Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203138313138.roa
File:                     3231392e37322e33322e302f32302d3230203d3e203138313138.roa (raw, json)
Hash identifier:          n2kW3kVVVOuyDR1yR8zkSLZGPAkUMowWPIxun6a249k=
Subject key identifier:   59:07:E6:13:19:49:EF:2C:3B:21:A2:70:60:C8:81:32:FC:0A:CD:17
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       2E554881472A0D4D3D129CEE450B354E225ACF96
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203138313138.roa
Signing time:             Fri 26 Jun 2026 04:17:30 +0000
ROA not before:           Fri 26 Jun 2026 04:12:30 +0000
ROA not after:            Fri 25 Jun 2027 04:17:30 +0000
asID:                     18118
IP address blocks:        219.72.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 15:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:48:81:47:2a:0d:4d:3d:12:9c:ee:45:0b:35:4e:22:5a:cf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun 26 04:12:30 2026 GMT
            Not After : Jun 25 04:17:30 2027 GMT
        Subject: CN=5907E6131949EF2C3B21A27060C88132FC0ACD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:8b:42:08:bd:77:a2:0b:6a:36:c0:ef:e0:
                    f6:ec:72:10:ce:af:4f:8c:ac:d7:d8:9b:da:a2:94:
                    66:6f:a0:85:d1:6d:8c:32:26:82:b5:f7:79:0e:20:
                    61:d1:5f:07:13:46:4d:4b:78:70:6f:6f:84:9e:5e:
                    da:26:39:d5:27:7e:17:4b:bc:cd:81:24:4b:91:2a:
                    06:d1:fe:76:c6:cd:fa:ca:ad:ce:52:b2:91:38:c9:
                    8b:18:0f:52:3f:0c:32:4a:d2:60:15:6a:f5:fa:b3:
                    ca:13:72:c6:d3:92:b7:cf:bd:7f:28:c7:31:52:2d:
                    34:1b:8e:61:2a:9f:91:af:4d:ac:5d:7c:36:70:7a:
                    99:df:ed:26:e8:d2:08:89:a6:88:b0:37:84:e5:5f:
                    46:ce:77:a9:ae:59:e3:ed:4a:c3:01:aa:e2:2d:de:
                    03:5d:b9:b8:e6:7e:7c:69:5f:85:12:12:b8:c2:14:
                    ec:43:04:19:9e:31:18:6c:f5:32:8d:46:40:d2:7e:
                    fa:88:4b:86:9b:00:89:f2:5a:30:95:3a:6d:a3:ce:
                    b6:93:dc:38:3e:09:5e:a6:60:37:20:3a:f2:5b:6a:
                    b3:5f:ff:21:6b:aa:a9:15:f9:1a:a7:ad:d2:96:ed:
                    05:19:53:a3:7b:79:7f:cb:48:e4:3a:b1:a9:bc:3f:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:07:E6:13:19:49:EF:2C:3B:21:A2:70:60:C8:81:32:FC:0A:CD:17
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203138313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:ea:fc:ee:30:38:27:0d:cc:62:02:6e:48:7b:57:1e:25:
         09:2d:a8:f2:a4:54:31:f1:d9:30:2e:dd:0d:45:75:50:11:d3:
         fd:61:64:75:cd:84:f9:ee:01:41:e8:f0:8e:93:0e:cc:64:ab:
         d7:39:3d:b6:32:d5:80:18:a0:4a:62:fc:8f:ae:e9:98:95:37:
         77:14:e7:89:42:af:54:af:c1:16:11:42:9b:c9:a6:b2:84:e0:
         9f:7e:f5:cb:0e:67:9e:95:0e:b7:d9:7d:07:b9:70:31:a0:7b:
         2d:65:e7:c9:15:f8:f0:62:25:f5:29:a2:7a:a7:ed:60:51:ab:
         73:74:09:34:d6:28:1c:c5:58:dd:27:00:7e:79:86:1c:22:ff:
         79:2b:b6:ca:04:9d:ac:97:de:7f:2e:7d:76:8b:07:bd:a1:bb:
         b5:fc:78:1c:45:00:0f:bb:89:6d:75:2a:15:35:ca:9a:9e:82:
         c3:1e:8b:6e:fe:08:cc:23:48:11:02:13:fa:37:97:6e:c1:ed:
         b3:82:51:34:0e:22:2a:de:12:4e:f5:8f:40:03:79:2c:89:ca:
         d2:ed:b9:63:11:3c:c3:99:1c:1b:68:a0:5a:bb:b7:c8:2d:8b:
         9a:4d:46:37:55:36:e0:fa:03:70:23:ae:1a:25:e9:6d:9a:e6:
         b1:f6:ea:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:39 2026 by rpki-client