Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e33322e302f31392d3139203d3e203138313138.roa
File:                     3132322e34382e33322e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier:          H0qb7NYEMaA36fVIUIfdPOEB8RXqJiCf6EjD3DU2VkE=
Subject key identifier:   D4:EF:83:CA:AE:B1:19:54:57:D0:0A:91:80:B0:54:9E:39:78:70:8D
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       32C98B33CA2BFF45C939450B2AC907ED9CC2992C
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e33322e302f31392d3139203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:11 +0000
ROA not before:           Fri 26 Jun 2026 04:38:11 +0000
ROA not after:            Fri 25 Jun 2027 04:43:11 +0000
asID:                     18118
IP address blocks:        122.48.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c9:8b:33:ca:2b:ff:45:c9:39:45:0b:2a:c9:07:ed:9c:c2:99:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:11 2026 GMT
            Not After : Jun 25 04:43:11 2027 GMT
        Subject: CN=D4EF83CAAEB1195457D00A9180B0549E3978708D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:96:74:c8:82:95:f7:7c:04:46:86:20:d8:
                    6a:35:0a:4b:2c:c3:73:0a:61:3e:aa:54:dc:f6:f4:
                    22:3e:f6:a7:f4:a2:bb:02:44:af:fe:3e:80:82:ab:
                    da:2c:83:8d:34:d3:4d:56:40:60:31:0e:16:0f:96:
                    86:7f:78:db:a5:47:50:73:ec:35:62:d4:56:c1:dc:
                    ad:65:19:37:26:80:71:4b:78:35:b8:32:ab:b6:2d:
                    e4:75:77:fd:2f:33:94:68:97:2f:de:2f:47:71:3d:
                    15:da:49:1c:d2:91:40:6e:74:38:d0:00:0a:b1:c6:
                    a1:fe:7c:31:a4:c3:b4:d8:f3:d2:f9:a4:66:58:e0:
                    7c:6f:c3:57:4b:05:43:4e:00:78:aa:e8:1a:fd:22:
                    c7:bc:91:e9:38:40:d8:3f:1b:90:ed:b8:1c:47:c8:
                    fa:ab:f6:59:18:60:70:6b:73:b5:aa:c5:32:e1:83:
                    0c:26:d3:8b:8b:94:bc:9e:c7:5f:f7:40:82:fe:5f:
                    ad:f3:59:ae:18:57:63:4e:30:f0:c6:1a:ee:99:ff:
                    41:cd:8b:8e:ec:16:2b:ba:08:b4:ee:e7:fd:08:86:
                    9b:36:0d:90:f8:9b:b0:17:3f:52:af:71:c4:e3:87:
                    fc:1f:7a:c4:be:3f:40:b2:7f:48:b9:7e:2c:34:ad:
                    9c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EF:83:CA:AE:B1:19:54:57:D0:0A:91:80:B0:54:9E:39:78:70:8D
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e33322e302f31392d3139203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.48.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:13:cc:1e:5b:02:70:7f:7d:dc:62:ab:a1:72:38:bc:3a:63:
         62:ac:92:9c:00:d0:ab:3e:37:e4:d2:30:41:c7:28:2d:8c:63:
         47:fb:43:ee:f5:2d:d6:e7:4a:6e:57:48:19:aa:ff:c6:86:3b:
         03:97:48:b8:eb:55:35:69:c6:87:53:60:57:d7:00:c2:d7:db:
         0e:8f:1b:08:a6:e3:ff:6d:63:e5:60:cf:25:fd:04:8f:c6:83:
         13:da:55:19:6b:d7:55:0b:e4:42:ed:6b:f5:ad:be:e0:42:a5:
         a1:37:1d:55:b5:ed:f9:46:aa:a3:f6:4e:64:a5:e1:ec:a6:a2:
         5d:07:34:7f:8f:3e:e7:f0:fe:c3:d6:23:e5:34:31:e4:42:e2:
         f6:27:e1:33:c0:46:ea:66:a2:2c:df:74:82:87:7f:74:83:12:
         39:c6:8b:34:bd:3c:3b:03:44:97:74:24:5a:95:2b:bd:85:cf:
         ef:3f:f7:3d:4d:b0:55:55:f3:59:cf:92:c8:c8:98:4f:4d:1d:
         27:0f:48:5d:5e:31:38:06:4e:99:33:c1:1b:0d:6d:eb:a3:70:
         1a:77:f7:a7:8a:b9:46:2a:42:23:d6:6b:f8:64:df:73:21:4b:
         06:ac:07:3b:b5:07:40:73:40:18:46:98:01:1d:44:31:d3:49:
         db:a0:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:33 2026 by rpki-client