Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3131322e302f32302d3230203d3e2034383437.roa
File:                     3132302e34352e3131322e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          gtzdJok2+30Cugv/e8tmI68TnYbjnQW4vjVF4BgOQOA=
Subject key identifier:   C3:CB:0A:BC:F9:E1:24:CD:BF:74:B7:6F:1C:45:F0:07:86:23:72:8A
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       77A32EB7930FA078490F32EF7C7E04FB8F188DAE
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3131322e302f32302d3230203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:23:49 +0000
ROA not before:           Fri 05 Jun 2026 06:18:49 +0000
ROA not after:            Fri 04 Jun 2027 06:23:49 +0000
asID:                     4847
IP address blocks:        120.45.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a3:2e:b7:93:0f:a0:78:49:0f:32:ef:7c:7e:04:fb:8f:18:8d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:18:49 2026 GMT
            Not After : Jun  4 06:23:49 2027 GMT
        Subject: CN=C3CB0ABCF9E124CDBF74B76F1C45F0078623728A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:d0:21:62:9a:8b:af:4b:32:9e:bd:b3:11:
                    d2:3a:87:61:6a:41:12:e6:d0:d7:e7:f9:d3:f8:62:
                    22:a1:d2:0d:2c:a3:d0:b9:21:36:74:f2:dd:57:df:
                    05:ea:a9:cb:ec:c5:eb:75:60:8b:7a:26:20:36:6b:
                    2f:35:fb:5f:16:ce:28:db:3a:5b:55:d4:3e:52:40:
                    50:27:32:72:ec:0f:74:ae:48:74:99:a1:07:d4:3d:
                    27:44:2d:6f:a7:40:b3:05:99:75:a2:03:2b:36:c4:
                    4d:98:2f:dc:5c:c2:d8:5e:69:73:12:78:b5:b0:c0:
                    5b:43:3f:d9:b2:c7:cf:c4:0f:cb:aa:99:9b:08:ad:
                    da:53:da:69:25:1b:23:b3:8f:e7:e4:c6:27:ad:29:
                    ac:77:2b:6c:e0:e5:34:f4:88:de:b7:0c:da:a8:7b:
                    7c:5d:2e:6b:4e:79:4a:69:89:76:10:8e:a5:43:37:
                    4f:df:2c:bf:96:69:f9:58:65:0c:03:5b:82:4c:a1:
                    de:fd:ef:0b:4f:2d:74:e4:0f:b5:19:c5:fc:a7:a4:
                    9c:74:07:d8:43:22:c9:a8:03:e0:42:d2:3a:de:4b:
                    6a:98:ac:4c:34:8f:91:85:0b:f8:1b:19:ff:5c:d7:
                    7a:99:51:91:56:a6:07:3e:96:16:59:fc:d6:2e:51:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:0A:BC:F9:E1:24:CD:BF:74:B7:6F:1C:45:F0:07:86:23:72:8A
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3131322e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:5a:42:79:69:6f:5b:34:b6:ba:a1:f0:34:e0:be:30:66:a9:
         d9:23:0e:6d:2a:dc:95:48:cb:53:52:fe:13:a4:6b:6c:3f:25:
         33:43:76:a1:e2:6c:98:32:e7:21:74:6e:50:98:9a:43:2a:34:
         60:6d:74:cf:18:0a:00:df:4e:4b:67:4b:6b:0b:04:5c:fb:fe:
         57:ae:a3:c2:3a:0b:e0:48:1c:12:c0:d7:32:52:96:6b:05:61:
         3f:6e:59:b2:c0:36:47:2f:d8:40:af:b4:71:8f:70:11:fa:ba:
         89:80:09:fd:18:23:67:56:80:9c:52:cd:44:f3:2b:ff:a5:28:
         9b:5c:c8:9e:23:5f:a5:d2:e4:ac:d7:c7:f5:4a:17:b6:44:7f:
         bc:32:c5:ee:49:b0:3e:51:af:3c:93:1c:dd:20:01:ef:32:51:
         b1:8e:17:c1:90:d8:81:bd:73:94:10:df:bd:60:96:95:e5:bd:
         72:2d:c5:76:65:93:c3:63:d1:c2:d2:59:ea:84:28:5a:64:32:
         00:58:b2:e2:2c:14:c8:1e:88:f1:3c:77:03:4d:46:d6:9f:31:
         95:37:35:76:e3:0a:70:5d:97:7a:0c:6d:8c:39:11:a2:5c:49:
         a9:5b:4e:0d:43:53:94:bb:59:ce:d3:27:5c:28:2d:64:7e:2d:
         ac:22:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:37 2026 by rpki-client