Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e302e302f31382d3138203d3e2034383038.roa
File:                     3132342e3230342e302e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          6X858PLcAHJyUQD47/DI/ZIHIqei1d5GmMNMBRJABxc=
Subject key identifier:   61:EF:85:DD:6D:03:98:05:5E:93:CA:C6:12:45:F4:7F:36:1F:46:5C
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       161A500F7FEB2971054247E4992DFE8F29F03AB2
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e302e302f31382d3138203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:21 +0000
ROA not before:           Fri 05 Jun 2026 05:53:21 +0000
ROA not after:            Fri 04 Jun 2027 05:58:21 +0000
asID:                     4808
IP address blocks:        124.204.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1a:50:0f:7f:eb:29:71:05:42:47:e4:99:2d:fe:8f:29:f0:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:21 2026 GMT
            Not After : Jun  4 05:58:21 2027 GMT
        Subject: CN=61EF85DD6D0398055E93CAC61245F47F361F465C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:af:45:d7:04:c8:80:79:52:67:6c:d4:82:
                    4c:d3:ac:62:54:01:07:71:82:b5:6d:57:c2:49:4c:
                    c4:cc:7b:c6:76:c6:87:8d:84:fb:e7:95:c5:61:e4:
                    b5:e0:4b:b0:02:53:88:16:6f:74:fc:21:02:6c:24:
                    5b:57:34:a9:24:99:42:3f:f6:72:84:e5:2a:38:8f:
                    46:30:42:c7:a4:f6:d0:4d:10:38:c3:c8:7b:b9:ca:
                    00:3b:61:0b:98:bf:2a:b1:67:08:c1:5c:3b:b2:d8:
                    24:38:64:c2:47:95:43:d5:40:83:55:b0:a8:df:3d:
                    25:b6:99:96:77:f8:72:5f:fe:8c:cf:45:45:f7:6c:
                    02:07:1c:71:f3:62:96:36:81:fd:e0:d1:c1:91:35:
                    e3:ff:af:49:2c:b5:21:fd:52:9b:f8:4e:2f:ad:b0:
                    16:41:b0:9d:13:ee:5d:0d:29:2d:0a:81:89:24:62:
                    37:2f:25:37:b2:03:db:ab:30:1c:be:de:9a:a6:b2:
                    23:79:8d:5d:fe:06:79:2a:96:1e:36:06:cd:84:5d:
                    12:0a:94:46:31:9b:c1:d4:15:39:00:80:38:98:6f:
                    4e:ee:af:09:2a:6e:3c:d3:eb:db:98:41:9f:10:79:
                    ab:eb:6b:72:ab:37:9f:f9:79:ec:0c:79:c9:fc:0b:
                    6a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EF:85:DD:6D:03:98:05:5E:93:CA:C6:12:45:F4:7F:36:1F:46:5C
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e302e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.204.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:18:5b:75:76:b0:17:b5:ab:9e:71:19:db:f5:b6:1b:01:97:
         45:3f:bb:25:65:17:86:18:89:07:ff:41:07:68:ac:e7:ec:ef:
         00:f3:08:b7:9a:13:bb:a6:aa:ec:64:61:ba:92:82:8b:a6:9a:
         5f:4e:03:4b:09:b7:15:34:1f:65:dd:dc:6f:79:14:c7:48:db:
         8b:0f:f3:74:4f:a6:58:29:98:2f:33:15:79:b6:14:03:f7:49:
         fb:01:99:40:80:2f:32:0d:7d:e4:2e:b5:98:a0:c3:a7:1e:ac:
         1f:71:dd:fe:da:b3:d9:42:dd:3d:13:34:42:82:7b:26:77:88:
         ae:49:05:2a:eb:01:b0:b3:a8:84:69:9f:90:b0:8f:c6:6a:38:
         26:1e:b2:25:92:bf:69:93:5c:26:5a:30:cd:e2:b6:89:98:23:
         ce:cf:53:d1:ff:8a:1c:48:09:48:fc:5d:df:7d:b0:b5:e9:b0:
         f9:53:8d:6a:a8:60:05:24:0b:17:0b:53:fc:8d:c1:b6:c0:54:
         69:82:c6:9a:99:48:03:ce:0a:8d:bf:c2:b4:c8:e3:9e:6a:19:
         cf:f3:49:83:36:e4:18:88:c9:a9:c8:3e:51:92:08:b3:68:10:
         f9:af:3a:f3:6a:73:f2:da:8a:67:93:9b:5a:fc:53:f6:97:ce:
         b0:8f:3e:74
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUFhpQD3/rKXEFQkfkmS3+jynwOrIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA2MDUwNTUzMjFaFw0yNzA2MDQwNTU4MjFaMDMxMTAvBgNV
BAMTKDYxRUY4NURENkQwMzk4MDU1RTkzQ0FDNjEyNDVGNDdGMzYxRjQ2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnK9F1wTIgHlSZ2zUgkzTrGJU
AQdxgrVtV8JJTMTMe8Z2xoeNhPvnlcVh5LXgS7ACU4gWb3T8IQJsJFtXNKkkmUI/
9nKE5So4j0YwQsek9tBNEDjDyHu5ygA7YQuYvyqxZwjBXDuy2CQ4ZMJHlUPVQINV
sKjfPSW2mZZ3+HJf/ozPRUX3bAIHHHHzYpY2gf3g0cGRNeP/r0kstSH9Upv4Ti+t
sBZBsJ0T7l0NKS0KgYkkYjcvJTeyA9urMBy+3pqmsiN5jV3+Bnkqlh42Bs2EXRIK
lEYxm8HUFTkAgDiYb07urwkqbjzT69uYQZ8Qeavra3KrN5/5eewMecn8C2rxAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUYe+F3W0DmAVek8rGEkX0fzYfRlwwHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMjMw
MzQyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZ8zAAwDQYJKoZIhvcNAQELBQADggEBAC8YW3V2sBe1q55xGdv1thsBl0U/uyVl
F4YYiQf/QQdorOfs7wDzCLeaE7umquxkYbqSgoumml9OA0sJtxU0H2Xd3G95FMdI
24sP83RPplgpmC8zFXm2FAP3SfsBmUCALzINfeQutZigw6cerB9x3f7as9lC3T0T
NEKCeyZ3iK5JBSrrAbCzqIRpn5Cwj8ZqOCYesiWSv2mTXCZaMM3itomYI87PU9H/
ihxICUj8Xd99sLXpsPlTjWqoYAUkCxcLU/yNwbbAVGmCxpqZSAPOCo2/wrTI455q
Gc/zSYM25BiIyanIPlGSCLNoEPmvOvNqc/LaimeTm1r8U/aXzrCPPnQ=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:41 2026 by rpki-client