Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131382e3132362e33322e302f31392d3139203d3e203435303631.roa
File:                     3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (raw, json)
Hash identifier:          oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=
Subject key identifier:   AF:C2:C6:AD:D9:1D:D0:E9:C5:59:D5:5C:39:B4:90:41:DD:0B:60:25
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       5ECABEF51C051D47240D1771344EEA19C52CF2DD
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131382e3132362e33322e302f31392d3139203d3e203435303631.roa
Signing time:             Sat 09 May 2026 11:55:54 +0000
ROA not before:           Sat 09 May 2026 11:50:54 +0000
ROA not after:            Sat 08 May 2027 11:55:54 +0000
asID:                     45061
IP address blocks:        118.126.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ca:be:f5:1c:05:1d:47:24:0d:17:71:34:4e:ea:19:c5:2c:f2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:54 2026 GMT
            Not After : May  8 11:55:54 2027 GMT
        Subject: CN=AFC2C6ADD91DD0E9C559D55C39B49041DD0B6025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:30:d5:26:75:64:08:b4:9a:d2:4e:f7:e7:
                    19:cf:a5:3f:40:18:93:8f:fa:8e:c3:ff:30:13:2b:
                    20:24:e5:12:91:51:c3:43:e8:38:18:15:17:13:13:
                    94:7b:29:38:50:1e:65:a0:ba:3d:8c:46:d9:25:64:
                    42:45:9f:6c:d5:da:20:d2:cd:c4:c2:c3:20:15:8e:
                    3b:4f:0f:48:88:25:83:60:48:98:42:a9:21:97:cf:
                    b4:6f:f1:02:cc:e3:1e:7e:87:6a:9b:9c:be:06:04:
                    61:36:bf:b6:31:d3:42:07:f5:e7:d1:67:72:2a:05:
                    eb:97:37:1f:95:11:75:30:62:15:3e:a6:1d:a1:1a:
                    7e:98:d8:71:46:77:b4:46:95:88:46:dd:1c:d4:be:
                    8d:e1:27:db:d2:55:9f:f9:f6:18:5d:0f:7e:22:d6:
                    a1:18:95:1c:72:73:c5:23:a4:e4:e8:e8:d0:b8:84:
                    ab:c4:c8:20:e3:df:f9:a4:55:0d:12:3e:0e:13:e3:
                    81:3e:5a:11:63:44:1d:b2:bf:ab:9a:b7:c9:7f:0a:
                    e3:5c:a0:11:7e:d4:04:9b:7c:9e:8f:b6:d7:fc:bb:
                    3c:82:a8:13:27:fe:4d:fd:2e:25:13:dc:a4:05:f3:
                    02:a5:b5:ff:5a:75:4c:79:c7:3c:8b:f4:2c:cd:c6:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:C6:AD:D9:1D:D0:E9:C5:59:D5:5C:39:B4:90:41:DD:0B:60:25
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3131382e3132362e33322e302f31392d3139203d3e203435303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.126.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:07:ef:c4:85:54:b7:54:3a:6e:e7:b5:f3:f3:fd:81:a9:42:
         a3:de:b9:47:d8:28:28:2a:2c:ba:64:9a:52:8a:97:7f:2f:77:
         71:63:b1:4d:59:0d:7e:36:22:ab:e1:97:05:aa:6b:15:eb:5e:
         ec:8f:71:4e:a9:56:a1:48:c1:76:f3:2c:ea:be:ca:36:18:23:
         be:33:7e:fe:66:6e:01:b3:d7:47:a9:e1:64:00:07:01:75:ef:
         d8:3e:f4:ce:cb:02:04:6f:36:c6:4e:25:04:d4:31:6e:ae:84:
         3b:14:67:d7:e2:82:30:0e:e2:39:8d:12:d7:9d:bb:dd:f2:b7:
         93:18:83:18:1a:db:5b:c2:b0:a2:5c:f6:c7:94:76:4a:24:f2:
         6f:0c:2f:3d:84:5b:6b:84:15:cc:ab:37:ed:da:f1:5e:bb:c4:
         54:ab:d9:82:ec:a5:1f:00:5e:5e:8b:3c:e7:33:71:e3:51:e4:
         17:5b:ad:5d:db:e7:ac:73:80:92:d4:2d:30:b6:f6:cf:ad:bc:
         04:f1:d0:48:38:45:a6:14:71:04:6b:18:2c:61:ae:7d:0d:b2:
         40:eb:7b:fb:74:18:5a:5b:fe:7a:65:83:e7:60:ef:b7:28:98:
         12:22:35:9a:7b:dd:0c:3c:11:11:13:3a:cb:01:20:8b:fd:75:
         8d:ac:f0:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:43:00 2026 by rpki-client