Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3139322e302f31382d3138203d3e2034383038.roa
File:                     3231392e3233342e3139322e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          UE0Z2DiX0/Z88B05AgfQY7PWNNykosZ67Os8oyopg7s=
Subject key identifier:   B8:DF:01:61:C2:2D:0E:03:B2:94:62:17:71:98:7E:C3:99:05:57:EB
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       301A8AB6025B3F134BE7A07DB9D8E25987D4D44E
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3139322e302f31382d3138203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 09:00:25 +0000
ROA not before:           Thu 04 Jun 2026 08:55:25 +0000
ROA not after:            Thu 03 Jun 2027 09:00:25 +0000
asID:                     4808
IP address blocks:        219.234.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:1a:8a:b6:02:5b:3f:13:4b:e7:a0:7d:b9:d8:e2:59:87:d4:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  4 08:55:25 2026 GMT
            Not After : Jun  3 09:00:25 2027 GMT
        Subject: CN=B8DF0161C22D0E03B294621771987EC3990557EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a2:f4:f4:0f:7f:39:08:b9:21:0b:ac:61:c8:
                    6a:23:9d:88:02:98:01:a6:c1:4c:4f:e6:45:84:47:
                    fb:c4:bb:b3:b9:2f:9b:23:40:dc:99:e6:04:24:2c:
                    83:5d:19:25:4b:a1:91:d1:bb:42:d1:af:68:06:3e:
                    ff:bb:9a:63:01:5b:87:0b:f8:ff:e0:a2:fa:1b:4e:
                    a5:f1:a4:c9:ec:af:17:f1:bc:97:ad:9c:c5:f3:9c:
                    76:86:0c:69:c3:23:7b:5d:6c:12:0c:0e:b7:9d:5f:
                    6f:72:8c:ac:99:bd:e1:ac:9f:e5:bd:ec:4b:6d:20:
                    d2:23:31:95:2c:ad:db:b5:4b:e0:df:f4:61:c9:0a:
                    44:a6:6e:9d:c8:b6:7c:ae:f2:ac:b1:24:f0:32:a9:
                    c0:bd:81:f4:5c:71:d4:91:83:20:12:aa:d8:20:e7:
                    9d:f3:de:5f:e2:fd:ff:6b:8b:24:cb:78:d6:e8:ed:
                    99:e0:30:cd:1b:e5:02:7e:42:d2:10:4d:5c:4d:37:
                    bd:8d:1d:c3:e9:35:b5:c3:f7:f3:f4:b0:88:27:9b:
                    fb:d2:c2:62:f7:9c:0c:04:06:eb:06:9d:f0:93:4b:
                    67:b3:17:cf:4e:54:72:8a:1d:aa:12:fe:5b:4e:2a:
                    38:50:c7:1c:a6:5f:fc:62:4d:ff:6c:6e:2a:24:51:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DF:01:61:C2:2D:0E:03:B2:94:62:17:71:98:7E:C3:99:05:57:EB
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3139322e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.234.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:09:4e:25:60:e6:e9:b5:06:f7:1c:58:2c:5e:49:c4:98:
         55:35:33:62:68:0e:58:93:56:ca:cd:cc:a5:32:ed:21:05:64:
         5c:c5:71:d8:11:08:62:14:11:67:a4:f0:96:ec:82:07:a2:23:
         34:ca:2d:a4:2d:c7:3f:10:42:f7:d8:16:b9:64:c0:64:45:93:
         e8:99:f5:18:2d:fd:23:83:9e:87:50:6e:20:c6:a0:cc:80:2d:
         f6:0d:dc:75:ca:58:d1:f9:03:14:2c:af:73:a4:c7:7b:84:86:
         3a:34:7f:23:11:bb:68:0b:09:26:b9:5f:77:6f:8d:ae:58:ba:
         79:2f:18:ac:a0:bf:95:29:48:41:db:f8:ef:1f:e9:99:4b:56:
         a3:d4:4c:89:ad:d7:cc:3a:9d:8d:c7:17:5b:13:64:e2:cd:20:
         87:01:8c:41:db:a2:c5:74:50:02:87:1e:56:d7:56:0a:15:74:
         6f:5a:7b:e1:33:c9:42:d5:03:8e:0b:d7:6c:d4:98:55:58:f2:
         b1:25:be:29:c2:3c:e7:b7:ea:4e:d9:cf:32:da:33:7e:72:55:
         c5:56:65:be:c1:3c:44:09:71:75:02:9f:75:53:15:90:ea:13:
         a6:a6:68:f8:99:98:d1:90:a8:3b:1b:11:c5:dd:d7:50:17:75:
         ac:5d:b0:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client