Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31392d3139203d3e203138313138.roa
File:                     3132302e34372e302e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier:          OEQlk5tv9CObk4+9p4ceZb5bd2c9tP8jnns7PYMfniM=
Subject key identifier:   D2:E4:C4:4B:A5:E2:6A:6F:D4:DF:47:F7:A0:89:AF:94:48:42:4F:B3
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4BAB4E16AE5606A26F1ED3A270CA348DD035065F
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31392d3139203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:11 +0000
ROA not before:           Fri 26 Jun 2026 04:38:11 +0000
ROA not after:            Fri 25 Jun 2027 04:43:11 +0000
asID:                     18118
IP address blocks:        120.47.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ab:4e:16:ae:56:06:a2:6f:1e:d3:a2:70:ca:34:8d:d0:35:06:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:11 2026 GMT
            Not After : Jun 25 04:43:11 2027 GMT
        Subject: CN=D2E4C44BA5E26A6FD4DF47F7A089AF9448424FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:36:eb:6e:33:af:e2:77:d1:c8:32:27:f4:
                    0a:ca:40:84:92:4f:d7:0e:a6:bf:fd:da:53:8b:2b:
                    dc:dc:9a:66:45:9a:01:ed:c1:f2:17:3e:6c:63:51:
                    f7:63:89:ed:4f:75:13:c6:e8:4d:91:65:6f:f4:74:
                    65:7b:69:e1:9b:67:13:fe:10:c5:3a:38:da:56:26:
                    b3:2b:f5:d7:d7:02:7c:ca:1d:39:ef:ca:58:55:df:
                    6b:6c:25:e1:5c:c9:5d:c7:47:75:79:ba:81:c9:ba:
                    04:14:b2:8e:a3:b7:d9:db:2e:a1:b2:e2:99:fe:3a:
                    aa:ad:7a:43:93:03:ea:84:b8:6a:47:f9:86:bc:7b:
                    3b:cc:a2:d5:4b:9d:d4:8b:2d:01:9b:8f:68:85:ee:
                    82:18:ca:da:e1:f2:6b:cf:be:9c:81:b9:1d:e9:a4:
                    0b:52:7e:87:f8:3c:d2:c1:1e:a6:38:22:d8:66:84:
                    fc:b1:6a:fc:19:e5:e2:cf:37:e8:1f:fe:66:62:d8:
                    35:21:cb:ae:26:9e:11:14:10:d2:72:e0:bf:7c:2a:
                    ef:85:f0:14:94:ec:db:ba:e6:b9:2c:2f:11:f2:3c:
                    71:c4:dd:87:2f:99:85:93:b7:76:bb:25:cf:75:47:
                    a0:bf:13:76:8f:f9:71:a2:43:49:e2:11:56:53:4b:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:C4:4B:A5:E2:6A:6F:D4:DF:47:F7:A0:89:AF:94:48:42:4F:B3
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31392d3139203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:ff:b6:39:92:49:21:18:55:2e:58:35:3a:9a:a7:0d:88:dc:
         3e:7f:0f:bb:6e:8e:4d:5c:12:ef:2b:1f:eb:0e:74:3e:5d:e8:
         6b:9a:8a:eb:9a:6d:49:50:68:1c:62:58:d4:7c:b8:dc:84:c8:
         17:45:68:41:78:0a:e7:f7:99:69:55:18:8a:1e:05:00:6b:ea:
         7c:52:9e:45:4a:08:c2:a0:34:84:71:f9:5d:fa:a6:44:4c:65:
         9b:74:aa:f2:5d:91:64:2f:d7:7c:3e:4c:32:d7:0b:8f:8d:77:
         21:8f:ac:49:6a:5a:3a:53:6b:19:00:f6:b7:ac:1c:f1:9a:7e:
         27:3d:3f:5c:4c:9f:a9:93:f1:81:93:af:dd:10:24:bb:7e:62:
         5f:3f:97:36:51:4e:be:6d:99:dd:23:3a:e1:f7:4a:29:80:6a:
         6f:06:4d:67:49:52:8c:24:f0:de:2f:c7:34:5d:4e:10:7a:98:
         42:8b:13:7c:34:ae:cf:46:f2:31:34:a1:8e:42:da:b9:f6:f7:
         ed:4e:50:6a:8b:8d:11:a5:88:c7:c0:39:15:35:86:01:be:80:
         fe:b7:74:be:52:75:43:32:d6:de:a6:85:a8:7c:74:df:b2:87:
         df:06:f4:d7:94:75:c2:4d:10:d9:f8:6f:ff:8c:17:f3:86:d8:
         b5:97:c5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:10 2026 by rpki-client