Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e38302e302f32302d3230203d3e203138313138.roa
File:                     3132322e34382e38302e302f32302d3230203d3e203138313138.roa (raw, json)
Hash identifier:          FquzZwX4sevYuoDSeBmp0JXjU9H9GYtoyUiipvAhwVM=
Subject key identifier:   C1:06:AE:71:51:E4:5D:05:0F:99:EF:B7:FF:C7:86:BF:B3:91:95:B9
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4D83BE23CFEE317F72B01A5321B30DF169E60248
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e38302e302f32302d3230203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:11 +0000
ROA not before:           Fri 26 Jun 2026 04:38:11 +0000
ROA not after:            Fri 25 Jun 2027 04:43:11 +0000
asID:                     18118
IP address blocks:        122.48.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:83:be:23:cf:ee:31:7f:72:b0:1a:53:21:b3:0d:f1:69:e6:02:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:11 2026 GMT
            Not After : Jun 25 04:43:11 2027 GMT
        Subject: CN=C106AE7151E45D050F99EFB7FFC786BFB39195B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:5f:a9:ff:c8:3a:a7:a2:3c:26:ae:ae:be:
                    d3:47:0f:95:e7:35:33:f8:76:92:b8:0d:95:2a:78:
                    6d:22:24:8a:35:c2:83:9d:b8:a9:d2:c8:c9:64:a0:
                    e0:64:d0:b5:d3:97:a4:9d:4b:85:9a:33:23:6d:85:
                    07:4d:19:d7:b5:00:aa:8a:44:bf:31:b5:42:14:06:
                    09:d2:41:95:9f:2b:03:b0:a7:fb:52:e0:d7:22:4a:
                    f2:9e:b4:b4:13:14:73:39:5d:a6:c0:04:82:0a:96:
                    c6:d6:b0:8a:c2:64:03:5a:24:8f:af:a4:01:b5:b7:
                    4d:61:63:89:66:55:7e:9e:5e:4b:2e:fb:e1:5d:1f:
                    d6:76:39:d7:b3:b6:e9:7f:7b:45:99:22:ce:ff:28:
                    5e:e7:60:33:e9:89:dd:62:a4:72:13:c6:c9:3d:29:
                    a1:f6:8c:0e:6b:75:ca:18:7a:a6:66:cf:c1:dc:c1:
                    2b:9f:ef:88:dc:70:2a:8c:b5:4c:80:f4:f3:13:58:
                    2b:2a:4e:92:5f:32:60:2d:5d:01:cd:aa:ee:67:7a:
                    52:9d:d5:56:02:8c:8f:e5:b2:33:ed:8a:91:0a:27:
                    62:8a:77:bb:36:13:ac:a5:db:1f:fa:2c:44:f8:cf:
                    b0:6c:3f:2d:fc:82:00:0b:91:8c:da:ef:0d:dc:a8:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:AE:71:51:E4:5D:05:0F:99:EF:B7:FF:C7:86:BF:B3:91:95:B9
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e38302e302f32302d3230203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.48.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:90:0a:d3:f9:51:2b:77:b4:cb:a6:c9:02:a7:f9:de:b2:
         d2:a3:f5:7f:7d:21:37:91:32:ee:6c:c4:38:4f:73:87:17:2e:
         bc:28:a5:a2:41:97:6c:f7:65:cd:5b:dc:2c:6f:c2:7b:24:ec:
         9b:3c:88:0a:21:fc:fb:8c:b1:64:2e:4f:57:c0:37:07:a8:a2:
         b5:34:58:f3:8b:66:d0:e2:3c:29:81:08:d2:f5:cc:70:90:79:
         f4:c6:67:51:a4:52:d2:64:82:5b:10:a4:5a:d9:a2:b1:de:0e:
         6c:04:d3:23:83:dd:29:42:af:23:c0:33:9e:0f:7f:b5:57:8a:
         51:66:1b:38:16:32:03:df:92:b7:00:cb:fd:cd:15:f6:80:e2:
         b9:25:dc:16:33:fb:44:5a:85:e7:0f:3f:d5:78:ce:2d:57:44:
         79:60:0d:a2:6e:34:f3:95:5f:45:31:fc:68:0a:fb:92:12:a4:
         f5:31:76:e4:c3:8a:ed:62:e1:3c:78:16:35:9c:1b:c3:c1:6a:
         85:dc:27:7b:95:97:43:30:2b:50:65:f0:7f:3d:c5:4c:b4:a7:
         94:f8:4f:06:b0:33:99:d2:84:48:24:5a:d3:c0:8f:18:9b:bc:
         8f:80:02:8d:71:ff:09:6e:25:b1:7b:c1:29:96:b6:82:76:54:
         54:3c:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:01 2026 by rpki-client