Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e203138313138.roa
File:                     3132302e34372e33322e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier:          Rpifd9NHkgce8sfG/eABR4pMbXOUapkUm1Nhkxn3TU0=
Subject key identifier:   80:08:87:61:28:26:AC:5E:A1:2C:63:2C:BF:A2:64:33:30:A9:F4:F2
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       101EE7CE239525759FBE42BEC2A5707B51F45E63
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:11 +0000
ROA not before:           Fri 26 Jun 2026 04:38:11 +0000
ROA not after:            Fri 25 Jun 2027 04:43:11 +0000
asID:                     18118
IP address blocks:        120.47.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1e:e7:ce:23:95:25:75:9f:be:42:be:c2:a5:70:7b:51:f4:5e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:11 2026 GMT
            Not After : Jun 25 04:43:11 2027 GMT
        Subject: CN=800887612826AC5EA12C632CBFA2643330A9F4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:3a:0e:02:f1:9d:f6:c0:96:d1:04:0b:23:
                    9e:37:5e:69:aa:05:11:4e:17:0f:2f:3e:7d:63:0f:
                    ed:c3:30:7c:7d:36:7c:2a:28:6b:91:55:5a:63:96:
                    cd:39:53:7f:f2:ac:48:61:a7:14:41:f9:92:ac:65:
                    29:1b:57:51:7e:88:40:d2:04:20:1e:e4:45:2c:ab:
                    20:8c:d4:85:4c:7a:16:91:bf:df:0b:7b:9d:56:55:
                    c2:3b:61:8c:c0:6e:f9:a0:b4:02:83:0c:fe:85:7a:
                    fc:77:5c:6e:f4:77:e3:87:e3:8e:c3:44:c2:3c:16:
                    8c:a1:25:22:c0:8f:b0:34:4a:93:cb:33:c1:e2:83:
                    d1:22:bd:1c:f8:f4:97:3e:33:1c:37:02:b0:dd:a9:
                    dd:be:da:ea:7d:f6:ec:a3:82:34:72:ed:11:17:b8:
                    50:7c:a6:7e:99:f2:4c:09:63:19:a8:2c:f8:a5:cf:
                    43:91:74:76:4a:f5:8a:c2:78:a9:14:1a:42:8a:3b:
                    a2:ed:94:eb:31:a2:59:fc:54:29:7a:ab:a1:42:a6:
                    10:cf:b7:e0:a3:06:77:98:22:0b:92:43:0f:ff:d1:
                    69:b7:3f:7e:7e:6d:44:17:62:94:b7:ca:03:55:24:
                    03:27:88:8f:16:fc:3d:72:6a:59:98:3e:b3:f9:44:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:08:87:61:28:26:AC:5E:A1:2C:63:2C:BF:A2:64:33:30:A9:F4:F2
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:ce:da:2b:63:7e:86:23:7a:36:dc:f4:9f:de:2f:cf:d3:
         6e:3a:18:32:3d:02:96:3f:dd:86:53:30:cf:64:75:33:6d:56:
         41:59:c2:03:ff:9f:45:46:ca:b4:d6:f4:b2:31:8f:2e:60:d7:
         b5:9e:06:4d:a4:3a:09:77:af:e6:8a:c8:72:76:db:29:b5:b6:
         c7:39:21:47:4e:48:21:c4:a6:5e:cf:6f:aa:76:ac:10:01:7d:
         bb:ad:bd:f8:bc:88:1c:c7:76:b0:0f:72:ec:3b:14:ff:be:51:
         34:4d:57:3e:a0:71:e5:73:30:1f:73:eb:5b:b0:00:a3:25:a0:
         4e:a6:35:d4:0f:4c:d6:01:b9:79:50:78:33:2b:98:54:cf:86:
         6e:29:cf:4b:17:bf:1d:c7:ff:36:fd:42:bb:ba:c5:5f:01:c9:
         8c:33:b4:e6:c4:4a:1e:bb:90:4e:c6:9d:ba:50:ee:b5:df:7f:
         72:9d:8a:d5:a3:e8:8d:90:9f:49:1b:ec:f8:c1:63:0e:2e:86:
         b1:8d:e7:3b:3f:3f:f4:0c:cc:7d:f0:fb:9e:24:9b:a4:64:4a:
         7b:37:8b:3d:79:0b:a1:52:b0:7c:2b:ba:1a:0a:83:47:f9:3f:
         2c:bc:d0:65:6b:57:a6:4c:36:c5:27:65:0b:b1:27:bf:72:af:
         2e:41:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:40 2026 by rpki-client