Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa
File:                     3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          nC5H7/3cnvSLqEGptGH6553AECcDugvbRJkQZjQubfo=
Subject key identifier:   2C:E8:1B:67:7A:0E:6D:EE:DB:61:D6:DF:99:A4:2C:41:D5:32:A4:3B
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       0B7933B4871783E702843D596B6B4C1F3E0B4BC3
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 09:00:24 +0000
ROA not before:           Thu 04 Jun 2026 08:55:24 +0000
ROA not after:            Thu 03 Jun 2027 09:00:24 +0000
asID:                     4808
IP address blocks:        219.234.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:79:33:b4:87:17:83:e7:02:84:3d:59:6b:6b:4c:1f:3e:0b:4b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  4 08:55:24 2026 GMT
            Not After : Jun  3 09:00:24 2027 GMT
        Subject: CN=2CE81B677A0E6DEEDB61D6DF99A42C41D532A43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:26:e8:68:fc:33:e6:e2:56:f0:a3:d1:9d:
                    f1:96:91:6b:d5:a2:de:ee:73:22:89:2d:71:97:4e:
                    38:40:f9:50:28:7f:26:ae:90:d9:a8:91:c4:a5:bd:
                    4e:a7:58:00:be:e3:07:29:40:7e:60:ba:8f:6b:8b:
                    9b:b1:71:e7:f1:c9:a2:b2:ab:e5:4f:35:04:3c:54:
                    d6:4f:60:23:de:52:57:b2:04:6a:a5:2a:48:6b:5a:
                    37:73:cd:40:3f:31:7f:56:03:12:e2:4b:5f:4c:79:
                    2a:7c:a7:f3:e7:f4:18:dc:40:37:80:e6:ee:fb:ec:
                    ec:8f:12:a4:b4:d0:8c:b8:23:a4:9d:ae:fb:b0:2e:
                    94:75:e0:57:72:eb:60:02:a4:3e:de:e0:40:ac:5c:
                    bd:33:60:2d:04:c0:a3:20:dc:8d:5a:f4:78:34:76:
                    c9:fa:eb:e1:47:58:1d:de:56:cb:a7:25:9d:c2:3f:
                    bd:dd:2a:6a:88:6f:c2:2d:4b:22:98:a7:37:c9:f5:
                    84:b8:6b:0b:35:aa:4c:60:5c:b6:12:e5:c5:74:4b:
                    17:b2:7f:9f:5d:03:96:7e:0d:d0:57:12:d0:f2:0d:
                    a8:83:af:11:98:a2:89:5b:bc:6b:e2:bc:f9:45:07:
                    82:9a:52:9e:6f:c5:2f:d4:20:63:39:82:3c:b2:72:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E8:1B:67:7A:0E:6D:EE:DB:61:D6:DF:99:A4:2C:41:D5:32:A4:3B
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.234.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:d0:ce:7c:5e:c4:a0:49:16:1f:56:72:0e:7d:e7:69:12:15:
         20:88:04:c8:71:8b:a5:bb:ca:e6:37:78:6f:8c:0c:e5:3f:1d:
         3e:0d:ec:b3:8c:ab:1a:58:0a:ab:49:27:e6:ef:f0:f2:37:44:
         c1:17:6a:d6:df:07:62:c4:e4:76:db:12:4c:47:fe:da:e8:5e:
         a0:9f:80:d3:cf:02:3c:b9:eb:aa:d2:0f:f9:6c:8c:e2:5a:e2:
         a2:92:c0:60:5e:8d:b3:38:9d:a5:c4:73:15:70:64:c2:c2:d4:
         55:3c:ce:12:5c:23:40:50:78:d4:e0:57:da:ed:7a:10:7b:a9:
         e9:1c:ca:aa:ba:ae:49:d9:76:fa:bb:13:5a:9c:87:17:54:8f:
         d9:d7:3d:0b:c8:00:2b:b4:fe:57:9e:fd:ae:0a:b1:29:f4:90:
         8b:53:27:36:6d:fe:03:66:c1:0b:ed:89:d9:9f:81:a9:06:9d:
         5b:c3:be:c5:dc:71:fd:e3:ca:8d:e7:a4:c4:2f:b3:9e:1c:7a:
         29:9a:32:88:cf:ba:e4:50:4e:1d:74:34:9d:ef:9a:c6:81:ec:
         5e:8c:1c:ac:07:4c:90:55:eb:01:f8:0d:37:d7:b4:99:ab:21:
         d6:e3:e9:29:94:73:5b:a0:19:20:d0:37:17:dc:ef:3a:ed:2b:
         c9:bf:54:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client