Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383437.roa
File:                     3131362e3234322e3132382e302f31372d3137203d3e2034383437.roa (raw, json)
Hash identifier:          peH82W47QaPnXKpU3UgDXsvHwyA7lJNNW/ktnrbSnlQ=
Subject key identifier:   4C:3A:38:26:EF:54:C5:0C:29:5F:CF:8A:56:40:2B:79:7E:A0:A8:D5
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       50B4AF6E213DA5FD7C1EDCB127076B63EBF02298
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383437.roa
Signing time:             Tue 19 May 2026 07:01:57 +0000
ROA not before:           Tue 19 May 2026 06:56:57 +0000
ROA not after:            Tue 18 May 2027 07:01:57 +0000
asID:                     4847
IP address blocks:        116.242.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:af:6e:21:3d:a5:fd:7c:1e:dc:b1:27:07:6b:63:eb:f0:22:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 06:56:57 2026 GMT
            Not After : May 18 07:01:57 2027 GMT
        Subject: CN=4C3A3826EF54C50C295FCF8A56402B797EA0A8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:f5:42:d7:6d:57:ef:51:b6:7d:27:8a:3e:
                    31:b6:ff:8f:3f:45:cf:cf:57:ba:3f:1d:1e:97:85:
                    6a:9a:35:3f:a6:c9:31:63:61:15:48:31:aa:19:07:
                    12:7a:7a:1a:f1:9e:2a:3a:b0:e3:0f:14:7a:36:53:
                    3b:8e:e7:77:7c:40:2f:5b:0b:2f:84:6e:67:f5:f8:
                    70:f7:95:a7:42:47:97:c0:77:2a:7b:c7:13:7d:04:
                    68:6f:6c:4f:17:cd:d8:af:8d:ab:b5:c5:6c:a0:0d:
                    5e:ee:40:cf:23:19:41:b6:ed:e1:53:30:b8:53:89:
                    a5:95:bd:0c:a5:28:2d:08:9f:2c:91:2d:44:45:01:
                    d4:49:97:91:81:47:cc:75:ce:10:08:b2:ff:32:64:
                    e4:ef:09:0e:80:17:72:d8:44:34:8e:87:48:cf:bb:
                    ac:14:95:33:23:1b:de:9d:78:8f:1d:31:6b:1c:62:
                    5f:56:87:58:76:f7:f0:31:a7:1c:13:68:0d:b7:5f:
                    f2:e1:b0:c2:70:0f:c6:a3:81:56:6d:e8:52:e1:21:
                    6c:d0:0a:82:a9:fb:bb:a5:33:90:7f:e3:b2:17:c8:
                    b6:75:af:a9:0b:c0:8f:19:1c:fb:e2:6f:6d:81:b4:
                    e3:7a:ee:f4:b6:ec:a6:cc:60:14:09:98:7f:f3:64:
                    c3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:38:26:EF:54:C5:0C:29:5F:CF:8A:56:40:2B:79:7E:A0:A8:D5
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.242.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:b0:ee:29:47:04:59:ff:99:10:ec:a7:f9:a0:21:8b:7c:
         26:8f:ec:eb:0d:8c:64:6c:3a:23:7d:21:38:bc:ad:04:2d:67:
         86:8d:80:ba:67:b7:2f:c1:34:86:6b:6c:3f:81:4c:c3:95:0c:
         67:c6:42:55:22:4b:b1:c9:b0:e8:58:00:52:e2:7d:83:a8:04:
         6f:a5:b1:1a:98:c5:a3:44:b5:98:cf:81:48:de:3a:9f:75:09:
         f8:26:70:a0:3d:4d:8d:2d:b0:5b:4b:2a:b8:47:42:8e:04:00:
         1f:d6:d3:83:aa:5f:54:97:60:ad:f5:da:89:62:17:cc:98:b9:
         7b:1a:7d:60:59:c9:01:ec:8d:bb:0b:9d:63:51:3d:ce:a3:71:
         04:85:af:e3:ac:82:31:7e:18:eb:5d:48:13:18:2f:40:7a:10:
         05:d7:f4:e4:ce:a6:35:89:4d:2d:b1:ca:f0:95:cc:fe:7c:1d:
         38:10:51:4b:c1:48:e1:82:f8:03:55:c8:1b:67:03:d7:78:71:
         a7:9a:ce:b1:fc:0d:b7:a0:5e:5d:d6:29:78:d2:e5:e3:41:80:
         71:15:c7:16:3a:25:ee:40:68:57:34:5f:a4:01:0c:a9:63:f4:
         44:8b:28:8c:e1:6a:f2:f8:e4:2f:f7:36:c8:2f:bf:20:20:9c:
         7d:f9:71:92
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUULSvbiE9pf18HtyxJwdrY+vwIpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA1MTkwNjU2NTdaFw0yNzA1MTgwNzAxNTdaMDMxMTAvBgNV
BAMTKDRDM0EzODI2RUY1NEM1MEMyOTVGQ0Y4QTU2NDAyQjc5N0VBMEE4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrvVC121X71G2fSeKPjG2/48/
Rc/PV7o/HR6XhWqaNT+myTFjYRVIMaoZBxJ6ehrxnio6sOMPFHo2UzuO53d8QC9b
Cy+Ebmf1+HD3ladCR5fAdyp7xxN9BGhvbE8Xzdivjau1xWygDV7uQM8jGUG27eFT
MLhTiaWVvQylKC0InyyRLURFAdRJl5GBR8x1zhAIsv8yZOTvCQ6AF3LYRDSOh0jP
u6wUlTMjG96deI8dMWscYl9Wh1h29/AxpxwTaA23X/LhsMJwD8ajgVZt6FLhIWzQ
CoKp+7ulM5B/47IXyLZ1r6kLwI8ZHPvib22BtON67vS27KbMYBQJmH/zZMNjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUTDo4Ju9UxQwpX8+KVkAreX6gqNUwHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMxMzEzNjJlMzIz
NDMyMmUzMTMyMzgyZTMwMmYzMTM3MmQzMTM3MjAzZDNlMjAzNDM4MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEB3TygDANBgkqhkiG9w0BAQsFAAOCAQEAam6w7ilHBFn/mRDsp/mgIYt8
Jo/s6w2MZGw6I30hOLytBC1nho2Aume3L8E0hmtsP4FMw5UMZ8ZCVSJLscmw6FgA
UuJ9g6gEb6WxGpjFo0S1mM+BSN46n3UJ+CZwoD1NjS2wW0squEdCjgQAH9bTg6pf
VJdgrfXaiWIXzJi5exp9YFnJAeyNuwudY1E9zqNxBIWv46yCMX4Y611IExgvQHoQ
Bdf05M6mNYlNLbHK8JXM/nwdOBBRS8FI4YL4A1XIG2cD13hxp5rOsfwNt6BeXdYp
eNLl40GAcRXHFjol7kBoVzRfpAEMqWP0RIsojOFq8vjkL/c2yC+/ICCcfflxkg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:14 2026 by rpki-client