Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa
File:                     3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier:          s7VGOuhy41+DgeIb1RASaSb5M0tErXN2WdFpIrJ25KY=
Subject key identifier:   9E:31:C1:42:93:56:F5:D7:02:61:E5:9A:ED:76:8B:C6:CA:B3:4C:B6
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       6FB5538D110E75FCB36C1412132B8250631238AC
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa
Signing time:             Wed 06 May 2026 06:24:16 +0000
ROA not before:           Wed 06 May 2026 06:19:16 +0000
ROA not after:            Wed 05 May 2027 06:24:16 +0000
asID:                     198486
IP address blocks:        119.59.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b5:53:8d:11:0e:75:fc:b3:6c:14:12:13:2b:82:50:63:12:38:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:19:16 2026 GMT
            Not After : May  5 06:24:16 2027 GMT
        Subject: CN=9E31C1429356F5D70261E59AED768BC6CAB34CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:71:51:fc:5b:35:22:5c:8f:92:f4:8c:bf:
                    79:69:b1:a0:a3:3c:ef:06:e9:65:f6:28:e9:fa:03:
                    34:f8:62:f7:22:97:f2:13:8d:47:b0:e9:d9:25:f2:
                    12:15:dd:3d:1a:d7:6e:7f:3b:bd:13:8b:b4:fd:53:
                    ef:48:e6:4b:b5:cd:b7:6c:22:5a:e0:f2:df:05:1b:
                    3a:bf:4e:47:ec:3d:5e:7f:f8:c7:a6:e1:a8:7b:a3:
                    aa:3a:23:17:bb:ae:b6:53:eb:84:0b:a0:c3:ad:fa:
                    c2:34:96:26:39:23:8f:0a:8b:8d:70:87:31:69:e7:
                    2b:2c:40:6e:b1:f5:48:59:58:4e:3a:8f:67:92:75:
                    1c:7b:93:31:eb:28:82:e2:80:28:8c:2a:e3:42:32:
                    ad:72:a5:14:04:e2:e3:1e:9e:9f:78:95:4c:ff:ae:
                    e9:b8:bb:d8:35:e8:b7:e8:f9:85:b1:e7:c3:f1:09:
                    06:84:9f:40:e9:66:e7:ac:23:5c:e3:2d:b3:59:8d:
                    5b:1b:a8:ad:fa:63:80:08:30:1d:d2:0b:6c:40:a7:
                    51:b9:0c:17:28:90:84:3a:53:f7:82:bc:ea:a4:e4:
                    93:39:e7:fe:0c:11:66:11:fb:97:98:b4:51:56:ce:
                    7b:69:c3:b9:9c:36:17:ca:7c:4f:ee:81:b7:47:aa:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:C1:42:93:56:F5:D7:02:61:E5:9A:ED:76:8B:C6:CA:B3:4C:B6
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:53:b2:0e:03:0e:4b:49:73:e8:66:8c:84:66:84:3e:d3:04:
         3a:df:6c:fb:7f:c4:98:e3:9a:f1:1c:67:a2:75:ca:a8:c3:59:
         77:5f:f5:30:9b:0c:da:17:3b:62:7c:4a:6c:bd:50:db:59:d4:
         2e:b0:9f:6b:97:a2:b1:6b:a2:14:69:f5:5b:4b:8c:db:c9:6e:
         ef:aa:ce:e3:08:63:eb:f1:17:b0:e0:3a:ae:81:e7:fd:31:4c:
         70:a5:dc:21:c8:4e:60:eb:7b:f8:9f:82:b6:83:bb:ed:42:98:
         71:af:bc:0c:b0:97:bd:c5:20:0a:ac:32:df:32:18:16:ac:e4:
         25:0a:5c:d3:b7:64:41:a1:40:17:70:95:01:70:d2:ec:31:72:
         0e:6d:7a:6f:53:fe:b3:6d:12:af:6b:8a:5d:f0:b8:37:f7:fc:
         45:a8:9f:cc:dd:87:3e:fa:87:7d:a1:e0:24:34:04:4d:6a:20:
         f5:79:31:f3:6d:4a:1f:08:3f:a2:da:40:61:14:02:6c:a2:02:
         af:b3:df:6a:13:b8:21:0f:99:d2:4f:c0:64:fe:e6:d5:07:12:
         2f:6b:69:5e:70:4e:84:49:e7:80:70:da:e5:cc:30:a0:4c:98:
         f5:cf:87:92:f8:ae:9b:e2:79:3e:08:bd:63:d5:f1:60:2a:b1:
         5b:59:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:12 2026 by rpki-client