Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3234312e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          IXT29GXQS2EVLdbKgFr5ET7G4IgQSP9aN7whoh7Ge1c=
Subject key identifier:   28:E3:6B:DB:DC:06:21:F0:AB:B3:BD:76:7C:81:DE:C9:3A:DC:0A:03
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       320C07FC6D839035C2A34D97EC0BEA12CFA8C05F
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:12:41 +0000
ROA not before:           Fri 26 Jun 2026 04:07:41 +0000
ROA not after:            Fri 25 Jun 2027 04:12:41 +0000
asID:                     18118
IP address blocks:        219.72.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0c:07:fc:6d:83:90:35:c2:a3:4d:97:ec:0b:ea:12:cf:a8:c0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:07:41 2026 GMT
            Not After : Jun 25 04:12:41 2027 GMT
        Subject: CN=28E36BDBDC0621F0ABB3BD767C81DEC93ADC0A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0c:fa:6d:e8:f2:7e:83:e2:3c:b4:25:33:e0:
                    65:62:84:44:f3:3b:1a:7d:98:be:c3:73:4f:91:77:
                    3f:70:6c:e2:73:1c:25:af:a3:2d:1d:fa:61:7f:77:
                    5b:d6:5b:e5:f9:ea:cc:be:5f:53:ff:90:1b:50:a2:
                    af:9a:28:d0:f1:e8:8f:98:64:06:09:af:7b:6a:b3:
                    5e:d7:5b:fa:65:43:71:7f:a9:5f:56:2c:c5:2c:8e:
                    56:c4:20:7f:48:21:c3:ae:b8:84:e5:5e:2f:fa:13:
                    f3:68:e5:1e:5a:ed:51:af:2f:94:4b:58:81:2a:1a:
                    78:90:92:e0:18:cc:11:39:0e:8c:b9:3d:9c:4b:80:
                    d8:dc:66:bc:67:33:df:f7:f7:65:f6:34:43:51:0f:
                    3d:df:ef:1c:94:f7:12:0b:f3:ee:c8:ea:fd:35:b9:
                    af:26:30:51:bc:c4:e1:22:f7:c6:fa:8d:4f:7e:68:
                    a3:de:db:67:68:a0:c9:05:32:c7:e1:01:44:a1:f3:
                    b0:c1:41:c2:64:9b:82:43:85:f3:16:fc:a6:63:eb:
                    04:14:89:c4:58:68:d1:4e:47:51:39:1a:22:5e:9a:
                    87:12:8e:42:b5:64:68:99:cb:17:2b:f0:aa:ed:5a:
                    a1:dd:7f:93:83:c2:7b:73:11:4d:76:d7:3f:be:71:
                    73:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:6B:DB:DC:06:21:F0:AB:B3:BD:76:7C:81:DE:C9:3A:DC:0A:03
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:85:af:9e:0d:b9:dd:66:e6:b3:89:a2:1c:c9:9c:83:bd:29:
         b2:48:87:bc:7a:16:9c:8e:19:12:d9:07:25:5f:85:ad:80:24:
         60:7e:99:2e:cb:d6:60:06:85:f4:0d:ce:03:db:d0:c5:1e:2a:
         0e:70:61:da:f6:ff:c0:c4:37:87:e0:e9:49:5f:40:d8:ab:37:
         ad:2b:58:a0:65:07:e9:44:7c:e6:cc:1c:03:26:4e:c8:59:4a:
         60:c8:20:6e:a6:27:af:a7:c5:d1:ec:bd:b4:08:66:92:d6:95:
         2b:98:22:d2:3f:df:db:15:3b:ee:ef:6b:03:e9:7c:bd:13:19:
         a2:df:9a:cb:17:1a:63:7d:c4:4b:c0:33:e7:1c:15:c3:73:99:
         58:20:6d:7b:cc:71:e3:d2:23:e9:1e:ee:08:22:f1:be:58:48:
         2b:c6:81:3a:af:8e:d1:65:df:7f:45:45:fd:08:09:ea:ae:d9:
         60:a6:d7:9c:70:12:54:5f:29:a9:69:64:1a:e9:b6:74:e2:a3:
         8f:f4:7b:74:7d:39:60:8a:96:09:22:50:ef:99:c2:4a:ff:8c:
         9c:fa:e8:fc:cc:3c:e4:89:4c:34:fe:48:54:e1:3b:90:a5:37:
         30:16:03:d4:51:05:e9:c1:21:79:2e:70:9e:36:79:85:c7:14:
         98:2e:f1:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:46 2026 by rpki-client