Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3232342e302f31392d3139203d3e2034383038.roa
File:                     3231312e3130332e3232342e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier:          AC2HuOmFdQ9KH/nMLSejKvB4+Tcfzo9ghyW95TsGlqw=
Subject key identifier:   8F:59:CB:95:21:EC:51:50:5B:35:96:40:A9:7E:DC:2F:D1:A6:EB:03
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       3C5BBB1ED224E7139DE171F6BEC92735167F0E79
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3232342e302f31392d3139203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:35 +0000
ROA not before:           Fri 05 Jun 2026 05:53:35 +0000
ROA not after:            Fri 04 Jun 2027 05:58:35 +0000
asID:                     4808
IP address blocks:        211.103.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5b:bb:1e:d2:24:e7:13:9d:e1:71:f6:be:c9:27:35:16:7f:0e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:35 2026 GMT
            Not After : Jun  4 05:58:35 2027 GMT
        Subject: CN=8F59CB9521EC51505B359640A97EDC2FD1A6EB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:a2:95:03:7c:01:01:d5:22:44:9e:02:69:
                    d6:29:33:4c:8c:9b:4e:72:62:05:5a:2a:16:69:54:
                    49:af:69:e4:b2:78:80:5f:4e:88:81:8e:6f:db:dc:
                    48:ed:50:6a:70:5c:7e:8b:dd:de:ce:4c:59:2e:d0:
                    f8:e0:74:79:7c:81:c4:d8:bf:c6:be:30:1f:59:09:
                    6b:98:19:fe:7c:57:52:b0:49:7e:db:4c:ad:85:96:
                    d7:ff:6d:e2:64:38:97:c4:b5:61:f4:d2:65:ef:89:
                    61:80:c5:3c:43:16:b1:13:ec:b0:60:d7:3a:a7:30:
                    e5:3d:4b:f0:bd:60:c8:e3:82:56:c6:91:0e:9f:37:
                    90:2d:8c:e5:6b:dd:b2:ed:3b:cf:04:33:ab:33:3b:
                    2c:08:f0:49:82:ed:88:f0:05:d7:5b:e0:83:8c:51:
                    48:88:af:28:5d:f1:4f:11:19:1c:e5:c2:b7:5a:e5:
                    0f:a3:ab:06:50:f4:31:fa:86:aa:21:ab:f0:2f:1f:
                    c5:62:57:95:30:58:bd:17:b1:b3:f3:ae:6c:59:6e:
                    88:f2:b8:83:3c:d6:f0:00:8f:71:19:fc:96:1e:93:
                    85:c0:27:0a:6d:f6:3d:95:96:1b:ba:8e:1f:3d:0b:
                    64:b9:05:de:07:b8:44:1c:ec:f8:26:0b:96:a1:e1:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:59:CB:95:21:EC:51:50:5B:35:96:40:A9:7E:DC:2F:D1:A6:EB:03
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3232342e302f31392d3139203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.103.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:30:cb:d5:be:b6:89:3e:cf:2b:e7:5a:85:65:d1:7b:59:a0:
         c2:a6:65:bb:0b:b0:b5:d0:91:90:8d:34:ed:3f:08:88:ee:d2:
         07:fa:ce:e1:e8:3a:e3:1a:a2:93:0a:e9:4e:83:c8:ff:ed:fb:
         97:90:e9:95:69:3b:cb:94:09:b2:de:e1:d7:3c:e3:16:b4:cf:
         ec:af:aa:17:71:d1:e7:54:f6:b1:d2:e2:32:db:f7:47:eb:44:
         6a:93:8e:08:3e:06:2e:a7:39:a8:a8:14:70:b8:97:c9:cc:a3:
         66:99:17:4b:3c:d2:d6:0d:f2:8f:21:cb:f2:01:f5:54:76:09:
         52:77:4d:66:67:15:97:05:a1:90:c5:3b:ac:26:ab:cb:11:b5:
         4a:ba:c8:5a:cf:e5:9a:a4:64:28:35:67:b9:98:08:c8:b5:6f:
         26:ad:ef:77:87:f1:d3:ea:e4:bd:19:dc:c5:e4:a2:1c:10:af:
         dd:01:46:f1:e6:14:55:93:0d:03:73:ea:20:e6:29:f9:ad:6a:
         df:4d:b3:fc:b1:c6:2a:cb:50:ce:ce:89:4f:de:0f:b4:86:1b:
         45:c1:57:8e:72:b1:2b:a0:e2:c0:75:f6:e2:1b:77:88:1c:ca:
         62:6b:bd:27:77:8f:6b:07:15:02:09:42:8c:cb:e6:ec:5c:5e:
         f9:dd:6f:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client