Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e34382e302f32302d3230203d3e203138313138.roa
File:                     3132302e34352e34382e302f32302d3230203d3e203138313138.roa (raw, json)
Hash identifier:          uzplUU+jUSDldeDz8yO/7sUqoEanWNhlsBRvrNttI9s=
Subject key identifier:   16:A4:BE:75:3E:1C:DB:E3:2F:9A:17:11:CB:A1:29:8C:5A:3C:DC:FD
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4EDBDE0571D1AAD6D05A46F40492C34F829F74D1
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e34382e302f32302d3230203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:09:54 +0000
ROA not before:           Fri 26 Jun 2026 04:04:54 +0000
ROA not after:            Fri 25 Jun 2027 04:09:54 +0000
asID:                     18118
IP address blocks:        120.45.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:db:de:05:71:d1:aa:d6:d0:5a:46:f4:04:92:c3:4f:82:9f:74:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:04:54 2026 GMT
            Not After : Jun 25 04:09:54 2027 GMT
        Subject: CN=16A4BE753E1CDBE32F9A1711CBA1298C5A3CDCFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:2d:63:78:c6:d9:f5:d0:51:0f:f7:17:a8:
                    f2:1c:5e:20:0c:d1:85:ee:83:26:59:b5:9e:8b:18:
                    7d:5b:f1:22:e5:09:33:af:2b:5f:91:a2:39:d7:7a:
                    5c:27:09:00:02:9e:74:69:08:c5:23:7a:dc:70:dd:
                    79:67:a2:3e:7e:44:df:87:69:67:1e:48:c9:74:8f:
                    38:ac:72:50:9c:a6:34:66:da:95:17:41:a3:73:42:
                    52:fc:e3:c7:23:5f:6f:6a:a9:ad:6f:dc:60:04:93:
                    15:0e:df:93:25:f4:b0:29:8a:dc:e7:c7:80:52:4a:
                    ae:85:c3:b6:c3:54:79:e3:2c:6a:4e:e9:fb:c1:aa:
                    7c:d5:4a:7f:04:eb:7e:5d:bf:47:ab:b7:15:36:ef:
                    33:d0:18:b4:4c:9b:7f:09:f5:c2:30:48:91:e6:97:
                    c2:5a:f3:c6:93:52:cc:63:e6:72:d6:86:59:4c:82:
                    5e:a6:11:a3:8d:5c:6b:8d:95:11:ab:76:6d:a7:18:
                    42:05:ed:07:2e:ba:67:b9:6b:12:1a:eb:9d:fa:1d:
                    ba:9d:78:2d:4d:9d:59:6d:f2:77:0c:93:79:c9:b6:
                    dd:d4:e2:34:19:48:63:82:13:30:19:45:5f:50:e6:
                    66:1c:56:68:8c:3d:02:1b:27:55:86:7d:94:fd:22:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A4:BE:75:3E:1C:DB:E3:2F:9A:17:11:CB:A1:29:8C:5A:3C:DC:FD
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e34382e302f32302d3230203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:10:3a:17:51:82:fd:a5:b3:6f:3f:af:ef:be:83:41:6c:
         df:34:b6:2a:92:6d:15:f0:6e:5e:41:f3:47:ed:13:fd:f3:a3:
         26:e5:98:b2:c2:de:36:ad:c5:fe:0c:7b:4c:1f:a8:a0:c6:4a:
         2c:7d:f3:5e:97:17:70:b0:d2:e2:80:c6:fe:53:65:62:b8:c3:
         61:54:c3:99:e9:01:b5:cb:32:98:dd:81:4a:b1:8c:c7:11:ff:
         ff:2b:ea:6c:90:00:36:92:77:9d:66:0a:35:4e:d3:36:f5:4d:
         7e:52:0a:ec:64:0b:c1:5f:91:3f:69:ec:49:e6:d1:23:41:50:
         79:21:08:13:f7:4d:51:59:1e:70:7d:48:e8:a1:a5:c2:b3:5d:
         a9:99:14:04:16:fd:dd:65:e7:59:aa:a9:b5:6e:51:be:b8:de:
         76:2a:13:a6:85:e9:35:e2:cd:1d:2e:08:a7:ad:61:5b:a0:67:
         20:ca:bd:94:8c:67:23:6b:4c:23:5d:75:5d:be:85:f0:02:62:
         77:a9:c7:90:df:83:9c:c2:9f:d0:34:e1:89:8c:50:88:18:6a:
         73:e6:c8:05:91:93:89:25:97:be:29:18:6e:e3:67:9e:ec:30:
         eb:a8:cc:e5:46:e0:bf:7a:75:f3:22:19:01:06:7f:d1:5f:a8:
         85:15:e2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:10 2026 by rpki-client