Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3232342e302f32302d3230203d3e203138313138.roa
File:                     3231392e37322e3232342e302f32302d3230203d3e203138313138.roa (raw, json)
Hash identifier:          NO1Apalct3Uq3ZQwyDb7NzBdWhbPTS97P2eTLnvUSh4=
Subject key identifier:   D9:98:42:25:67:47:B1:DD:C0:38:C5:72:A9:5F:D9:3D:BB:BF:CF:F6
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       7CA7362B8CED0DAF688449DEFF86B04DDAEFD438
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3232342e302f32302d3230203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:10 +0000
ROA not before:           Fri 26 Jun 2026 04:38:10 +0000
ROA not after:            Fri 25 Jun 2027 04:43:10 +0000
asID:                     18118
IP address blocks:        219.72.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a7:36:2b:8c:ed:0d:af:68:84:49:de:ff:86:b0:4d:da:ef:d4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:10 2026 GMT
            Not After : Jun 25 04:43:10 2027 GMT
        Subject: CN=D99842256747B1DDC038C572A95FD93DBBBFCFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:04:8f:67:69:12:63:a0:85:28:0e:d3:9d:
                    a7:e8:8b:96:93:66:26:f0:f8:f7:54:69:11:38:0d:
                    45:d2:34:0a:30:71:b4:78:40:59:05:3c:10:69:95:
                    36:61:45:0c:20:6a:55:72:1d:60:52:fc:7f:d3:6c:
                    fe:80:a5:3b:8a:dc:d2:b9:fd:3d:2a:81:60:e3:10:
                    32:12:a3:9d:3e:ca:cb:8c:73:6b:2f:20:e2:f2:06:
                    03:3d:23:9e:e9:aa:df:c3:97:00:07:07:62:a7:4e:
                    86:44:42:ca:2f:ae:df:9d:b5:b6:de:4a:f7:1c:bb:
                    07:94:c6:84:a7:50:11:42:0d:3a:7e:7c:69:0d:b4:
                    64:eb:47:9e:31:73:63:dd:f7:b6:89:c2:a6:70:14:
                    c9:9b:98:06:65:b9:48:d6:28:77:63:5e:a6:70:be:
                    d1:20:b0:c6:9b:de:df:d3:b2:b4:ef:7d:b2:23:b4:
                    31:e4:76:b3:d2:64:9e:00:3e:37:c0:ae:42:11:88:
                    65:20:bb:fb:3c:fe:e9:cf:9c:b3:a4:34:5e:8f:bc:
                    2e:48:a3:3a:0c:aa:b6:ff:db:b5:01:e8:63:1e:9b:
                    f1:a3:f2:99:28:a1:0c:7b:af:8d:6b:13:d5:c9:24:
                    c7:80:55:cf:d3:57:45:09:ad:18:fa:54:98:6b:c7:
                    07:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:42:25:67:47:B1:DD:C0:38:C5:72:A9:5F:D9:3D:BB:BF:CF:F6
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3232342e302f32302d3230203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:d5:2b:70:47:7b:a7:a7:70:6d:7b:07:c4:9a:8b:e4:85:
         27:50:c2:7a:3e:5c:91:92:de:e6:a7:96:85:2b:45:7c:a9:bd:
         cd:d2:5b:02:8d:62:d1:76:7f:10:2b:73:bb:8f:0d:bd:0f:65:
         83:27:c2:77:b3:ac:04:89:b5:d5:93:ca:d0:30:b8:ae:ce:ed:
         5a:2a:1f:c4:c1:83:b3:e0:81:7a:79:03:02:72:2e:7d:68:c0:
         63:6f:ba:5d:24:47:56:91:4a:89:68:93:83:e6:58:c7:72:01:
         0d:1d:d0:0a:5d:3a:c2:b7:aa:f4:63:a3:86:ca:d4:e2:aa:a6:
         38:0c:e4:51:db:7f:99:42:7b:7b:b1:02:57:c2:20:34:5e:9a:
         17:8b:49:06:d0:15:cc:63:be:20:df:57:8b:66:65:75:c1:aa:
         fe:bd:04:80:f2:4d:c0:c6:c8:b2:67:de:5b:7e:4b:65:12:c2:
         45:26:ed:20:8c:82:d0:52:85:8f:58:2c:b3:b3:e2:e9:ec:e1:
         5d:46:fe:09:24:6d:08:66:96:9b:6e:c6:59:26:af:ca:3b:a3:
         c8:7c:9a:a7:5b:f7:66:68:4b:82:fd:6c:7a:05:63:31:33:f8:
         87:94:d5:f7:5e:b3:2c:24:3f:8f:f3:f2:3f:8c:14:c1:09:40:
         e5:c4:20:fd
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUfKc2K4ztDa9ohEne/4awTdrv1DgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDM4MTBaFw0yNzA2MjUwNDQzMTBaMDMxMTAvBgNV
BAMTKEQ5OTg0MjI1Njc0N0IxRERDMDM4QzU3MkE5NUZEOTNEQkJCRkNGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBgSPZ2kSY6CFKA7Tnafoi5aT
Zibw+PdUaRE4DUXSNAowcbR4QFkFPBBplTZhRQwgalVyHWBS/H/TbP6ApTuK3NK5
/T0qgWDjEDISo50+ysuMc2svIOLyBgM9I57pqt/DlwAHB2KnToZEQsovrt+dtbbe
SvccuweUxoSnUBFCDTp+fGkNtGTrR54xc2Pd97aJwqZwFMmbmAZluUjWKHdjXqZw
vtEgsMab3t/TsrTvfbIjtDHkdrPSZJ4APjfArkIRiGUgu/s8/unPnLOkNF6PvC5I
ozoMqrb/27UB6GMem/Gj8pkooQx7r41rE9XJJMeAVc/TV0UJrRj6VJhrxwefAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU2ZhCJWdHsd3AOMVyqV/ZPbu/z/YwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz
MjJlMzIzMjM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBNtI4DANBgkqhkiG9w0BAQsFAAOCAQEAq+bVK3BHe6encG17B8Sai+SF
J1DCej5ckZLe5qeWhStFfKm9zdJbAo1i0XZ/ECtzu48NvQ9lgyfCd7OsBIm11ZPK
0DC4rs7tWiofxMGDs+CBenkDAnIufWjAY2+6XSRHVpFKiWiTg+ZYx3IBDR3QCl06
wreq9GOjhsrU4qqmOAzkUdt/mUJ7e7ECV8IgNF6aF4tJBtAVzGO+IN9Xi2ZldcGq
/r0EgPJNwMbIsmfeW35LZRLCRSbtIIyC0FKFj1gss7Pi6ezhXUb+CSRtCGaWm27G
WSavyjujyHyap1v3ZmhLgv1segVjMTP4h5TV916zLCQ/j/PyP4wUwQlA5cQg/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:12 2026 by rpki-client