Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203138313138.roa
File:                     3231392e37322e3235302e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier:          6gEE4XIBC7FpGNQk1Xx5/pqqgVg1IQI3xTUqe7c4J2A=
Subject key identifier:   D2:B9:39:22:51:26:C7:C1:53:D3:2F:A8:BD:40:17:EF:C2:0F:93:2A
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4B319111ACCDFD4256FAF76134C62755B82BE199
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:12:41 +0000
ROA not before:           Fri 26 Jun 2026 04:07:41 +0000
ROA not after:            Fri 25 Jun 2027 04:12:41 +0000
asID:                     18118
IP address blocks:        219.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:31:91:11:ac:cd:fd:42:56:fa:f7:61:34:c6:27:55:b8:2b:e1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:07:41 2026 GMT
            Not After : Jun 25 04:12:41 2027 GMT
        Subject: CN=D2B939225126C7C153D32FA8BD4017EFC20F932A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:01:a2:1e:14:ab:e0:13:d7:01:59:0d:99:
                    98:94:3b:38:f0:72:e1:39:f3:dc:da:e7:3c:b1:d8:
                    c7:79:a1:ed:81:08:01:59:b2:b4:63:3e:7b:27:b9:
                    5e:29:78:d5:8f:92:52:97:3a:55:4f:35:8a:5a:74:
                    16:af:b6:f8:a4:86:a0:99:1e:59:1b:4b:20:a3:92:
                    60:09:ce:3e:ab:af:f6:44:14:f0:0b:84:05:bd:b4:
                    2d:0b:4b:cc:b0:75:28:43:b8:8a:b7:b6:94:fc:7e:
                    18:92:92:3f:7e:57:fd:82:c0:5a:4a:33:6b:4f:e2:
                    64:55:cb:b0:8a:87:a6:fe:76:4b:2c:47:ed:e6:1d:
                    7f:63:60:d9:2a:10:2f:4f:4b:44:de:d0:9f:5e:0d:
                    a2:8e:f1:db:f7:cf:0a:85:19:21:d9:8d:d1:6a:49:
                    2a:7b:ae:b7:d9:e9:96:dd:f9:ff:96:5d:61:e2:70:
                    23:75:a3:ed:74:16:82:62:7e:a9:b9:25:48:cf:c4:
                    36:22:56:46:a3:45:a5:7b:a2:27:21:ad:3a:04:3c:
                    93:22:02:a3:62:a7:af:f0:15:9d:54:25:34:53:81:
                    b6:73:1f:20:99:e7:fe:03:09:c7:d2:d5:8a:ec:fd:
                    8f:5e:68:f0:a0:87:e7:7f:a3:d8:d7:10:26:4a:e8:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B9:39:22:51:26:C7:C1:53:D3:2F:A8:BD:40:17:EF:C2:0F:93:2A
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:9d:4e:5c:58:66:97:46:0c:ad:3a:96:19:95:8d:d0:cb:b2:
         56:a5:d1:84:56:f5:c9:bb:a5:ff:db:10:5f:63:4a:59:a2:7e:
         ac:7c:de:b3:8c:94:eb:5e:41:35:1b:7b:ae:65:1c:ee:4a:fb:
         f0:d2:ec:e9:d0:4f:e4:05:a7:22:59:56:d0:00:29:dd:f7:7c:
         46:5d:1e:16:a7:3e:a7:69:07:88:af:61:5d:bd:3a:cb:ae:52:
         9d:7e:cd:49:2b:7b:6a:19:ff:59:5e:4e:d7:20:a6:50:45:15:
         c4:9f:04:ca:b4:ff:16:66:16:91:2f:c4:75:52:1b:fd:22:93:
         60:9b:4d:d5:9f:1d:47:7f:b8:3d:f3:1b:30:21:6c:a9:8f:cd:
         77:fd:dd:bc:84:aa:45:a4:36:db:86:b9:a7:ec:0a:3f:ff:27:
         aa:d1:5a:b2:80:95:31:c8:8d:da:51:84:9a:bd:f7:ea:b3:3a:
         be:5a:f5:4b:20:4b:72:cd:01:b7:d4:e2:8f:5d:3f:9a:52:65:
         c8:b2:85:43:46:cb:5d:9b:72:07:1c:b1:ca:c6:05:67:27:44:
         72:23:8c:94:cc:2a:c4:1a:3d:e8:c3:a6:d8:b2:38:72:de:03:
         79:8f:08:72:cb:e3:80:a4:f8:d8:ab:9d:d9:55:ac:47:b7:a9:
         11:73:39:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:29 2026 by rpki-client