Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e3131302e302f32342d3234203d3e203138313138.roa
File:                     3132322e34382e3131302e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          jtYL+oJkaHOompiUDLo2Gra3ACXJ2e+37u57tLpdSxs=
Subject key identifier:   C7:EA:0B:90:65:85:AE:AD:BE:FD:62:BE:07:32:42:61:66:43:9F:59
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       0F957C5C4F6B93F6CBD0AA38B8CE84EAEC64356D
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e3131302e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:10 +0000
ROA not before:           Fri 26 Jun 2026 04:38:10 +0000
ROA not after:            Fri 25 Jun 2027 04:43:10 +0000
asID:                     18118
IP address blocks:        122.48.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:95:7c:5c:4f:6b:93:f6:cb:d0:aa:38:b8:ce:84:ea:ec:64:35:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:10 2026 GMT
            Not After : Jun 25 04:43:10 2027 GMT
        Subject: CN=C7EA0B906585AEADBEFD62BE0732426166439F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:38:65:4d:90:b8:69:20:3a:78:3c:ab:17:
                    3b:c3:cb:f2:c0:bb:fe:2c:87:a1:2e:4c:9e:e8:ca:
                    88:29:87:a2:fc:1b:18:b0:e8:4c:c6:98:66:a3:6b:
                    97:14:b8:e6:70:d7:d2:ba:3d:1c:32:06:c8:2d:ee:
                    ea:ff:7d:fb:07:ec:ea:f6:06:78:32:f5:4f:e5:86:
                    44:d0:e1:2f:a6:28:0d:5a:63:13:b0:07:99:fc:c1:
                    ce:2d:17:23:79:1e:d9:c3:0f:51:5d:0b:f1:0e:72:
                    30:0d:e4:0d:c1:5a:02:7f:e7:8b:c5:82:f0:e2:12:
                    94:26:d2:07:75:32:0b:e5:74:46:fe:b6:a1:28:a0:
                    9e:fd:45:84:78:64:73:f6:26:ff:9c:19:b5:d5:b1:
                    bf:e2:c3:8f:20:b2:c9:95:69:df:1f:7e:b0:d0:32:
                    4c:83:a2:70:fb:a3:2e:25:c2:e9:f6:0a:65:be:47:
                    73:f3:1d:05:a5:b0:ee:8f:71:36:f1:47:9f:8a:a9:
                    0b:3e:a8:fd:39:ac:d1:6d:8c:24:2c:17:3b:89:6c:
                    5b:c9:d4:00:85:d6:e8:13:81:b9:56:50:e3:a7:da:
                    21:a1:61:0a:4c:e0:f1:c3:3d:3a:5e:02:b9:1b:02:
                    d9:f5:c5:ab:57:70:5e:3e:bb:2b:f3:37:7c:aa:45:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EA:0B:90:65:85:AE:AD:BE:FD:62:BE:07:32:42:61:66:43:9F:59
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e3131302e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.48.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:a9:9b:8d:d4:b0:6d:66:0b:d2:61:75:c3:c7:f5:21:38:
         1f:11:31:08:23:d1:18:84:d7:ec:59:1d:f9:d9:7a:58:1f:aa:
         40:b6:8d:0e:f3:e0:96:7e:43:45:78:4e:4c:b1:83:35:ac:8a:
         47:55:32:04:57:00:81:d1:d9:b6:ff:0d:ae:fd:02:6b:5e:3d:
         47:ac:bf:40:d0:5d:fa:92:1f:f4:1c:2e:cf:fa:2e:23:62:97:
         7f:87:bc:33:72:a9:0e:6b:e8:ac:8f:45:ce:71:ad:79:b3:7b:
         86:8d:8d:1a:27:dd:aa:7f:41:f2:a2:fc:b5:b0:43:bb:62:7e:
         1f:6d:b0:26:b9:38:11:8d:c6:69:75:ee:c5:21:47:98:a9:1a:
         d0:61:7a:d3:08:a1:1a:80:a6:0c:fe:a0:6e:7b:dc:91:f9:32:
         72:da:63:d4:71:43:11:86:c5:7a:fa:70:5e:83:d3:e8:2d:ea:
         73:f5:85:d6:8e:c5:9f:0c:f6:23:9e:50:7f:5d:8e:29:90:45:
         48:17:29:35:7d:1c:a7:89:88:35:e4:30:20:eb:14:9f:66:c3:
         17:94:41:4a:1b:bc:11:c4:cc:54:b5:73:82:cb:f1:78:ca:00:
         e2:c5:d4:b2:6e:6a:6b:bd:75:0a:c7:ef:75:dc:9c:a1:56:9f:
         a8:bb:49:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:56:12 2026 by rpki-client