Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e2034383437.roa
File:                     3132302e34352e302e302f31362d3136203d3e2034383437.roa (raw, json)
Hash identifier:          QGtRU6NkVJkXycPkYuKMUsLMJEz0Qj3UkJ8qAII3zsM=
Subject key identifier:   4D:CE:65:07:18:89:0D:5B:1F:9C:0D:3E:3C:6D:B2:E2:D0:0A:8E:85
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       33901F6E9E1652F320F02D745BFC2A8D69F377D9
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:30:55 +0000
ROA not before:           Fri 05 Jun 2026 06:25:55 +0000
ROA not after:            Fri 04 Jun 2027 06:30:55 +0000
asID:                     4847
IP address blocks:        120.45.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:90:1f:6e:9e:16:52:f3:20:f0:2d:74:5b:fc:2a:8d:69:f3:77:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:25:55 2026 GMT
            Not After : Jun  4 06:30:55 2027 GMT
        Subject: CN=4DCE650718890D5B1F9C0D3E3C6DB2E2D00A8E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:25:a0:ee:34:58:37:7e:93:42:c3:84:43:
                    14:74:5d:22:0f:8d:07:4b:a8:f6:c6:6b:aa:ea:bf:
                    dd:80:f2:26:f0:1d:38:07:6b:4d:4b:0d:b8:01:1b:
                    65:77:0e:48:df:cf:23:4c:fb:f4:be:05:de:5f:25:
                    98:e4:94:95:b0:5b:53:70:47:96:f1:99:01:da:42:
                    e1:3f:a5:71:d4:01:a3:c3:7b:fd:9a:96:88:09:48:
                    28:f7:1d:32:52:69:2e:34:64:48:9b:34:95:17:34:
                    06:d1:0c:45:21:ca:d5:ff:64:b3:84:96:69:09:94:
                    55:7e:b2:b8:27:94:c4:6e:20:d3:9e:db:07:2b:11:
                    e5:03:2d:cc:8a:17:0c:3f:42:bf:4a:f1:70:e1:b2:
                    df:50:ac:62:9d:07:7e:01:20:44:48:30:ae:36:d6:
                    8e:7c:d4:48:2f:bd:eb:a0:f1:b0:23:b8:67:1f:7a:
                    d9:58:2a:4a:99:90:bc:c4:7e:46:db:03:10:6d:9c:
                    32:cf:20:2d:e0:a9:00:d5:d3:39:f2:43:a9:cd:16:
                    71:a9:95:fc:0a:fb:60:27:94:93:87:ef:a0:c2:1f:
                    a2:64:65:14:99:50:7e:47:a1:31:c4:98:e1:7b:b9:
                    c2:b2:a1:ed:b3:8f:0f:c4:c9:43:fa:7e:54:a1:77:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:65:07:18:89:0D:5B:1F:9C:0D:3E:3C:6D:B2:E2:D0:0A:8E:85
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b6:22:a9:ca:ff:46:06:3f:d0:6a:6d:ca:ef:59:b7:f3:84:6f:
         64:77:8c:7a:48:50:fc:27:4b:52:e8:9f:d4:09:b9:c2:01:3c:
         59:cb:6a:fb:e3:c2:4f:8f:55:68:85:64:cd:8d:dd:ad:87:01:
         62:65:04:b6:b7:ab:2c:21:99:5a:86:0b:9b:d4:40:de:ee:19:
         be:08:0e:e2:42:b7:bd:be:d4:60:0b:42:89:d2:9e:0f:36:4c:
         b4:e5:93:c4:7b:9a:c9:a3:6c:a1:33:8c:db:50:1d:ed:24:ce:
         11:c3:a5:55:a7:06:bb:85:d6:ec:1e:80:08:d5:c0:e8:2e:df:
         ec:5c:80:bb:af:6c:ae:00:be:cf:a7:ac:d1:91:1e:9d:eb:be:
         a1:f3:62:1e:9b:bd:ca:fd:f8:58:d1:8e:99:89:36:af:ad:1e:
         de:d8:b2:dd:64:99:3c:07:6d:d6:90:cd:ac:fc:68:91:0d:f6:
         f9:2b:67:e8:9a:b1:5c:21:a9:dc:37:6b:b8:d9:17:5d:a0:4a:
         4d:c8:d0:86:7f:01:6b:f1:c5:3a:a0:8e:97:41:63:59:5d:19:
         2b:15:d0:4a:88:d4:f9:62:0d:a4:ca:3c:09:f5:43:a0:1d:86:
         e3:61:17:6c:1c:7f:3c:6e:c5:1c:0f:88:46:be:2c:d2:70:f5:
         f1:56:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:30:11 2026 by rpki-client