Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e31362e302e302f31362d3234203d3e2034383131.roa
File:                     3131392e31362e302e302f31362d3234203d3e2034383131.roa (raw, json)
Hash identifier:          ol10Xnyop1otNqNf9PYNj4pf1rH7srSLvXQHfmQglOY=
Subject key identifier:   1A:BD:49:71:7F:CE:37:FA:9B:44:DF:4D:91:D5:16:C1:E6:B5:12:40
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       4ECB6F9D91C36585ED62895C34CAC9608BEE6543
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e31362e302e302f31362d3234203d3e2034383131.roa
Signing time:             Tue 28 Apr 2026 14:05:16 +0000
ROA not before:           Tue 28 Apr 2026 14:00:16 +0000
ROA not after:            Tue 27 Apr 2027 14:05:16 +0000
asID:                     4811
IP address blocks:        119.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cb:6f:9d:91:c3:65:85:ed:62:89:5c:34:ca:c9:60:8b:ee:65:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Apr 28 14:00:16 2026 GMT
            Not After : Apr 27 14:05:16 2027 GMT
        Subject: CN=1ABD49717FCE37FA9B44DF4D91D516C1E6B51240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:da:81:ad:63:ef:2f:3f:2f:40:8b:ae:38:
                    6d:2e:4c:db:f2:6f:bd:9f:04:bf:dc:f0:e8:70:1d:
                    d5:7e:a8:c5:cb:68:75:60:69:f6:a7:19:5d:54:55:
                    f8:d4:31:80:36:4d:ca:80:55:0a:d2:d3:09:34:8b:
                    b5:2f:e9:db:dd:4b:76:26:29:53:f4:11:f5:74:25:
                    db:97:56:e7:9a:4e:43:16:5e:67:27:10:d6:50:21:
                    4d:80:e0:2f:1f:ba:11:ae:7a:24:a4:de:72:40:e6:
                    87:6f:44:11:7b:fa:c8:27:46:86:64:55:8c:b4:e2:
                    c5:86:d3:e5:d8:82:bc:a8:d6:65:35:0e:f0:d8:b4:
                    92:12:44:5c:dc:10:c5:2f:b8:94:ce:4b:f5:13:2a:
                    e8:9e:11:94:62:35:0d:ff:de:d8:2f:40:c4:41:a9:
                    db:17:e3:3d:96:46:c7:b6:26:16:03:12:47:7c:8e:
                    f3:f6:c1:22:fb:b9:b5:fa:28:15:a3:fd:cf:79:63:
                    61:54:cd:3e:19:31:b4:d0:77:9e:a3:2d:35:df:b5:
                    85:51:6c:e8:0c:36:cf:bf:96:24:7a:f8:4f:7e:f3:
                    85:5d:b0:ff:6a:b8:71:9c:bc:c1:9b:55:c1:2d:81:
                    23:06:c1:5a:a1:f3:b3:3b:0a:49:c6:74:6f:c9:d1:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:49:71:7F:CE:37:FA:9B:44:DF:4D:91:D5:16:C1:E6:B5:12:40
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e31362e302e302f31362d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:55:e7:e4:28:9b:4f:7f:5f:62:0f:7b:d1:87:34:69:8a:82:
         fa:a5:aa:69:5a:d1:58:34:e0:78:a3:0d:db:22:02:7c:de:6f:
         4e:fc:82:d5:e4:18:ec:08:e7:0b:3f:ed:d6:52:28:6d:51:c0:
         f5:7e:1d:c0:42:55:eb:9b:58:7b:04:e0:41:6a:cc:26:38:2f:
         74:61:9b:c5:e1:e5:cd:f1:16:f6:66:08:6c:0d:f4:78:83:2e:
         6c:ab:f1:98:b9:a0:4c:9f:b3:b6:91:6b:8f:09:13:a6:04:e7:
         65:81:d3:ba:90:42:27:da:bf:7c:36:89:49:7b:42:58:69:9d:
         fa:7e:e0:bb:c7:58:ad:29:a6:e3:39:c4:45:36:6c:87:38:5d:
         39:78:b2:5f:6c:d4:60:ff:b8:7d:7e:3e:b6:42:28:a1:a2:55:
         43:df:f9:29:22:bd:83:19:43:03:22:1c:b0:ac:b7:56:7e:67:
         9c:af:03:10:00:cf:c0:cb:0e:7b:ea:d5:58:8c:b7:f1:df:35:
         61:79:da:a4:c4:90:d5:aa:7d:42:c1:7a:c8:b8:0e:6c:46:3f:
         3b:2c:81:ec:05:03:03:fb:3d:96:11:1a:93:5a:f9:0e:75:3c:
         15:e7:0a:42:73:95:4c:75:5a:ab:2d:dc:15:4f:c4:14:1e:cd:
         6f:a1:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:58 2026 by rpki-client