Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa
File:                     3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier:          oXYV/OdtDPTF+bDwP4YRcFe7e+iK8tpONWnS+3V3NOM=
Subject key identifier:   97:43:FF:75:C7:88:12:8D:82:4B:DA:68:1A:BF:B2:2F:D5:10:1C:AC
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       79338539AF95992C09E07F72FE8AB152066B955D
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa
Signing time:             Mon 13 Jul 2026 03:46:34 +0000
ROA not before:           Mon 13 Jul 2026 03:41:34 +0000
ROA not after:            Mon 12 Jul 2027 03:46:34 +0000
asID:                     198486
IP address blocks:        119.59.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:33:85:39:af:95:99:2c:09:e0:7f:72:fe:8a:b1:52:06:6b:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:34 2026 GMT
            Not After : Jul 12 03:46:34 2027 GMT
        Subject: CN=9743FF75C788128D824BDA681ABFB22FD5101CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:24:8b:e1:47:54:ad:c0:89:38:a0:03:eb:
                    fd:54:bd:41:08:13:c1:26:9b:00:2d:5d:ab:fe:19:
                    1b:13:0f:92:8c:9c:36:6a:e6:93:3c:bd:0f:5b:90:
                    37:91:ae:0b:a0:ae:54:89:0e:8c:5f:63:ab:14:63:
                    a6:de:90:74:dc:ca:cb:17:7f:29:60:00:91:d2:f5:
                    35:82:d7:22:f0:7a:9e:f3:4b:9d:ac:39:86:6d:ac:
                    6f:f7:42:3c:eb:eb:65:30:70:46:bd:1b:ea:5f:a1:
                    2a:00:d1:65:da:26:b8:ce:eb:0d:85:3e:66:a4:5a:
                    a9:55:72:6a:1a:d7:a1:8c:0e:89:a2:17:22:92:0e:
                    3c:c4:5e:ff:ba:74:18:2a:c8:c1:f5:c3:f7:3e:a1:
                    53:18:99:84:73:4a:5c:26:6d:59:00:67:9a:68:10:
                    ee:6d:34:89:f7:a5:b0:ee:55:cd:af:84:f4:f9:dd:
                    91:8f:a8:fd:78:12:85:70:2f:75:49:a4:d4:16:ed:
                    3e:79:40:da:4b:e1:51:85:05:f7:e7:73:4f:81:37:
                    6f:13:0d:da:ea:9a:d0:f6:5b:a0:cf:e1:2a:2c:df:
                    84:30:34:8f:6d:33:6f:e7:aa:7a:89:e2:9d:df:e2:
                    1b:b4:87:ad:a8:fd:66:b0:38:b5:9a:32:65:fb:20:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:43:FF:75:C7:88:12:8D:82:4B:DA:68:1A:BF:B2:2F:D5:10:1C:AC
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:f0:04:3c:09:be:70:fb:72:50:6c:73:53:81:3a:9e:d0:f9:
         51:cb:b3:ab:02:d7:1a:48:7f:13:70:df:77:a5:21:4b:13:ea:
         69:ae:7a:ec:89:a4:6f:e4:7d:cf:0d:0a:ab:4a:75:4a:13:c5:
         42:6d:4e:3b:55:22:87:93:9b:23:0d:0e:c2:b7:f7:ea:5f:d6:
         d1:62:0c:d7:fa:46:07:50:74:d5:d4:99:0b:a3:e3:f3:64:15:
         27:af:7e:4b:94:99:23:92:d7:24:2f:29:53:4d:74:ef:19:4a:
         1e:bc:b6:bc:aa:d9:1a:59:70:63:31:50:4f:f9:48:ad:6c:1f:
         7a:65:dc:0b:d2:a0:43:11:d1:33:b2:76:48:4f:4e:f8:5b:b4:
         10:b6:4d:d5:cf:de:16:07:0e:02:6b:ac:17:a6:86:d1:50:6c:
         ef:ca:bc:3e:74:af:f6:14:49:93:af:67:94:9f:2a:57:c6:f6:
         32:98:00:4f:a3:92:64:a9:26:78:8a:ba:a2:a6:f8:7d:9b:49:
         29:54:74:07:37:59:87:9d:7d:f7:7b:72:82:5d:7c:20:50:d4:
         f7:dc:8c:27:4b:09:2d:bb:a6:1c:3f:8a:8d:ed:fa:8a:c3:17:
         2d:97:e5:97:64:a1:1e:78:db:66:70:47:bb:65:71:26:8c:21:
         75:90:8c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:42:12 2026 by rpki-client