Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3134342e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3134342e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          R92AeGYL58RaZHffv42Ayb8CsGxIAe1tcprXnW0HL4w=
Subject key identifier:   47:1E:E4:47:7C:23:E4:78:AE:57:A4:C6:7D:86:0C:15:04:26:1F:CD
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       56B32F67649B6F2B1989F11357D328491D52FE3E
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3134342e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:12:41 +0000
ROA not before:           Fri 26 Jun 2026 04:07:41 +0000
ROA not after:            Fri 25 Jun 2027 04:12:41 +0000
asID:                     18118
IP address blocks:        219.72.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b3:2f:67:64:9b:6f:2b:19:89:f1:13:57:d3:28:49:1d:52:fe:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:07:41 2026 GMT
            Not After : Jun 25 04:12:41 2027 GMT
        Subject: CN=471EE4477C23E478AE57A4C67D860C1504261FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:5c:10:60:91:98:13:ca:96:da:4a:9e:fa:
                    88:3a:21:52:93:85:c1:5a:da:c2:31:7f:c2:77:04:
                    cc:2a:d2:c9:7b:9b:74:f1:05:c5:06:2e:b0:ab:5b:
                    38:02:70:4a:25:6a:ce:91:92:f3:7a:2c:dc:be:d0:
                    23:47:62:24:61:bc:d2:3c:72:4f:7f:7f:1f:10:da:
                    9d:7c:ca:a2:63:4c:91:23:07:03:f6:1b:7d:b5:64:
                    b0:63:af:45:a6:90:08:18:5d:90:d7:e0:67:53:31:
                    f8:83:6d:40:a3:17:d6:6c:81:6e:f1:1e:29:81:06:
                    2d:fd:8e:c3:a9:38:fd:b5:3c:d2:0f:74:46:32:21:
                    67:ca:58:a3:a7:7d:f5:d7:ef:f0:45:1d:08:a2:f5:
                    fb:41:cc:78:51:72:a3:67:f3:1d:87:05:b2:90:4e:
                    b8:ca:00:d2:5b:78:3c:e5:53:40:0e:50:38:7c:a3:
                    c1:09:9d:d0:95:97:24:ce:ef:5b:a2:d7:4f:71:25:
                    e1:b8:ae:d1:ac:8e:2e:aa:8b:ba:eb:f7:0f:fc:bb:
                    18:79:c7:d2:3f:a5:e1:82:d0:42:5a:13:a2:17:19:
                    b7:37:ab:c8:3f:3d:bf:25:ca:01:f1:91:a1:d1:2e:
                    34:ef:25:a6:ba:64:74:80:81:df:9f:08:92:42:b1:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:E4:47:7C:23:E4:78:AE:57:A4:C6:7D:86:0C:15:04:26:1F:CD
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3134342e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:da:ab:09:60:de:ee:59:e7:84:b9:9a:e1:43:38:47:47:
         4c:95:05:cb:ab:8d:28:eb:ce:55:ba:7c:6f:a1:3b:20:48:35:
         59:c2:75:6e:6c:c8:3d:53:62:d3:a6:0c:90:5a:2a:de:0a:e0:
         1b:ee:a2:f5:5f:6f:44:31:2e:2c:8b:20:21:7a:70:fe:d0:9e:
         5b:75:b8:1e:99:e4:b7:2f:ff:83:05:6f:dd:d5:74:50:35:ca:
         99:24:78:94:bf:ee:ba:10:dc:b1:1a:06:7e:c7:a5:29:3c:57:
         e5:a8:1f:64:23:04:14:d8:46:6a:38:59:dc:53:a6:8b:7f:cd:
         06:b6:9f:cf:ab:5e:d8:2e:ce:51:83:aa:3d:88:ec:57:49:f5:
         e4:81:9e:0e:95:be:85:e1:d0:3b:0a:08:00:63:f5:d8:c1:9e:
         4c:fe:0e:65:0a:43:35:96:69:f5:a6:71:aa:71:99:98:a5:e3:
         83:9e:86:59:fa:40:24:5f:34:55:23:c2:d4:0d:2f:05:85:0a:
         6c:cb:33:89:06:da:7e:52:13:3d:0b:ea:4d:f9:98:e9:f8:4a:
         32:23:97:f8:8e:66:4c:be:66:ff:bb:bc:54:a7:b2:d7:fa:48:
         3e:62:99:65:fe:3a:82:56:b1:a7:cd:52:f0:db:f2:d4:f9:fd:
         50:48:08:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:32 2026 by rpki-client