Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135352e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3135352e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          GyKbFFzXNYR7U3CrfzgGk8drcpAshgZ9A4Ypi5ACoCY=
Subject key identifier:   13:29:68:B4:3F:A8:DA:78:C1:EE:58:53:ED:82:6E:FE:44:3C:FD:4F
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       05806CB56F141327CEDD6B4BAD6DE9451D2C3829
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135352e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:17:30 +0000
ROA not before:           Fri 26 Jun 2026 04:12:30 +0000
ROA not after:            Fri 25 Jun 2027 04:17:30 +0000
asID:                     18118
IP address blocks:        219.72.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:80:6c:b5:6f:14:13:27:ce:dd:6b:4b:ad:6d:e9:45:1d:2c:38:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:12:30 2026 GMT
            Not After : Jun 25 04:17:30 2027 GMT
        Subject: CN=132968B43FA8DA78C1EE5853ED826EFE443CFD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:07:b6:5c:17:1d:63:04:a2:16:69:25:c2:
                    2b:22:24:a3:fb:dd:56:5b:00:c8:dd:05:c8:76:08:
                    46:16:e3:61:6c:30:e4:00:39:15:14:a5:f1:19:22:
                    4b:0e:a0:3d:33:e2:3d:77:e3:1d:69:64:44:04:c1:
                    dc:f5:7f:fe:e6:47:f9:84:ea:98:53:f5:7a:74:09:
                    6d:0f:75:65:44:71:b1:65:04:f1:9d:8f:df:44:34:
                    79:09:3d:d9:bf:fa:f5:06:61:f6:b3:c1:31:93:87:
                    53:d0:1a:16:52:40:3e:d6:72:64:b3:64:ab:80:64:
                    c1:0b:8b:90:99:e3:81:0a:17:9e:17:1e:05:51:de:
                    69:29:3a:dd:1e:ea:30:74:b6:9e:7c:5d:e4:93:62:
                    f3:3b:c6:e2:5b:a7:1b:b1:71:ed:d9:41:8f:6b:0f:
                    91:96:9f:21:00:91:9c:61:b2:bd:c7:be:de:bf:d8:
                    6d:01:33:0d:89:2d:49:15:90:66:37:92:5d:6f:7d:
                    1f:b6:69:55:56:2f:b5:17:5d:2c:4f:88:f7:c9:2e:
                    54:b4:27:87:0f:14:f1:1b:ff:ca:02:d8:81:9a:71:
                    33:9a:01:9b:45:b9:75:5a:8e:6e:18:59:32:d1:5c:
                    be:3d:8c:43:63:1c:2c:53:ee:ae:75:6e:5f:3a:d2:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:68:B4:3F:A8:DA:78:C1:EE:58:53:ED:82:6E:FE:44:3C:FD:4F
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135352e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:6c:98:b6:73:32:b8:27:5a:a8:a8:7b:78:28:e8:63:d0:
         2f:5e:96:3b:41:5d:b0:5a:b2:bc:6c:5f:67:34:61:d7:7a:1a:
         c9:17:82:45:71:84:a7:d8:8f:07:49:e8:f1:d0:9e:95:11:0b:
         b5:6f:cc:94:9a:db:0a:f0:4a:3c:ea:b7:4d:a9:6c:79:d6:e0:
         f5:c1:37:3f:43:8d:a2:bb:98:60:40:c5:de:d1:d6:bc:37:62:
         ff:08:36:5e:e6:93:65:e4:18:42:48:8d:c2:95:88:70:0a:7f:
         e2:6a:e0:b4:d2:43:46:79:23:87:0b:d2:72:85:72:67:a5:25:
         09:66:9a:cd:3f:c6:54:6f:6f:7a:ac:bf:ac:ba:88:c8:1d:4f:
         c0:d8:ab:30:e9:b4:4b:4a:c1:b5:24:7a:ed:67:d9:48:7f:b5:
         18:9b:f3:8a:eb:0b:1a:36:d2:1c:ff:36:f6:6f:54:38:e7:7d:
         f9:aa:7d:3a:47:ed:bd:bb:3a:fb:06:03:49:79:03:04:59:0f:
         3f:a2:27:5d:a2:e1:4e:6e:3c:91:ca:00:ba:23:41:54:2e:1d:
         64:73:27:40:ba:87:8b:ec:47:79:17:36:43:9b:67:de:17:0b:
         66:d3:7c:d8:0c:ee:5c:87:57:64:ab:d5:a6:2d:74:55:54:11:
         ee:fd:8b:5c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUBYBstW8UEyfO3WtLrW3pRR0sOCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDEyMzBaFw0yNzA2MjUwNDE3MzBaMDMxMTAvBgNV
BAMTKDEzMjk2OEI0M0ZBOERBNzhDMUVFNTg1M0VEODI2RUZFNDQzQ0ZENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWqAe2XBcdYwSiFmklwisiJKP7
3VZbAMjdBch2CEYW42FsMOQAORUUpfEZIksOoD0z4j134x1pZEQEwdz1f/7mR/mE
6phT9Xp0CW0PdWVEcbFlBPGdj99ENHkJPdm/+vUGYfazwTGTh1PQGhZSQD7WcmSz
ZKuAZMELi5CZ44EKF54XHgVR3mkpOt0e6jB0tp58XeSTYvM7xuJbpxuxce3ZQY9r
D5GWnyEAkZxhsr3Hvt6/2G0BMw2JLUkVkGY3kl1vfR+2aVVWL7UXXSxPiPfJLlS0
J4cPFPEb/8oC2IGacTOaAZtFuXVajm4YWTLRXL49jENjHCxT7q51bl860n3rAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUEylotD+o2njB7lhT7YJu/kQ8/U8wHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz
MjJlMzEzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANtImzANBgkqhkiG9w0BAQsFAAOCAQEAEwpsmLZzMrgnWqioe3go6GPQ
L16WO0FdsFqyvGxfZzRh13oayReCRXGEp9iPB0no8dCelRELtW/MlJrbCvBKPOq3
Talsedbg9cE3P0ONoruYYEDF3tHWvDdi/wg2XuaTZeQYQkiNwpWIcAp/4mrgtNJD
RnkjhwvScoVyZ6UlCWaazT/GVG9veqy/rLqIyB1PwNirMOm0S0rBtSR67WfZSH+1
GJvziusLGjbSHP829m9UOOd9+ap9Okftvbs6+wYDSXkDBFkPP6InXaLhTm48kcoA
uiNBVC4dZHMnQLqHi+xHeRc2Q5tn3hcLZtN82AzuXIdXZKvVpi10VVQR7v2LXA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:32 2026 by rpki-client