6:ab:47:34:86:b1:7d:14:14:aa:
         e0:7f:47:4b:d6:ba:d1:fe:3d:d9:f7:6d:f0:44:1a:5a:67:1e:
         42:2d:cb:1c:b7:13:e7:13:81:0b:06:4e:35:a0:06:3c:cf:74:
         9f:30:5d:0a:bd:af:d0:70:2b:76:f5:f5:a9:cd:15:6d:22:7f:
         d9:2a:91:d3:73:e4:09:5f:41:01:7b:11:aa:7e:6c:80:02:cc:
         72:a2:0d:60:24:b2:b8:3c:0b:0c:53:2f:cc:74:2c:d4:9c:b2:
         4c:ab:27:38:39:c1:6a:cf:89:68:71:ca:8b:33:42:f6:a7:62:
         db:87:df:73:b9:1b:fe:46:cd:ec:d5:91:d5:38:ec:fa:e7:8e:
         3b:03:70:28:0f:a8:f8:bc:5d:1a:45:01:78:fe:17:95:62:9a:
         2e:29:2e:27:97:f9:95:7b:40:50:a1:71:06:de:4f:79:e3:0a:
         8b:a8:31:3e:0c:ee:af:e4:05:59:29:f2:58:4d:b8:62:40:b7:
         e7:5d:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:10 2026 by rpki-client