Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e203138313138.roa
File:                     3132302e34372e39362e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier:          PN9RoPaPB5o3c5cXb33JZWXH4e3xX7U9Nglz69qQPQ4=
Subject key identifier:   8F:D3:39:A2:BC:92:A8:DD:C0:65:37:F2:DA:46:91:2E:D6:B7:8C:88
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       17260F6A409B7B9227846B0C5C80C6D3054DCA63
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:11 +0000
ROA not before:           Fri 26 Jun 2026 04:38:11 +0000
ROA not after:            Fri 25 Jun 2027 04:43:11 +0000
asID:                     18118
IP address blocks:        120.47.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:26:0f:6a:40:9b:7b:92:27:84:6b:0c:5c:80:c6:d3:05:4d:ca:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:11 2026 GMT
            Not After : Jun 25 04:43:11 2027 GMT
        Subject: CN=8FD339A2BC92A8DDC06537F2DA46912ED6B78C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:15:75:40:a0:6f:8e:2d:58:25:ba:c6:52:c6:
                    25:63:1a:df:45:b0:25:7d:26:a6:23:e8:d0:26:77:
                    01:52:92:0f:a4:a1:9b:13:ab:ea:e6:d7:bd:76:8f:
                    4d:cf:fe:f6:aa:3f:fe:b0:75:2f:d9:ae:50:56:b4:
                    c2:3b:45:18:6e:1f:52:69:56:42:8e:ae:79:20:b7:
                    c9:4c:75:fb:64:90:52:f7:1f:c7:2a:7e:a0:79:3f:
                    62:10:ed:f2:b0:09:f8:06:48:54:05:11:25:31:1c:
                    2d:28:99:8b:63:94:de:63:99:5f:eb:90:b7:70:9b:
                    d5:12:af:27:e1:0d:63:8a:20:46:77:ba:e7:d0:fa:
                    69:55:07:06:44:76:09:c7:f8:c8:f0:2e:77:cd:7e:
                    30:3c:cc:e5:fe:70:2a:27:5c:e5:13:5d:f3:1a:28:
                    cd:6f:33:90:b8:23:b7:c2:4a:04:e6:b6:34:c3:80:
                    55:b4:14:c0:84:4c:22:61:10:ce:b6:0a:82:b8:42:
                    41:09:25:5b:a5:6e:73:ba:06:5f:c7:bb:c1:a6:0e:
                    e0:e4:76:8e:88:cd:1f:6b:fd:f2:9c:37:68:78:8e:
                    70:86:ae:d3:ff:28:76:3a:a5:1e:1a:b5:96:a6:22:
                    93:30:92:77:d6:94:22:a4:a8:51:2e:64:b1:80:4d:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:39:A2:BC:92:A8:DD:C0:65:37:F2:DA:46:91:2E:D6:B7:8C:88
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c1:f2:b5:9a:69:06:b4:3b:13:32:5a:cd:f0:2e:24:1e:f9:85:
         a2:f9:45:74:ec:3f:80:66:d9:8a:26:b7:69:b8:61:a6:a0:42:
         c1:c1:0a:37:ee:99:9f:74:c8:de:c1:10:91:ff:03:09:04:4f:
         78:c7:f1:0d:7c:5d:68:dc:2d:f6:e1:fa:cc:3f:00:3f:fb:ef:
         a5:b5:ff:2e:d6:4e:72:79:c2:e0:5e:18:5b:aa:1e:93:46:44:
         7b:0b:c5:df:6a:67:00:04:c0:81:71:0b:13:d4:a7:ef:12:5f:
         b6:03:e7:bb:5d:9c:01:7e:1f:11:bc:f1:7f:62:54:9a:a7:14:
         9c:d0:f9:c5:c7:38:52:ef:61:0e:26:85:e1:fa:03:c7:da:43:
         b8:ab:f5:61:d0:24:79:6c:4f:47:af:8e:a8:a0:c2:e2:ee:44:
         02:66:40:ee:ef:17:03:cf:0f:34:6c:a1:a6:15:b7:e3:e8:a0:
         63:e8:f7:e9:90:b8:ec:08:fd:33:6a:c0:8c:60:0f:2b:44:dd:
         dc:bc:4e:fc:3c:74:25:1f:e8:e9:10:9a:72:d5:94:11:1f:cf:
         be:05:72:d4:5f:9b:46:af:2f:39:66:ac:7e:88:fe:6e:4b:96:
         40:31:e5:cd:18:e5:14:a1:b8:c9:e6:3d:1d:3c:5e:ea:95:fc:
         ac:57:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:46 2026 by rpki-client