Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e302e302f31362d3136203d3e2034383437.roa
File:                     3131362e3234322e302e302f31362d3136203d3e2034383437.roa (raw, json)
Hash identifier:          3FAaQU8TR5i/d48o0mJ5nAmlhbT77oPwxwysQXGtCIw=
Subject key identifier:   0A:6D:D5:16:03:3D:CA:E6:07:CE:DE:20:B5:27:F2:F2:CD:21:DB:C4
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       2AA948D9880693C2B2AEEFB5C3D5EB25D634620A
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e302e302f31362d3136203d3e2034383437.roa
Signing time:             Tue 19 May 2026 07:16:50 +0000
ROA not before:           Tue 19 May 2026 07:11:50 +0000
ROA not after:            Tue 18 May 2027 07:16:50 +0000
asID:                     4847
IP address blocks:        116.242.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a9:48:d9:88:06:93:c2:b2:ae:ef:b5:c3:d5:eb:25:d6:34:62:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 07:11:50 2026 GMT
            Not After : May 18 07:16:50 2027 GMT
        Subject: CN=0A6DD516033DCAE607CEDE20B527F2F2CD21DBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b4:34:15:3f:40:ae:cb:d3:2c:7f:5b:c2:62:
                    a2:08:0c:7b:15:83:ec:b9:ff:3a:f3:b8:c9:e1:7c:
                    16:44:e2:b7:b2:e0:42:81:f8:91:2d:32:77:b9:7d:
                    75:26:ce:bc:59:9b:fe:8f:79:a5:7d:21:71:f3:cd:
                    0a:16:6f:92:e5:df:2f:e1:a5:8b:2e:83:90:2f:91:
                    9d:68:c9:6c:ba:bf:76:09:d5:49:9f:a2:c5:2b:7b:
                    5f:6d:73:9c:d1:42:a9:c3:bf:a9:43:83:c5:50:12:
                    c4:85:ed:5c:b8:6f:e7:ed:7e:c8:e5:bc:60:16:4c:
                    be:f6:f0:d1:9c:54:81:f2:e5:4d:84:8f:c0:8a:20:
                    a6:43:19:7a:a2:15:90:84:1f:57:47:eb:31:bd:f9:
                    d7:c2:23:7c:06:cb:14:1c:d4:12:62:24:43:23:b2:
                    13:d4:03:80:dd:8e:1c:de:10:54:d8:5c:cb:af:cb:
                    4e:3f:dc:79:0c:eb:db:22:cd:54:49:a4:3a:04:ff:
                    c0:9e:7f:d9:a1:c0:c2:69:c3:d4:b9:98:5e:63:8b:
                    17:c9:7c:79:af:07:4d:fc:d7:89:50:a7:c3:e3:0e:
                    81:b1:2e:35:98:b5:ca:9d:71:2f:a8:4a:ec:17:92:
                    9d:38:9c:bc:90:53:ee:fb:75:9b:ff:cd:85:67:91:
                    99:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:D5:16:03:3D:CA:E6:07:CE:DE:20:B5:27:F2:F2:CD:21:DB:C4
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e302e302f31362d3136203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:13:72:b7:79:8f:ee:96:b2:26:99:80:de:fd:d4:ee:d9:7b:
         fa:08:fa:48:a3:78:cd:0b:fe:cb:70:3d:00:f8:c3:95:12:df:
         f7:41:65:63:23:8a:2a:c3:c0:9e:0b:b7:d9:aa:4d:4b:73:02:
         01:72:43:b7:3d:59:7d:c9:c2:e6:d3:d8:75:f1:4d:b4:53:3c:
         26:15:fe:08:28:0e:09:f8:cf:5d:56:ff:7c:13:fa:a6:87:e2:
         e6:91:21:96:d8:5d:3a:dd:39:92:d7:6c:0b:0f:10:03:5e:69:
         9f:11:c9:45:58:77:6e:c3:20:78:25:cc:35:ca:c6:6d:25:42:
         2b:6b:6f:54:bf:4b:83:79:81:ca:d9:1c:cb:e4:92:f9:f4:0f:
         cb:30:4e:51:9d:30:54:7c:c4:75:55:40:f5:ee:d1:56:0a:4a:
         b7:9e:43:e2:f4:a5:91:ec:b3:e6:1e:4e:15:da:4a:92:fb:81:
         b9:c4:43:29:04:8c:97:d5:4f:82:8e:20:13:76:e5:54:e3:19:
         e9:96:c6:bd:fd:01:fd:e0:88:89:fb:e9:75:58:be:82:71:25:
         dd:2a:c1:c9:e8:60:a3:7a:68:76:68:13:92:e7:28:ab:52:29:
         8d:45:a5:dd:70:7a:a4:6e:b9:98:60:01:bd:fd:3d:23:b4:31:
         7c:16:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:11 2026 by rpki-client