Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135332e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3135332e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          e9ThMRFqEpPfPdUOio0KrPUVzYWzCf2SjsVKGnpbCho=
Subject key identifier:   AF:ED:60:D5:D7:E1:EE:CA:5A:E8:5B:92:F9:CE:D1:64:50:DE:9B:89
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       248999B5EF634D821007159A9D81777E576AADF4
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135332e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:12:41 +0000
ROA not before:           Fri 26 Jun 2026 04:07:41 +0000
ROA not after:            Fri 25 Jun 2027 04:12:41 +0000
asID:                     18118
IP address blocks:        219.72.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:89:99:b5:ef:63:4d:82:10:07:15:9a:9d:81:77:7e:57:6a:ad:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:07:41 2026 GMT
            Not After : Jun 25 04:12:41 2027 GMT
        Subject: CN=AFED60D5D7E1EECA5AE85B92F9CED16450DE9B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:f1:35:3b:dd:31:71:9e:80:4c:77:f8:19:
                    22:0f:b8:32:9f:d6:b4:79:f0:51:89:88:c6:69:86:
                    79:6e:34:a3:e0:47:cc:92:39:fa:64:e6:ee:b2:64:
                    f8:75:b6:c6:d6:e0:02:f3:c0:70:e1:f4:4f:60:0b:
                    bd:bb:ca:c9:ff:90:a9:40:f9:db:c3:d1:ca:29:2f:
                    4b:23:ed:b1:04:ad:fa:f0:32:73:c2:dd:7d:39:ac:
                    75:f0:5e:77:b8:44:a8:6f:c4:09:45:2d:7f:e3:6c:
                    54:89:cf:b2:01:aa:2d:80:41:d2:f0:e0:f1:ee:bd:
                    49:e3:a8:ea:41:eb:d3:ca:fb:3d:b9:1b:94:5f:38:
                    77:86:21:ed:dc:c1:a3:3a:85:22:4d:76:5f:f7:f2:
                    fb:c4:f7:0e:d5:65:33:1b:88:f5:9c:7f:6f:01:36:
                    7d:9b:d9:e3:eb:f9:b4:53:f8:ca:a5:fa:9a:34:bb:
                    6c:55:a1:b1:06:b8:30:f0:10:0c:b7:af:46:88:f9:
                    05:38:e0:ec:d1:04:f5:43:3f:20:30:c2:2c:3d:7c:
                    35:29:31:bc:72:f0:f2:e5:2f:0d:67:10:75:07:d2:
                    12:37:3f:2d:54:90:16:49:c1:39:ed:17:84:a0:ef:
                    1a:64:66:22:bf:66:ca:f7:40:73:50:cf:18:e6:ce:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:60:D5:D7:E1:EE:CA:5A:E8:5B:92:F9:CE:D1:64:50:DE:9B:89
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135332e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:47:1c:3d:78:e1:84:34:3a:0d:c6:15:71:c0:53:a0:b2:
         88:0a:27:34:27:1c:23:c0:d7:53:e7:06:e5:64:85:0a:e6:9e:
         4a:c8:b9:5d:ad:4a:7d:02:d8:7b:4c:4d:97:eb:03:f7:37:66:
         2f:f7:08:4c:e3:b0:22:53:2a:f9:56:24:ef:cd:9b:29:38:02:
         e4:79:72:30:f5:84:2f:18:bc:fb:d0:0e:aa:5a:36:4c:06:88:
         e6:91:d3:58:b7:86:3b:4f:46:b0:c7:52:e4:a2:e3:e1:0f:80:
         66:35:13:9d:5c:b5:f3:0c:86:c9:66:13:e7:93:69:d2:e8:bd:
         e3:60:50:5a:d8:e7:6c:8d:80:8a:77:b9:9c:19:db:19:a3:d5:
         d4:7b:18:4d:07:06:0b:e1:cb:cb:46:46:c4:c0:42:c0:da:2c:
         50:78:3b:bc:1e:96:33:b1:e7:96:41:0e:f1:d6:6f:11:6b:d7:
         5e:e7:e0:0c:f9:b5:c8:85:63:c9:86:ec:3d:a0:21:80:9c:72:
         65:cc:6b:93:2a:8b:81:ac:2d:21:31:68:c3:2d:cf:fc:5b:a9:
         2d:96:a5:74:50:64:57:5a:43:1c:d6:d2:73:fb:ab:71:df:2c:
         b6:44:6b:1b:38:31:87:8f:27:a5:22:87:5d:d8:ac:11:cf:11:
         79:7f:06:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:31 2026 by rpki-client