Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa
File:                     3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa (raw, json)
Hash identifier:          SUm09CiU9BPA23wUPS1Z9BLjf2zqHP16ZbSvtyqmKxI=
Subject key identifier:   81:B6:A8:71:4B:6C:AD:94:CD:B1:4D:C2:8F:4A:2A:20:A0:A6:69:8F
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       39803A9D1AF52143FAA2E1FA02A3B86C07D36517
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:57:32 +0000
ROA not before:           Fri 05 Jun 2026 05:52:32 +0000
ROA not after:            Fri 04 Jun 2027 05:57:32 +0000
asID:                     4808
IP address blocks:        211.100.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:80:3a:9d:1a:f5:21:43:fa:a2:e1:fa:02:a3:b8:6c:07:d3:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:52:32 2026 GMT
            Not After : Jun  4 05:57:32 2027 GMT
        Subject: CN=81B6A8714B6CAD94CDB14DC28F4A2A20A0A6698F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:bc:c4:41:48:9c:7f:f0:aa:81:21:d1:50:
                    d9:4d:e9:cc:e6:55:65:dd:51:81:26:bc:ac:cc:c8:
                    f3:34:be:a5:bc:9a:93:0d:1a:9b:33:0a:0f:f4:f1:
                    27:c8:af:b0:f7:fe:05:0b:d5:31:37:db:7d:d0:df:
                    36:cb:61:6d:3c:46:e8:b8:2f:67:14:7a:66:2d:37:
                    33:83:81:67:b5:c2:0a:ca:c3:e0:68:b3:f2:14:30:
                    9e:0d:2d:aa:d4:67:0e:b5:a0:71:7d:49:3a:4e:3a:
                    ec:57:fa:45:65:d6:24:8b:c4:1f:29:65:49:c5:2c:
                    88:38:0e:94:eb:06:09:74:ad:6c:59:42:a0:e0:94:
                    6d:5b:24:4b:12:24:37:e8:b4:9c:81:06:07:67:a7:
                    ad:9e:16:2a:7c:d3:2c:a7:17:fa:83:e1:07:40:d1:
                    97:fd:bd:b3:ea:91:a5:55:cf:8c:01:50:fe:3c:35:
                    e3:63:e9:54:b6:55:92:94:dd:c8:a1:19:e7:cb:5a:
                    f0:b1:91:26:2d:c9:ee:43:71:e4:d1:05:72:cc:2d:
                    0d:5e:e7:f1:7e:c6:ae:46:5d:6d:6a:bc:ca:23:4b:
                    6c:a1:1a:55:9f:78:97:c7:3b:5a:86:c4:88:ea:39:
                    8a:6d:68:2f:06:dc:02:aa:92:c0:c2:9e:9c:76:aa:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B6:A8:71:4B:6C:AD:94:CD:B1:4D:C2:8F:4A:2A:20:A0:A6:69:8F
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.100.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:a8:55:0f:be:80:ad:55:ec:18:db:b3:7b:3c:b9:75:47:
         92:d3:a6:a2:e9:ca:00:30:15:8e:58:87:b9:12:f3:0a:b2:62:
         2a:5b:c5:cc:2d:91:fa:40:18:0d:45:4a:fb:c1:76:1d:81:07:
         5c:70:cb:56:76:f7:a6:d9:48:ac:45:e7:cb:c6:10:94:a4:3c:
         68:55:fa:61:f1:0d:0b:9a:ea:ac:08:a6:bd:fc:66:1b:cb:3a:
         f0:34:89:57:a0:81:29:51:e5:d3:81:a8:84:cb:82:ac:05:b6:
         bb:bf:d4:44:83:04:b1:92:5d:4a:16:48:95:8a:9a:f6:22:9a:
         39:69:52:fb:43:bb:c2:b5:18:8c:e3:06:e8:74:fa:f2:48:cb:
         8a:47:fc:dd:51:c7:7f:9c:c7:07:22:a6:7d:12:20:f5:79:36:
         64:39:35:02:d7:bf:33:9d:7a:3b:b1:11:0b:7c:1d:a3:e1:0c:
         05:f4:4c:c5:04:10:dc:b0:80:67:90:89:e4:77:cf:40:19:0e:
         ea:45:59:47:b1:24:3d:e0:ab:07:cd:0b:bb:83:66:b3:be:90:
         13:06:34:a1:e1:77:f1:a9:c6:65:0e:e7:25:8f:8f:2b:17:3d:
         6d:cc:1d:cc:1f:78:2c:4b:d4:08:8c:44:9d:04:ee:9b:04:bc:
         27:3f:70:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:36 2026 by rpki-client