Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106817934849736725/0/3131392e33302e34382e302f32302d3230203d3e20313337373833.roa
File:                     3131392e33302e34382e302f32302d3230203d3e20313337373833.roa (raw, json)
Hash identifier:          fuUgzIoRaRLkVOrMLertqZbZ5P0wm9QFw2ombTmuWa8=
Subject key identifier:   49:37:52:25:9A:65:0D:2A:1B:60:77:AD:8E:16:17:A9:C3:6C:45:E5
Certificate issuer:       /CN=6D1CE626B3B34809CAB0B0C8393AFA854F663330
Certificate serial:       3D6970A3FB84E0B993CA712E22C137E123CB9B
Authority key identifier: 6D:1C:E6:26:B3:B3:48:09:CA:B0:B0:C8:39:3A:FA:85:4F:66:33:30
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/3131392e33302e34382e302f32302d3230203d3e20313337373833.roa
Signing time:             Wed 13 May 2026 05:47:23 +0000
ROA not before:           Wed 13 May 2026 05:42:23 +0000
ROA not after:            Wed 12 May 2027 05:47:23 +0000
asID:                     137783
IP address blocks:        119.30.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:69:70:a3:fb:84:e0:b9:93:ca:71:2e:22:c1:37:e1:23:cb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1CE626B3B34809CAB0B0C8393AFA854F663330
        Validity
            Not Before: May 13 05:42:23 2026 GMT
            Not After : May 12 05:47:23 2027 GMT
        Subject: CN=493752259A650D2A1B6077AD8E1617A9C36C45E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:c3:ab:18:4e:2a:f8:11:1a:7e:28:b8:14:
                    da:98:b8:f5:80:4f:a5:96:26:a9:02:78:f7:07:67:
                    65:32:3a:87:92:8e:45:1a:11:d1:67:3c:c7:3d:2c:
                    66:5a:b3:5f:2c:b3:59:81:a2:53:a8:5d:74:41:b9:
                    6e:cf:59:21:f7:4a:5d:5b:db:e6:03:f8:f5:48:cd:
                    82:b9:03:35:4e:6d:61:0d:c0:7b:99:13:1b:4b:a9:
                    af:e2:47:62:78:f9:62:4c:60:f7:c9:c8:54:1f:c7:
                    d9:dd:d8:ae:4f:40:72:5e:04:ae:84:88:87:ba:a4:
                    53:87:82:00:09:91:17:59:61:b5:af:f1:6a:c6:51:
                    d1:2a:3a:f9:ea:d0:4b:91:51:d3:ba:82:55:5c:9a:
                    51:2b:b0:dd:37:c4:ff:d1:04:7c:38:8e:13:02:92:
                    42:85:d9:ba:da:fc:08:dc:08:a7:35:1e:74:16:6c:
                    62:4a:79:b7:b9:91:99:7c:0d:a7:f1:19:b4:3d:1e:
                    c3:96:c0:82:26:33:8c:49:eb:dd:42:7e:36:f4:94:
                    40:ab:52:4e:07:d9:88:13:d6:4f:37:be:18:bd:35:
                    c6:bc:b8:81:01:f5:36:03:79:ff:b4:46:8f:d3:4c:
                    c7:e0:82:4e:dd:1f:cf:ab:b2:6e:3f:ff:72:2f:e6:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:37:52:25:9A:65:0D:2A:1B:60:77:AD:8E:16:17:A9:C3:6C:45:E5
            X509v3 Authority Key Identifier:
                keyid:6D:1C:E6:26:B3:B3:48:09:CA:B0:B0:C8:39:3A:FA:85:4F:66:33:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/3131392e33302e34382e302f32302d3230203d3e20313337373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b9:b0:00:fa:8a:2b:7c:b5:f8:b8:75:e6:80:75:18:53:08:ca:
         11:37:c0:30:e3:0b:85:7b:63:0e:d6:c2:4a:05:7e:66:98:21:
         fb:80:71:fc:98:79:d4:03:f8:3d:f2:89:9f:18:0f:db:e3:07:
         46:25:92:8d:af:3a:e3:0d:82:2c:a4:8e:ca:07:93:32:27:5f:
         8c:03:af:1b:ed:46:c6:f2:9b:b3:40:bd:28:f8:3f:70:76:46:
         27:2d:e5:c8:00:13:08:6f:12:1d:3a:30:68:b6:5b:ff:ab:80:
         71:f2:8d:2f:0e:ba:b1:fc:da:dc:80:69:05:b6:d0:76:95:15:
         74:a5:56:ad:1e:00:2b:55:8e:62:64:d1:06:e1:43:26:bd:e8:
         81:95:d9:1f:c9:55:23:ae:1a:ba:35:42:78:65:ea:69:45:a6:
         8e:cc:c1:57:17:23:f5:c2:a5:ea:fc:c5:11:38:4c:2e:2c:3d:
         67:87:ac:2c:c5:67:db:a0:a6:8d:9f:1c:19:f4:40:5e:bc:a2:
         9c:1f:9b:e3:e7:88:46:b5:b6:3f:a3:9c:80:ed:67:e9:35:eb:
         8e:3e:29:69:be:c8:fa:a4:f9:20:63:9e:73:06:63:64:49:73:
         2b:a4:77:28:62:31:f2:01:2c:7f:b9:a1:05:c4:c6:9d:1d:03:
         55:f0:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:09 2026 by rpki-client