Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3235342e302f32342d3234203d3e2034383437.roa
File:                     3132302e34352e3235342e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          /33y8LSJyg9Cn4Fub4goO+JgUSIl/kjPP6UecSFHFX8=
Subject key identifier:   B7:93:59:49:7A:B6:44:91:E7:E2:2F:C3:B8:D7:15:AC:B9:DF:7C:39
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       167250FCE78B627C5DE9CB7D80287BB4EEBE08AE
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3235342e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:18:49 +0000
ROA not before:           Fri 05 Jun 2026 06:13:49 +0000
ROA not after:            Fri 04 Jun 2027 06:18:49 +0000
asID:                     4847
IP address blocks:        120.45.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:72:50:fc:e7:8b:62:7c:5d:e9:cb:7d:80:28:7b:b4:ee:be:08:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:13:49 2026 GMT
            Not After : Jun  4 06:18:49 2027 GMT
        Subject: CN=B79359497AB64491E7E22FC3B8D715ACB9DF7C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:68:f6:7e:0d:07:19:0e:ee:c4:c1:c1:8d:
                    2b:3a:ba:46:11:fd:c4:c5:b3:d0:d1:04:02:10:3f:
                    4c:ac:e5:56:0d:00:c7:b1:28:49:32:a1:94:fa:58:
                    36:72:a8:6b:d3:70:a1:18:ca:08:48:a6:84:89:1b:
                    8f:e3:2c:bf:79:38:4a:0c:70:85:92:44:1b:db:cd:
                    10:b3:ef:85:82:17:05:0f:95:ad:6e:0b:97:ca:f5:
                    5b:56:c3:8b:09:42:a2:8c:01:5f:a1:0a:07:57:9d:
                    c1:c7:31:1b:9f:ea:1f:7b:14:00:54:3f:2d:f0:7c:
                    9f:d7:e5:e8:2a:ec:d8:d2:1a:a8:e5:53:e9:78:8f:
                    0c:1a:a5:ba:b4:50:80:7e:54:70:0e:b6:42:43:48:
                    fb:39:ad:02:71:01:61:14:f6:9b:8b:6b:38:f3:97:
                    66:f2:f6:56:20:ba:a6:64:11:61:2a:a8:be:9a:e9:
                    de:89:dc:88:5b:b5:40:3f:fa:89:76:9e:bc:c6:c7:
                    b7:de:ff:41:ac:18:6e:e7:61:bc:86:e5:9c:52:1e:
                    ae:3f:84:f7:3c:da:2c:87:71:8e:39:61:b0:4b:ab:
                    79:a8:f1:25:b8:e4:fb:1d:ac:66:1e:bf:a6:96:84:
                    a7:3d:47:b6:ae:72:ee:8d:80:99:31:94:78:ee:a8:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:93:59:49:7A:B6:44:91:E7:E2:2F:C3:B8:D7:15:AC:B9:DF:7C:39
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3235342e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:f4:6e:6f:8e:a0:05:6c:52:53:35:26:0c:2c:95:f3:fb:c7:
         8f:41:59:6b:f0:1c:2a:1c:a6:6b:75:8b:62:2f:30:57:f7:1c:
         c3:f3:a8:f8:c1:d9:44:d8:6a:6b:c3:e0:33:5d:22:55:f5:6a:
         b4:fb:62:89:c4:3d:29:28:14:06:35:df:b1:04:97:da:ed:bf:
         95:ba:8c:f2:aa:0c:93:87:13:b1:2b:30:ea:0d:0b:74:36:cf:
         ce:a7:db:21:1a:63:17:41:ee:1f:69:11:c0:09:b6:88:0d:f0:
         dc:29:90:67:ea:c5:24:ba:1b:78:71:19:f3:2c:9e:f1:6d:1c:
         28:2d:6c:cc:34:6b:6e:47:d3:1b:59:b3:d2:ef:32:2c:9c:3f:
         a0:ce:44:2c:0c:8b:dc:60:a2:56:a1:eb:44:dd:95:74:c9:e6:
         b5:5c:54:e1:4f:77:f2:9a:71:ec:2a:41:2c:db:a3:4e:ed:da:
         b8:f8:66:12:b8:a8:cd:b0:1d:92:9c:c6:9c:6b:d1:ff:23:0e:
         2b:ce:fd:56:78:d5:d3:f6:99:e4:99:27:48:b9:b1:77:60:1b:
         27:0f:1d:ee:90:ab:d5:08:92:e9:62:96:9d:9f:b0:5f:49:62:
         be:5e:56:c6:d6:32:b4:6c:85:3e:a3:dc:5f:27:dd:57:44:54:
         04:cb:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:48 2026 by rpki-client