Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e302e302f31372d3137203d3e2034383038.roa
File:                     3132342e3230372e302e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier:          roTEA9RLSy+iKxtjSYQjcdX/jnpoZ8vwBSGyATGNenI=
Subject key identifier:   4E:A4:DB:69:33:8A:C5:13:67:FF:69:DF:DA:38:A4:D3:A2:45:D0:B6
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       539CA171F9C3123D7CAE06D9BC7EDFDD8018699A
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e302e302f31372d3137203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:35 +0000
ROA not before:           Fri 05 Jun 2026 05:53:35 +0000
ROA not after:            Fri 04 Jun 2027 05:58:35 +0000
asID:                     4808
IP address blocks:        124.207.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:a1:71:f9:c3:12:3d:7c:ae:06:d9:bc:7e:df:dd:80:18:69:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:35 2026 GMT
            Not After : Jun  4 05:58:35 2027 GMT
        Subject: CN=4EA4DB69338AC51367FF69DFDA38A4D3A245D0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:e5:7d:57:cd:22:aa:2c:61:62:5b:67:3f:
                    c0:a2:88:a2:f3:00:41:52:a6:5c:37:87:8d:54:fb:
                    1b:14:7a:68:fe:8c:7e:57:6a:91:bb:13:76:33:41:
                    68:8e:31:4b:79:c0:43:12:98:ab:b5:96:23:f3:1a:
                    43:ac:05:ae:07:0f:95:9d:91:c6:1a:87:75:c3:22:
                    61:2b:a6:c3:95:e8:40:7a:75:57:08:cb:72:ec:45:
                    5a:b6:25:a7:fd:dd:57:96:05:1f:11:a2:9c:20:81:
                    d7:4d:74:4e:b9:db:4f:a6:c4:26:1f:48:29:5c:61:
                    13:8b:d4:16:bb:e2:67:60:4a:7d:31:e0:0e:9f:e6:
                    3b:49:ad:2c:b1:16:12:6d:65:2b:20:3f:41:e6:d5:
                    e7:c8:6f:8d:e2:ec:49:56:b4:0e:31:ec:34:1e:25:
                    c1:35:0a:a6:1a:22:29:96:de:11:9a:cb:c7:af:0d:
                    f5:3d:13:4f:68:7d:c7:ee:f5:e0:9c:e3:b2:d0:1d:
                    e9:9a:e1:2d:ca:52:89:34:8b:fc:22:6c:f0:c3:99:
                    da:3e:56:76:b6:f3:a2:fa:6b:06:07:9d:ff:a7:81:
                    a5:02:31:01:6d:08:b1:7b:cc:87:96:8d:f3:5a:88:
                    fb:9a:7d:05:50:a5:bb:10:8b:ad:3e:ed:94:c6:2b:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:DB:69:33:8A:C5:13:67:FF:69:DF:DA:38:A4:D3:A2:45:D0:B6
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e302e302f31372d3137203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.207.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:d3:6e:f5:5e:f2:51:74:c9:ee:74:a7:c4:cb:6e:84:9c:
         ed:6e:19:2c:b1:1d:4c:15:ec:81:c1:a5:ee:5c:0b:ed:03:51:
         68:66:68:a8:fb:28:b7:46:8c:77:e3:1c:f0:86:41:80:ca:ec:
         97:9d:a7:f1:6f:b7:cb:30:e4:e1:3a:35:20:89:67:2b:2d:1f:
         27:d9:2c:44:64:3b:d2:d6:a5:8a:90:75:cb:7d:81:14:e6:fd:
         07:8f:a8:2d:2e:de:1a:e9:9b:2a:cc:96:65:0e:66:c7:87:2a:
         6d:10:28:db:68:fb:30:94:1c:5e:31:57:d6:b4:aa:da:1a:ef:
         d7:2a:34:67:6c:d9:16:bf:e2:da:79:66:6b:74:3d:58:39:25:
         62:af:4e:45:15:4e:66:87:61:30:86:87:8c:99:a2:ff:e5:a5:
         b2:fe:de:b8:92:96:4a:65:eb:60:93:e9:61:b9:e3:d3:6f:93:
         2b:6c:60:b4:5b:5f:e6:27:f5:94:2f:51:aa:0b:0e:81:b9:f0:
         12:03:39:44:d3:0a:37:d3:fb:dd:62:2b:4b:d7:69:ba:5e:1b:
         6f:7e:56:6d:2b:6d:1f:7e:39:f4:33:b4:0d:df:d6:ed:9a:9e:
         09:30:92:4b:18:90:14:d8:e2:5f:4d:49:f1:8f:6b:0a:65:c7:
         ac:88:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:40 2026 by rpki-client