Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232372e302f32342d3234203d3e203138313138.roa
File:                     3132302e34372e3232372e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          m/KBPjwNcjIwu56k9h61wT1p34SagqR8yVB8BHTYgvQ=
Subject key identifier:   AC:47:C0:92:0D:D8:55:B8:A7:96:0C:8D:EB:A9:0E:74:27:93:02:2E
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       45BB29115D6F3E5CD3E547E0E410959F429E28B1
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232372e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:09:53 +0000
ROA not before:           Fri 26 Jun 2026 04:04:53 +0000
ROA not after:            Fri 25 Jun 2027 04:09:53 +0000
asID:                     18118
IP address blocks:        120.47.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bb:29:11:5d:6f:3e:5c:d3:e5:47:e0:e4:10:95:9f:42:9e:28:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:04:53 2026 GMT
            Not After : Jun 25 04:09:53 2027 GMT
        Subject: CN=AC47C0920DD855B8A7960C8DEBA90E742793022E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:2e:ac:e2:52:a8:6a:a1:27:46:37:41:bd:
                    73:22:b2:4f:51:60:2c:22:db:aa:4d:8a:fa:d1:f0:
                    a6:1f:49:fc:7a:0d:c9:82:56:b8:31:a8:c0:c7:13:
                    bb:ae:03:a9:fd:a3:85:fb:1e:2a:19:b0:c1:ac:27:
                    82:7c:bd:88:27:0a:b1:2e:7e:30:b8:aa:3c:1b:8e:
                    88:61:fb:51:ba:b1:e7:18:2c:45:99:9f:68:ca:d4:
                    0d:8f:bd:85:13:88:44:b7:86:07:76:89:3b:68:f5:
                    ff:e0:a2:c9:09:56:52:2c:3d:58:4f:42:9f:5b:18:
                    48:c6:a8:da:fd:04:84:e9:13:f5:06:91:18:10:17:
                    5e:d3:a2:93:98:56:19:97:3c:54:ef:d0:7b:03:4a:
                    db:b8:11:7e:17:24:12:b1:ec:6d:87:41:de:26:e4:
                    32:e6:90:2c:be:60:97:c4:e0:ae:f1:0e:d1:45:f9:
                    d4:78:d0:23:56:ac:17:84:7e:be:d5:ca:5f:3d:1c:
                    e3:25:af:aa:e5:1b:3f:cb:73:a3:10:1c:58:8d:43:
                    f1:9d:0f:a7:31:e7:fe:ca:2e:2d:66:40:43:c1:c9:
                    2c:12:69:52:f9:b8:e2:b6:0c:6c:37:f9:d7:46:54:
                    25:57:1c:d2:b8:b2:15:3b:54:e7:79:76:b3:dc:7c:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:C0:92:0D:D8:55:B8:A7:96:0C:8D:EB:A9:0E:74:27:93:02:2E
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232372e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:50:74:c8:ee:ab:74:07:22:57:26:ee:d9:d2:86:34:b9:c8:
         f3:8e:6e:93:e3:ed:73:3a:db:83:7d:f5:2f:98:b5:93:c8:1a:
         46:87:14:ea:2a:eb:c2:63:6c:86:24:4d:47:db:32:e1:90:92:
         97:dc:ca:ab:c1:71:ad:e5:d8:1f:59:7a:00:44:c8:9a:99:54:
         5a:57:6b:d6:c9:2a:1f:c0:71:21:d8:24:5e:b1:89:fc:20:fa:
         02:2f:98:25:e2:22:b3:48:5f:f6:c7:93:fb:e3:e6:72:4e:7e:
         17:f1:d9:5c:85:58:82:22:53:34:c5:f0:8f:e7:49:13:06:71:
         36:f2:fd:aa:e6:77:a9:fa:27:c0:9c:a5:bd:65:f6:44:9f:e3:
         57:0d:4d:6b:46:b2:40:ee:66:fc:dd:b9:ff:ee:c1:e4:12:93:
         28:26:4e:fa:d3:5c:ca:64:37:41:68:62:b8:f8:64:48:ff:20:
         03:f9:17:fd:96:da:51:5a:ad:2c:ef:1d:8b:ed:39:4e:a0:70:
         52:12:91:ab:e0:76:6a:7f:48:e3:08:93:b6:36:f7:83:31:4a:
         81:82:87:eb:87:15:44:5a:ad:db:6d:e8:47:07:a8:13:ed:2e:
         fa:03:a0:09:34:4b:bc:69:61:92:e3:ea:57:94:70:02:53:be:
         d7:d9:5e:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:16 2026 by rpki-client