Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa
File:                     3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier:          rJTXW8XbJd9wJUGBMpAq6P/X0FUj0MASMO49W27/Tqw=
Subject key identifier:   AB:95:3B:D6:03:11:4B:90:F5:3D:A9:20:22:58:F7:A7:CE:29:26:B9
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       24BA782C31830C22CDF8B3E222FC1D82AA43B47C
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa
Signing time:             Tue 19 May 2026 07:01:40 +0000
ROA not before:           Tue 19 May 2026 06:56:40 +0000
ROA not after:            Tue 18 May 2027 07:01:40 +0000
asID:                     4808
IP address blocks:        116.242.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:78:2c:31:83:0c:22:cd:f8:b3:e2:22:fc:1d:82:aa:43:b4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 06:56:40 2026 GMT
            Not After : May 18 07:01:40 2027 GMT
        Subject: CN=AB953BD603114B90F53DA9202258F7A7CE2926B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:5e:1f:db:cc:a8:2e:e6:21:84:14:51:c5:
                    3f:0b:66:36:c2:73:3a:07:2f:b9:4d:f3:87:ba:3b:
                    36:1f:e9:ff:94:e0:4f:14:29:60:a3:fa:0c:89:86:
                    96:0a:48:2d:3e:f5:10:89:d1:6c:23:3f:b1:f9:d6:
                    46:26:98:03:51:d6:a0:76:8f:10:ac:62:c7:78:21:
                    19:78:69:85:93:ef:cb:93:2c:29:0b:f7:05:46:a4:
                    d1:89:6e:49:13:8e:2d:da:f8:64:a5:be:b0:4b:2b:
                    fc:e3:3c:36:12:c0:1f:f1:c6:5f:cb:ba:06:1c:bb:
                    d3:19:f7:c0:18:ba:36:bc:1f:10:0f:65:60:33:2c:
                    89:85:51:a9:18:56:b3:a4:39:97:e3:fd:83:0c:9e:
                    70:79:41:05:0f:be:ef:23:81:04:9a:a6:36:b2:93:
                    96:07:b7:ac:b1:67:91:8b:b3:78:cc:32:cc:8d:e7:
                    62:c2:94:ba:ef:aa:8c:d6:40:de:9b:af:d0:eb:58:
                    66:0f:25:96:2d:4c:a4:0b:26:88:46:5a:d8:60:07:
                    d7:69:05:c6:9a:52:15:d1:02:c2:b0:cf:7c:6a:37:
                    7b:23:3e:6e:b7:0a:64:b4:bd:a3:3d:e9:33:ca:17:
                    8e:98:04:db:f5:cf:ea:1f:77:01:a2:01:27:ef:d3:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:3B:D6:03:11:4B:90:F5:3D:A9:20:22:58:F7:A7:CE:29:26:B9
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.242.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3f:26:cd:9e:e9:24:4e:55:22:87:0f:67:f5:96:12:46:4e:ab:
         64:1a:15:36:bf:4f:58:5b:09:bb:79:e1:f6:3c:73:3d:54:1c:
         e9:a4:5f:f0:93:1d:a5:9e:40:ad:84:31:06:a7:f0:0b:68:e6:
         be:43:7a:7f:36:de:4e:e2:7f:0e:92:fe:2b:6a:a5:52:f3:e4:
         3f:1e:a7:24:40:5e:95:f7:8e:02:e4:46:dd:42:8c:8b:a7:45:
         5b:24:36:3c:4a:d0:2a:3c:c1:b8:72:6f:9b:57:06:a3:96:20:
         08:45:bb:8c:a9:b1:29:7f:94:a8:8c:cc:b9:61:96:cf:fe:a2:
         01:41:fa:7d:fd:cf:78:e8:07:4a:1b:1d:c7:55:bd:a0:f4:5c:
         8b:59:37:64:40:58:f7:4a:8e:b6:5e:c6:57:e3:d6:71:84:f7:
         fa:7d:29:9f:83:d8:c0:4d:2a:d5:72:e5:c4:0e:39:56:aa:57:
         2a:34:c9:19:e1:84:f7:64:2e:54:8d:ff:b0:8c:55:1c:19:2d:
         df:76:d7:48:00:13:a6:76:44:47:46:78:27:10:8c:31:e5:41:
         04:cd:3c:25:b5:97:40:49:a1:57:0f:52:64:d9:07:5a:b3:55:
         8b:8d:12:a7:a6:6d:74:d6:5e:f6:56:8e:63:19:c2:ff:ca:a6:
         7a:27:3a:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:14 2026 by rpki-client