Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3135362e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          M6aqwDB+CQg5ZVXn47kdyNpQR4Wi13pDmMGsFsiYt8U=
Subject key identifier:   46:54:35:4A:4D:30:BA:98:59:9F:28:60:87:77:DB:50:0D:5A:F7:2C
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       43806F27D5A66E41C5E47B52BCEE9AEA2EE3AD45
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:12:41 +0000
ROA not before:           Fri 26 Jun 2026 04:07:41 +0000
ROA not after:            Fri 25 Jun 2027 04:12:41 +0000
asID:                     18118
IP address blocks:        219.72.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:80:6f:27:d5:a6:6e:41:c5:e4:7b:52:bc:ee:9a:ea:2e:e3:ad:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:07:41 2026 GMT
            Not After : Jun 25 04:12:41 2027 GMT
        Subject: CN=4654354A4D30BA98599F28608777DB500D5AF72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:35:12:af:76:9d:5b:09:48:0a:b5:b1:ca:
                    42:85:00:94:33:ba:ca:8a:36:2b:ca:de:3c:26:34:
                    e0:bd:72:b3:93:fc:4d:52:de:d1:fe:0e:d8:8c:d7:
                    ea:7c:05:c4:41:6d:53:a6:c2:32:eb:94:ec:3f:19:
                    aa:18:99:6c:8f:2c:56:86:f8:fa:3b:0d:4c:e5:9a:
                    56:c8:8b:c8:8b:75:e2:e7:7b:64:cd:7c:50:80:eb:
                    06:d0:c2:27:c5:28:02:3e:da:3c:89:53:67:1d:6e:
                    01:a8:6c:b7:6a:a6:13:20:ec:c8:55:19:04:90:ab:
                    d2:7a:75:cd:79:87:e3:d4:9b:dd:bb:b0:df:39:fa:
                    87:9d:2b:ac:c9:77:97:f7:1b:cb:d9:ce:be:83:0b:
                    ce:f0:ff:93:f7:db:32:d7:be:74:e2:10:8f:21:8f:
                    c4:5e:51:35:ae:69:40:b8:8a:63:4e:39:5e:a0:c9:
                    e1:9f:b2:99:7e:05:a0:e8:6b:3b:60:d6:61:cf:4f:
                    3e:33:51:50:b1:7d:96:fb:98:12:81:3d:05:ba:19:
                    e3:74:7e:1c:36:41:a1:72:5d:23:44:95:85:25:e0:
                    33:db:42:d8:74:a2:2d:3f:e8:45:e9:31:a5:10:31:
                    6a:87:6d:f2:47:44:ae:27:54:9e:c5:7d:08:1b:9d:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:54:35:4A:4D:30:BA:98:59:9F:28:60:87:77:DB:50:0D:5A:F7:2C
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:3f:2a:b0:94:45:6c:1c:34:c8:ef:0e:c8:a6:55:8b:11:
         28:41:c7:93:e5:09:03:95:00:43:42:82:2f:9d:2c:ec:f4:51:
         a3:70:d0:7b:6b:5b:10:10:1c:58:34:9d:5d:7a:27:20:4b:91:
         df:f9:ce:fd:c9:3b:de:ab:1b:e3:e9:ee:19:bc:76:28:0f:c9:
         41:25:b8:0d:06:02:8b:03:b9:10:47:45:d5:89:ad:45:02:29:
         52:b2:ee:41:d8:24:3c:db:55:9e:06:70:1a:cd:b4:56:f9:d1:
         1a:41:18:37:e5:33:41:ed:a5:45:94:b0:e1:1e:d0:76:33:58:
         1f:19:fe:5b:45:85:68:f4:63:12:64:fe:d3:ae:6d:73:b1:ce:
         62:c9:fc:4c:73:12:fa:2f:7f:4a:6e:9d:58:f1:f2:6a:8b:cd:
         5f:25:47:a5:5a:1d:e9:59:d1:76:fe:a3:45:08:f8:be:44:00:
         03:10:fe:a1:35:fa:16:98:0d:6c:27:21:02:6f:e8:37:0e:be:
         64:63:30:33:46:ba:96:f4:53:1e:38:3c:85:35:2b:b5:14:98:
         c0:de:db:bc:67:2a:07:a1:0b:da:4c:79:41:da:a5:2f:1e:e9:
         4e:49:5d:96:f8:64:52:79:43:b3:ec:61:a0:47:60:d4:91:01:
         4a:23:23:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:28 2026 by rpki-client