Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234302e302f32332d3233203d3e203138313138.roa
File:                     3231392e37322e3234302e302f32332d3233203d3e203138313138.roa (raw, json)
Hash identifier:          FUmN2UEmnXOYKaQZ84vOkJnLSvOXZpIQGJ8txRxZPiU=
Subject key identifier:   6C:E0:A1:02:F2:36:29:24:0F:2E:AE:F1:52:BE:63:A8:9A:41:28:F5
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       11DE3C28D373643CA9F72063525FBE65A567D28A
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234302e302f32332d3233203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:43:12 +0000
ROA not before:           Fri 26 Jun 2026 04:38:12 +0000
ROA not after:            Fri 25 Jun 2027 04:43:12 +0000
asID:                     18118
IP address blocks:        219.72.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:de:3c:28:d3:73:64:3c:a9:f7:20:63:52:5f:be:65:a5:67:d2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:38:12 2026 GMT
            Not After : Jun 25 04:43:12 2027 GMT
        Subject: CN=6CE0A102F23629240F2EAEF152BE63A89A4128F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:25:cf:66:4e:95:e8:36:bd:50:f1:bd:4b:
                    eb:d7:ea:39:25:89:62:0d:28:5b:93:be:a4:a3:f4:
                    d4:48:95:4a:10:4d:1c:2b:9a:f0:f6:52:2d:99:de:
                    65:c3:b3:79:42:b9:98:3a:0e:1f:b0:5c:21:ce:0b:
                    fb:c5:af:c7:a4:f9:9f:ac:06:cf:6f:fb:43:7e:3d:
                    a7:38:0d:e5:ca:0a:03:e2:0b:06:6b:08:bc:fa:1d:
                    d9:f1:a4:90:7c:d9:fa:3d:6f:f6:45:bd:0b:f4:9d:
                    9f:07:65:23:7d:fc:95:0f:5d:1e:c4:72:59:92:5d:
                    47:bf:13:05:5e:10:da:44:bb:de:c6:70:c6:c4:01:
                    65:38:fa:6b:97:fd:43:29:f3:c2:7a:03:12:34:84:
                    5b:6a:f6:ac:46:95:ad:09:1d:8d:d6:fa:fe:ae:7f:
                    5e:66:ea:a0:61:3c:37:d7:20:6a:65:73:ee:5f:39:
                    b8:17:0c:3d:0e:75:0a:3c:c9:7b:63:2b:ce:6a:2f:
                    8b:6a:53:ab:b8:fd:88:5c:11:09:51:b4:91:62:c0:
                    f2:16:62:af:c4:26:7a:4a:e0:b6:7e:6f:08:28:a8:
                    c6:9f:59:c0:00:32:cc:d5:30:09:fd:2f:f5:68:71:
                    79:a2:79:72:10:58:3e:06:64:a1:6a:93:7c:38:97:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E0:A1:02:F2:36:29:24:0F:2E:AE:F1:52:BE:63:A8:9A:41:28:F5
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234302e302f32332d3233203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:bf:33:9d:79:5b:7d:dc:77:d4:72:7f:d2:02:ad:5e:69:
         7e:ca:82:1d:ba:3c:be:3f:95:26:40:ee:39:1a:00:98:33:06:
         d3:21:fb:a8:55:11:b4:19:10:20:b2:b4:fd:0c:05:a5:09:8a:
         05:05:fa:ba:15:92:42:ee:95:ed:14:dc:e8:48:fe:34:ef:af:
         dc:75:77:9a:4a:f2:0c:bc:c3:0d:e6:72:73:3f:e6:49:76:7a:
         a4:10:5f:4e:5e:25:39:f8:8b:ad:0f:5b:ae:59:37:e0:e3:4a:
         ff:85:05:79:ca:7a:fa:7e:9f:8f:16:a4:45:16:4b:20:33:80:
         4b:9c:27:63:23:0c:c4:ac:61:5f:b4:84:6d:74:5f:5c:33:eb:
         52:ba:ec:03:b2:7d:75:f8:0f:5b:c3:6e:d8:ae:c3:e2:ff:0d:
         f8:82:34:16:6d:64:ff:6b:86:4f:36:59:ce:f7:c0:ad:e6:a0:
         9f:2a:42:31:ce:c8:68:4b:0f:1d:99:85:6d:31:47:39:9c:f6:
         c2:ab:b6:4f:62:c8:82:25:f9:f9:0b:f1:29:5d:89:4d:51:9c:
         e1:c4:7a:ee:c7:a3:b1:87:2a:e9:3d:67:53:cf:99:81:9d:d8:
         97:03:1b:c6:d8:68:fb:7f:60:5c:a2:c5:c6:5f:a9:3e:d3:a2:
         ae:0b:30:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:32 2026 by rpki-client