Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa
File:                     3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa (raw, json)
Hash identifier:          0V8lM1Bn5F+GN6qFR/iyuC3X56n7vTa4N4BWsHp44As=
Subject key identifier:   28:C9:12:60:AA:D7:CF:56:C3:B5:59:98:6F:0A:B1:FA:8D:E6:16:39
Certificate issuer:       /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
Certificate serial:       56E503EF87AB5BD5C36A6D58DD6FFCAAD08CD42D
Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa
Signing time:             Mon 20 Apr 2026 13:16:41 +0000
ROA not before:           Mon 20 Apr 2026 13:11:41 +0000
ROA not after:            Mon 19 Apr 2027 13:16:41 +0000
asID:                     24427
IP address blocks:        119.235.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:03:ef:87:ab:5b:d5:c3:6a:6d:58:dd:6f:fc:aa:d0:8c:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5
        Validity
            Not Before: Apr 20 13:11:41 2026 GMT
            Not After : Apr 19 13:16:41 2027 GMT
        Subject: CN=28C91260AAD7CF56C3B559986F0AB1FA8DE61639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:69:7f:ea:cc:ec:80:d5:dd:3d:b3:05:79:
                    05:25:76:57:8e:27:d5:dc:a5:fb:5b:0b:cd:11:53:
                    51:06:d9:f6:ec:08:7e:0e:b2:77:e3:96:88:70:9a:
                    b9:aa:07:37:f3:d7:64:ef:69:6d:a6:9b:87:6a:a1:
                    97:04:51:47:f7:4c:31:cc:4f:24:4c:59:29:ff:88:
                    14:84:53:ab:da:52:68:eb:07:5a:ae:5e:83:ae:03:
                    c0:d7:ae:77:16:1b:c7:76:c2:3f:33:fa:3a:5c:25:
                    46:6f:81:05:f4:33:17:fe:59:cd:8b:67:d8:83:6f:
                    a4:9b:52:76:95:13:70:71:28:85:0a:1e:cc:ab:52:
                    f4:f7:fd:81:0f:e2:2c:a1:f2:03:fc:9f:ce:d3:e2:
                    83:3a:4b:0d:6b:40:ec:f5:81:b3:22:5c:74:9c:97:
                    e2:d5:34:52:70:08:e1:e1:22:5c:89:40:ba:9b:09:
                    aa:c8:c3:d3:40:cb:ab:a2:75:e4:b8:39:2d:4d:6c:
                    1a:d0:3e:b8:df:3b:da:15:3c:44:89:a5:82:19:42:
                    9e:20:c1:59:5e:a4:95:25:ba:ce:da:b3:98:9b:ef:
                    19:fe:cc:bf:6b:25:e1:15:1f:14:09:21:b8:ee:1e:
                    fc:57:26:bb:8c:89:08:38:e3:63:e7:50:26:99:c4:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:12:60:AA:D7:CF:56:C3:B5:59:98:6F:0A:B1:FA:8D:E6:16:39
            X509v3 Authority Key Identifier:
                keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3131392e3233352e3136302e302f32342d3234203d3e203234343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:36:8e:4a:35:e3:73:ec:1b:32:6d:5f:05:3c:99:ef:76:73:
         77:41:2b:91:bb:71:dd:8c:48:8a:83:ca:62:e2:0d:ad:25:03:
         f8:d5:54:c4:53:bc:48:19:51:80:59:75:0b:4b:03:e0:11:ac:
         29:c7:1d:d0:3c:97:54:82:12:ad:77:da:8e:2d:d9:4b:30:11:
         6b:fc:6b:54:8b:d4:e7:83:c2:ac:9e:e2:a9:13:42:28:4b:aa:
         c0:a1:b4:27:95:17:89:42:3c:40:a6:12:08:8a:9e:bf:93:b0:
         3e:60:c6:52:c7:b2:21:98:c4:a9:9c:fb:52:de:42:61:54:1d:
         68:ea:7a:88:4a:e0:62:ce:0f:df:c8:13:81:9f:50:68:a6:0b:
         3f:bc:46:45:f3:30:0b:85:22:19:3c:33:72:97:fe:4a:42:99:
         31:2f:8f:c0:f7:8d:b4:7c:00:4b:b8:1c:e8:fe:14:18:77:d8:
         64:92:bd:e6:0f:f9:41:fb:8a:e8:83:ec:bf:b4:7c:89:86:1a:
         2c:72:aa:9e:3d:9a:b2:c1:44:fd:d8:70:19:62:c0:fb:41:6c:
         fa:af:c0:29:fd:93:34:4d:86:12:ae:a0:03:0c:85:e8:f9:ba:
         93:09:4b:75:ff:a5:8c:04:39:2b:6b:7d:55:e3:92:68:46:6a:
         a9:b6:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:32 2026 by rpki-client