Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa
File:                     3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa (raw, json)
Hash identifier:          NdCjlB6B9YgZJoZ1Uw/3JvnFwjpegaTv9nvgtsFFe1c=
Subject key identifier:   C2:CE:25:AB:C0:28:96:ED:CA:BE:9C:21:D4:0B:7A:53:0F:FB:DE:58
Certificate issuer:       /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial:       67BDA1A690CAE7989DB1B682D9C30F63BA99EC51
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa
Signing time:             Sun 28 Jun 2026 13:52:12 +0000
ROA not before:           Sun 28 Jun 2026 13:47:12 +0000
ROA not after:            Sun 27 Jun 2027 13:52:12 +0000
asID:                     134764
IP address blocks:        160.19.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:a1:a6:90:ca:e7:98:9d:b1:b6:82:d9:c3:0f:63:ba:99:ec:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
        Validity
            Not Before: Jun 28 13:47:12 2026 GMT
            Not After : Jun 27 13:52:12 2027 GMT
        Subject: CN=C2CE25ABC02896EDCABE9C21D40B7A530FFBDE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:d7:88:14:b4:5a:33:d7:98:53:4d:fd:90:
                    8f:96:9e:4d:b6:e3:54:b5:dd:36:e1:92:3d:7b:7b:
                    ab:77:12:27:b9:13:cb:89:af:d4:44:8b:db:12:8b:
                    80:1c:87:3b:49:6c:44:35:d1:b2:03:f5:7d:da:14:
                    a2:e6:00:04:8d:90:47:12:d8:a3:e4:1d:fe:7a:e7:
                    45:4f:95:5e:36:11:c0:13:88:ed:ee:a5:34:38:79:
                    95:94:cc:bf:81:57:b1:73:d9:72:89:ff:3d:4a:6c:
                    ea:90:ee:2a:81:ad:c7:ed:3e:52:18:17:01:3a:28:
                    84:8b:b3:71:fc:a2:3c:1d:0c:3d:eb:dd:9a:7e:de:
                    a9:9f:15:f2:81:4d:c9:26:ca:92:b7:89:49:6d:19:
                    30:e9:41:7f:3e:c1:a7:65:65:8a:e0:45:b1:6e:df:
                    4a:7c:52:d6:4d:0f:01:14:c7:78:82:07:81:26:62:
                    b7:cf:71:d5:ff:7f:9a:54:b6:2a:8d:fb:66:5c:18:
                    d8:96:15:91:2e:6f:ef:69:47:48:9f:9f:05:4d:34:
                    ad:e9:9c:c5:e6:4f:91:5b:d9:31:e5:16:c4:b9:62:
                    91:3a:0d:1b:c1:51:82:a4:84:b2:e7:e5:3e:60:a1:
                    18:2c:44:6e:a5:9b:26:1c:61:b5:54:a4:75:18:3f:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:25:AB:C0:28:96:ED:CA:BE:9C:21:D4:0B:7A:53:0F:FB:DE:58
            X509v3 Authority Key Identifier:
                keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:61:dd:97:c6:f4:de:67:36:b2:3f:e2:ff:b2:5c:07:2e:d8:
         87:05:d2:8c:9b:02:ac:88:8e:ec:eb:83:c1:62:b8:e4:33:63:
         3d:3e:e1:bd:5a:68:b6:c8:28:01:78:ab:73:1a:60:55:64:ca:
         77:79:d6:aa:a0:44:e8:f8:72:30:d8:e4:95:0a:58:33:f0:50:
         2a:33:f3:68:ac:e7:77:53:a6:8f:7a:79:fc:e2:bb:9e:ec:a3:
         fb:e8:7d:f4:03:6f:1f:1d:53:ad:90:40:73:a3:58:aa:1e:ce:
         49:d8:e3:3a:ce:7d:52:55:81:e0:68:6f:e4:45:5b:06:55:eb:
         ca:38:5b:4d:d0:95:00:93:db:06:a3:bb:0d:59:ab:0c:aa:a7:
         74:3d:ac:8a:e9:02:51:85:91:e4:96:9b:9d:0f:02:91:12:a8:
         79:f5:8d:13:b9:6a:04:3c:a5:a0:b1:98:90:19:72:77:38:5c:
         42:2a:6b:28:27:31:82:8e:17:46:57:c4:ed:ec:69:c8:21:ef:
         3e:ca:90:ae:f3:8f:a4:17:fd:cd:03:d7:1d:3e:b4:fb:64:0b:
         3c:7a:99:1a:29:70:7b:ce:4b:93:d6:e0:5f:74:ac:19:95:fd:
         f1:38:0b:85:67:58:62:c5:3a:8d:ec:45:7e:f6:bc:25:29:50:
         1e:c0:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:42:02 2026 by rpki-client