Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230362e302e302f31372d3137203d3e2034383038.roa
File:                     3132342e3230362e302e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier:          ++Jxs5VijKvnohXFU0SIiQq8xT1tzTiv7hgZRrIa20s=
Subject key identifier:   A0:4D:FF:83:B2:6C:8A:4F:99:88:4A:0B:CD:E2:01:F7:F1:5D:92:B5
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       07DF207642E0888E2BCAD68C2123AEE780BD3FFC
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230362e302e302f31372d3137203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:20 +0000
ROA not before:           Fri 05 Jun 2026 05:53:20 +0000
ROA not after:            Fri 04 Jun 2027 05:58:20 +0000
asID:                     4808
IP address blocks:        124.206.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:df:20:76:42:e0:88:8e:2b:ca:d6:8c:21:23:ae:e7:80:bd:3f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:20 2026 GMT
            Not After : Jun  4 05:58:20 2027 GMT
        Subject: CN=A04DFF83B26C8A4F99884A0BCDE201F7F15D92B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:5b:71:38:99:ff:00:81:23:b0:df:a5:d5:
                    df:7c:16:e4:10:e7:7a:76:25:62:2e:84:be:aa:1e:
                    7c:56:64:25:dc:78:e9:d9:93:0e:b9:c0:e5:ef:19:
                    16:5c:ed:8a:fb:d8:6f:e1:63:48:24:e1:19:a5:76:
                    e5:c8:3c:3f:12:05:88:f0:08:eb:04:45:10:bb:fb:
                    99:5b:63:79:a6:9f:63:a6:37:5d:a9:82:bb:e0:16:
                    b8:d4:c7:c8:69:67:16:74:27:34:23:46:0f:31:c6:
                    29:7d:e3:55:ef:15:30:5b:d3:0e:62:ac:2e:24:18:
                    2c:24:a9:d8:9c:e2:76:85:e9:ef:a1:bc:43:36:f8:
                    41:90:4f:ab:a2:ad:2e:61:ea:c1:13:d3:92:3f:03:
                    e7:47:37:b0:61:d8:18:65:76:37:4d:03:53:c4:3c:
                    d4:ca:72:4d:78:57:5d:a8:d2:2f:37:78:39:2e:e8:
                    a8:91:22:7b:37:58:b9:c0:42:63:c7:00:9d:7c:4e:
                    9d:a7:4f:ed:c6:03:31:1d:f2:2d:35:a8:88:b6:49:
                    64:bd:91:ce:98:8d:09:38:05:b1:97:39:ca:7c:41:
                    f8:7a:90:11:b4:9e:34:40:18:ae:82:19:5d:89:66:
                    82:22:df:d9:f1:f0:9d:ce:4f:46:d6:30:4f:0d:3d:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:FF:83:B2:6C:8A:4F:99:88:4A:0B:CD:E2:01:F7:F1:5D:92:B5
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230362e302e302f31372d3137203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.206.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:d4:a6:e1:fe:81:7c:26:1b:5b:35:e9:88:24:27:40:24:d0:
         e3:5f:52:9e:16:fd:e4:e5:15:b6:2c:ab:00:ff:5f:8f:1c:c5:
         c9:ae:78:b8:22:0e:ca:d9:f2:f9:cf:59:34:84:69:42:12:dc:
         f1:c8:b6:10:b2:2e:6d:fd:60:86:de:ca:99:8f:83:ef:71:ff:
         e5:3f:9a:dd:5b:7e:98:df:56:7c:5a:38:6c:5f:38:f5:1f:c4:
         70:7c:84:7f:5e:34:d6:df:bd:90:6e:c4:a6:7f:a8:0f:3d:ed:
         20:57:70:cb:1c:58:a9:5a:53:79:14:8b:a4:95:18:50:1f:a5:
         fe:d0:51:3d:a2:56:c9:99:b1:60:56:67:2b:4f:1f:94:3b:d9:
         e1:85:ca:7a:d8:69:7a:76:b4:31:df:61:fd:f9:8d:2b:fa:9b:
         a9:ed:2b:13:37:51:59:3c:04:68:58:26:dc:ad:ff:ba:d8:e7:
         1a:60:53:e4:d9:7e:1f:93:a5:13:2e:84:99:58:20:99:c7:70:
         bb:dc:59:24:f8:6f:a3:53:33:16:02:19:67:09:56:8e:72:c4:
         49:f5:02:b4:f6:34:4d:1b:ab:ed:f5:9f:75:48:a2:0b:5b:47:
         44:14:4a:80:88:95:cf:2c:64:f4:bd:ac:9f:70:34:f2:c9:40:
         3b:a5:38:19
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUB98gdkLgiI4rytaMISOu54C9P/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA2MDUwNTUzMjBaFw0yNzA2MDQwNTU4MjBaMDMxMTAvBgNV
BAMTKEEwNERGRjgzQjI2QzhBNEY5OTg4NEEwQkNERTIwMUY3RjE1RDkyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7vltxOJn/AIEjsN+l1d98FuQQ
53p2JWIuhL6qHnxWZCXceOnZkw65wOXvGRZc7Yr72G/hY0gk4RmlduXIPD8SBYjw
COsERRC7+5lbY3mmn2OmN12pgrvgFrjUx8hpZxZ0JzQjRg8xxil941XvFTBb0w5i
rC4kGCwkqdic4naF6e+hvEM2+EGQT6uirS5h6sET05I/A+dHN7Bh2BhldjdNA1PE
PNTKck14V12o0i83eDku6KiRIns3WLnAQmPHAJ18Tp2nT+3GAzEd8i01qIi2SWS9
kc6YjQk4BbGXOcp8Qfh6kBG0njRAGK6CGV2JZoIi39nx8J3OT0bWME8NPWfrAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUoE3/g7Jsik+ZiEoLzeIB9/FdkrUwHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMjMw
MzYyZTMwMmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAd8zgAwDQYJKoZIhvcNAQELBQADggEBACfUpuH+gXwmG1s16YgkJ0Ak0ONfUp4W
/eTlFbYsqwD/X48cxcmueLgiDsrZ8vnPWTSEaUIS3PHIthCyLm39YIbeypmPg+9x
/+U/mt1bfpjfVnxaOGxfOPUfxHB8hH9eNNbfvZBuxKZ/qA897SBXcMscWKlaU3kU
i6SVGFAfpf7QUT2iVsmZsWBWZytPH5Q72eGFynrYaXp2tDHfYf35jSv6m6ntKxM3
UVk8BGhYJtyt/7rY5xpgU+TZfh+TpRMuhJlYIJnHcLvcWST4b6NTMxYCGWcJVo5y
xEn1ArT2NE0bq+31n3VIogtbR0QUSoCIlc8sZPS9rJ9wNPLJQDulOBk=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:39 2026 by rpki-client