Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3135322e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          l8Y3W0AGgFJzO3UokDmZofP8PqteXFVyr2ynYlbHJdc=
Subject key identifier:   BE:E4:A5:BD:1A:CF:52:6C:56:BE:89:39:AB:8D:63:D2:5B:78:00:5A
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       19C558D36E067EF75DD2CE17FE2103BD673AB6B4
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:12:41 +0000
ROA not before:           Fri 26 Jun 2026 04:07:41 +0000
ROA not after:            Fri 25 Jun 2027 04:12:41 +0000
asID:                     18118
IP address blocks:        219.72.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c5:58:d3:6e:06:7e:f7:5d:d2:ce:17:fe:21:03:bd:67:3a:b6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:07:41 2026 GMT
            Not After : Jun 25 04:12:41 2027 GMT
        Subject: CN=BEE4A5BD1ACF526C56BE8939AB8D63D25B78005A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:58:ad:7c:49:99:16:31:66:7c:18:d9:6e:
                    ba:34:c8:46:ee:b9:0a:a2:3f:c9:d9:c3:05:df:32:
                    3c:7e:a7:47:a7:ca:e0:49:bd:fd:70:16:1e:ef:62:
                    5a:29:e8:20:59:3c:79:a2:a4:26:e0:3a:50:0c:1e:
                    04:6f:00:7a:4d:b1:29:61:05:2b:59:ed:12:40:68:
                    18:fd:31:32:44:13:93:58:94:ea:05:2a:b7:64:a7:
                    ea:41:6e:b7:6e:45:e6:b5:43:88:48:6c:56:8a:a9:
                    ab:b7:8b:58:72:07:1a:b9:44:f8:fe:7f:8e:a6:e0:
                    88:6d:12:fe:a8:91:ac:b9:a7:48:fe:b6:92:be:e9:
                    0c:7a:7a:32:76:80:70:cc:73:9f:e0:0b:b2:73:05:
                    c7:bd:87:8d:82:e8:bc:f4:17:3a:d2:0b:10:4d:47:
                    95:39:b6:c0:1a:19:c3:3b:90:4d:11:59:8d:b5:3a:
                    ed:0d:71:cd:fa:56:2d:19:66:ac:7b:2d:48:f8:13:
                    71:f3:19:cb:3a:18:0f:45:7d:05:bd:a3:bc:60:6a:
                    9b:e0:74:bb:99:7b:eb:75:26:40:2c:75:a7:08:f4:
                    8e:74:aa:0b:99:89:7a:76:d2:0c:80:f9:4a:96:28:
                    bd:70:d5:cb:f1:28:56:42:fb:37:78:ea:d8:f9:37:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E4:A5:BD:1A:CF:52:6C:56:BE:89:39:AB:8D:63:D2:5B:78:00:5A
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:82:1f:d5:c3:da:86:25:93:60:83:9d:e4:5a:11:4e:fd:3e:
         e5:ca:c2:a6:3a:94:49:16:f9:b2:b2:b8:4d:f1:8d:db:9d:b6:
         0d:dc:91:dd:8e:68:ae:e9:4d:db:c0:2e:94:d0:e7:3a:e1:99:
         e1:b8:06:61:45:7d:97:4e:55:61:a9:99:b5:82:a4:41:07:38:
         ff:5d:6e:e1:99:7b:62:15:a2:1d:bf:91:e4:15:28:61:74:d7:
         48:d5:17:23:38:63:04:4d:45:d8:91:34:bf:b2:bc:79:32:59:
         8f:49:21:8a:cd:37:c0:16:bf:53:e3:fe:49:c2:f3:b1:ee:09:
         7d:3f:62:b0:d1:9f:59:21:7a:0e:3f:93:7d:6a:96:20:da:fe:
         30:34:89:35:74:95:13:ce:81:d9:0e:50:d1:78:96:f4:3e:1b:
         03:21:aa:85:b6:e4:41:d4:c2:15:aa:c7:6d:6c:f3:3b:58:48:
         f5:3d:ed:7a:72:61:c4:73:7d:70:25:0a:81:59:41:0c:be:5a:
         f4:95:a8:1f:bd:4a:ed:42:d0:b1:bb:4e:ea:83:11:88:51:d9:
         03:c5:43:90:d9:0d:bb:34:99:27:ab:ef:f3:1b:10:a6:d0:cf:
         45:82:97:52:e5:cb:65:df:30:c1:0f:ba:bd:ee:bc:cf:62:1e:
         d3:10:16:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:33 2026 by rpki-client