Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131382e3234342e3136302e302f31392d3139203d3e2034383038.roa
File:                     3131382e3234342e3136302e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier:          x7vskMpgWJQD93DX8EHuJ6m+HLbSidVu+7I2ZMifwWY=
Subject key identifier:   CC:8A:31:B6:80:B2:59:14:C8:B0:28:08:FD:B0:54:B0:59:C7:95:2F
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       2BEF7E96615B575D1BA1D136AA4009C7E828525E
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131382e3234342e3136302e302f31392d3139203d3e2034383038.roa
Signing time:             Mon 18 May 2026 03:29:23 +0000
ROA not before:           Mon 18 May 2026 03:24:23 +0000
ROA not after:            Mon 17 May 2027 03:29:23 +0000
asID:                     4808
IP address blocks:        118.244.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:7e:96:61:5b:57:5d:1b:a1:d1:36:aa:40:09:c7:e8:28:52:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 18 03:24:23 2026 GMT
            Not After : May 17 03:29:23 2027 GMT
        Subject: CN=CC8A31B680B25914C8B02808FDB054B059C7952F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:8d:f3:61:a8:34:90:58:46:fb:9f:83:e0:
                    dc:84:ca:68:db:06:61:4d:2e:0b:71:eb:d9:8f:57:
                    b0:95:7a:96:9d:2c:af:bf:b0:cb:d2:e2:e6:f0:2b:
                    8d:91:ac:8d:58:5f:20:07:71:a3:c4:3d:18:39:e0:
                    50:75:2a:b9:28:06:c4:fd:b9:e7:1f:d9:18:de:29:
                    07:ca:d4:33:e1:bc:43:de:fd:1b:ee:fc:a0:5f:71:
                    d6:f0:33:3c:d8:4c:b8:26:29:ea:dd:60:d7:7f:a9:
                    e2:11:85:06:d2:15:b3:05:2f:11:63:67:ec:c6:54:
                    3d:f8:79:34:0d:ae:1c:83:7b:df:dd:b7:e7:69:eb:
                    e1:c1:26:fc:10:df:42:85:90:b0:06:4d:5b:7b:96:
                    33:3e:08:02:55:a4:5d:73:36:df:0c:40:c7:5f:ea:
                    6f:cd:7e:ee:39:b1:29:95:ea:b0:39:3b:ba:14:ab:
                    66:7c:e0:e4:21:45:ab:77:49:8b:4a:a4:42:63:8c:
                    9c:b2:51:17:94:a6:9e:04:a3:4d:c4:1c:a6:34:22:
                    2f:0a:b9:25:cc:a2:e9:41:01:fc:17:8c:8a:3b:de:
                    58:18:ae:99:e0:a6:47:dc:3c:e5:45:e2:9d:ad:d2:
                    96:c5:e5:b6:dd:06:35:78:29:eb:47:b4:15:d1:0f:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8A:31:B6:80:B2:59:14:C8:B0:28:08:FD:B0:54:B0:59:C7:95:2F
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131382e3234342e3136302e302f31392d3139203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.244.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:e7:83:95:dc:1d:40:40:87:76:09:ad:51:58:36:7f:65:1b:
         ef:80:8c:84:03:7f:dd:eb:b8:e1:84:14:f5:31:c3:3e:74:3e:
         00:97:9a:a1:6a:a8:2d:83:69:db:47:ff:20:ed:be:d6:11:10:
         41:88:e9:18:17:4b:b9:3c:6d:f6:ea:fc:d8:55:f1:26:34:f4:
         61:a1:15:3b:8b:17:d2:64:52:aa:a2:cc:e6:65:21:d8:ab:01:
         17:c8:ea:6e:ef:22:b3:36:06:f0:48:eb:db:dd:b1:7e:29:3e:
         96:57:62:7f:4a:a7:4f:04:d8:27:99:92:5f:2c:f3:05:0a:ad:
         14:ce:9e:80:e5:42:ff:1c:df:6c:3e:62:c4:45:cf:f1:af:4b:
         d9:df:cb:db:46:51:7d:ab:ad:34:83:08:cc:c2:ce:75:ab:bf:
         1a:ce:49:41:e9:c7:a3:82:81:51:3f:f9:ef:64:6c:ab:a6:ee:
         8e:95:f7:ef:f7:2d:e3:66:f5:c3:ed:7d:24:27:ff:64:6b:68:
         63:42:96:3e:ea:ba:65:b7:64:da:a9:0d:f2:06:e5:5e:26:4f:
         61:8c:2a:cc:4f:d5:a4:24:bf:6f:3d:34:d6:94:ec:2c:77:3f:
         d8:19:e9:e5:29:d4:f5:e9:68:14:9d:f5:f5:07:d2:1a:70:ca:
         69:45:ce:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client