Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e31362e302e302f31362d3234203d3e20313337373138.roa
File:                     3131392e31362e302e302f31362d3234203d3e20313337373138.roa (raw, json)
Hash identifier:          jT5BQeMXl74HIAGihZvGX/G/CeWPvxcXSyqyAvvWCAg=
Subject key identifier:   E2:8D:B2:D3:08:95:17:98:F1:6E:58:F9:C7:3E:97:38:5E:9F:D2:E3
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       33562BDDB166A3364EF04083E825136FD55EAEAC
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e31362e302e302f31362d3234203d3e20313337373138.roa
Signing time:             Tue 28 Apr 2026 14:05:16 +0000
ROA not before:           Tue 28 Apr 2026 14:00:16 +0000
ROA not after:            Tue 27 Apr 2027 14:05:16 +0000
asID:                     137718
IP address blocks:        119.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:56:2b:dd:b1:66:a3:36:4e:f0:40:83:e8:25:13:6f:d5:5e:ae:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Apr 28 14:00:16 2026 GMT
            Not After : Apr 27 14:05:16 2027 GMT
        Subject: CN=E28DB2D308951798F16E58F9C73E97385E9FD2E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:e0:15:c1:6d:71:c0:b6:7c:48:3f:d9:85:
                    71:55:02:57:2b:f4:62:bf:1b:07:0e:5e:f7:2c:bd:
                    f9:97:af:e8:8c:c3:45:ca:18:ca:61:41:d7:4a:56:
                    db:86:5d:24:1d:b8:7c:31:d2:c0:ce:6b:c6:bd:af:
                    fe:4a:b3:6d:ba:c0:e6:f7:16:7a:18:44:13:2a:74:
                    e7:ed:9f:e8:56:07:e0:e4:15:71:a0:1b:ae:ee:10:
                    42:61:52:81:0f:a5:45:06:b7:f4:10:28:13:b2:10:
                    67:ec:ba:6a:9e:b7:44:5f:63:63:09:1e:fd:27:a7:
                    6b:40:ac:3d:49:e5:d6:b2:07:11:ae:c2:b7:77:53:
                    fd:ba:20:0e:41:d9:87:77:60:57:e3:96:48:d1:f8:
                    52:98:52:30:d0:05:ff:f7:ac:0e:79:b2:da:63:cd:
                    a4:75:a7:36:b7:41:1c:aa:8d:dc:97:4a:42:86:55:
                    67:ac:fb:8f:a9:5f:6b:f7:90:02:50:00:8f:7f:ce:
                    b3:79:7e:bb:9b:36:58:3d:a2:69:c4:f3:c5:a8:19:
                    b8:55:4e:bb:8e:e7:e6:8e:a6:ad:ca:f9:d4:81:05:
                    8a:ca:1c:2b:03:9c:2e:5b:cf:b6:dd:0a:88:54:25:
                    58:66:a8:55:0e:ff:f5:9e:21:33:11:15:4f:0a:7f:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8D:B2:D3:08:95:17:98:F1:6E:58:F9:C7:3E:97:38:5E:9F:D2:E3
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e31362e302e302f31362d3234203d3e20313337373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:eb:0d:63:f9:d7:6e:59:f5:52:60:07:d5:d5:c0:87:48:
         ad:ec:dc:9f:3a:ce:1f:99:af:d5:f0:3d:b2:5e:9b:db:a6:60:
         ef:3f:53:16:25:4b:87:71:64:1e:bd:59:9b:c9:29:28:9f:3b:
         58:49:e8:0a:d6:1d:70:ad:b6:bb:15:b8:a0:06:67:28:a8:ea:
         a6:a6:f0:5a:b1:0b:35:8b:29:92:a3:59:93:0e:d6:81:a1:24:
         33:63:be:ae:b3:6a:fc:b9:84:c2:fa:0d:0f:5b:2a:63:fe:be:
         e3:6d:11:dd:b0:3c:95:b1:fc:20:bc:c2:b2:2d:44:81:93:58:
         a5:6a:b2:ac:99:8d:f5:32:a6:83:d4:6f:c0:bc:a3:8e:3a:3d:
         27:6a:99:08:fc:88:6d:8f:85:dd:1f:41:78:49:a8:24:48:3d:
         e6:b1:8b:80:3c:ea:97:5a:f0:02:db:38:5a:10:fb:a1:da:66:
         6f:67:dc:bf:e7:45:1f:82:98:48:67:08:fe:3a:b6:6d:17:f2:
         43:ce:1d:aa:aa:b3:d4:42:56:1a:74:b0:b2:05:e7:3a:fc:cd:
         68:4e:40:8a:18:76:22:52:d3:61:8e:fe:8b:e8:26:77:8c:37:
         c9:e0:07:5e:57:e9:55:d1:10:5e:1e:3f:35:0f:c7:42:da:04:
         16:93:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:27 2026 by rpki-client