Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e36342e302f32302d3230203d3e2034383437.roa
File:                     3132302e34352e36342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          GGmwn613r+KoSwXdRzr8A+NbOvo4/hjX6IAbKd6sRRc=
Subject key identifier:   DB:12:96:AC:D4:33:40:56:33:09:B9:08:56:34:43:70:29:E4:E8:AE
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       358D612EAFEC959A0043A925FCD77B90B5AA07DA
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e36342e302f32302d3230203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:23:49 +0000
ROA not before:           Fri 05 Jun 2026 06:18:49 +0000
ROA not after:            Fri 04 Jun 2027 06:23:49 +0000
asID:                     4847
IP address blocks:        120.45.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8d:61:2e:af:ec:95:9a:00:43:a9:25:fc:d7:7b:90:b5:aa:07:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:18:49 2026 GMT
            Not After : Jun  4 06:23:49 2027 GMT
        Subject: CN=DB1296ACD43340563309B9085634437029E4E8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:f5:bc:26:9d:e0:7d:79:24:60:52:e8:7e:
                    bb:8f:3e:45:b9:e8:f0:d6:01:02:e8:57:d8:b5:47:
                    b7:b4:8b:48:42:dc:e3:71:8e:b9:fd:a7:da:04:35:
                    a0:07:e4:29:6f:4e:11:52:27:82:8a:40:ea:41:4e:
                    43:48:22:92:d2:fa:15:50:60:33:e0:62:9a:88:aa:
                    02:9a:a5:74:cf:45:b8:85:a3:cf:e9:ab:ca:86:d7:
                    ca:c6:54:07:14:f3:d6:60:b3:d9:a1:49:d7:3d:5d:
                    7c:aa:a9:37:da:46:da:18:77:b9:e0:c9:ca:cd:8c:
                    3d:30:4e:a3:4a:91:33:21:58:ed:57:ff:67:62:5e:
                    bc:98:5e:44:0c:90:a6:f8:ba:02:ac:d2:88:51:40:
                    cb:28:18:ea:43:a3:af:33:6e:4c:fd:39:94:79:b5:
                    02:19:46:ef:49:63:b0:89:97:ef:c3:5c:65:e5:ae:
                    ba:1b:0b:b2:3a:f0:18:01:84:70:3e:63:3e:7d:b1:
                    42:23:5f:3c:85:9f:b3:78:57:0f:8a:35:0b:f8:27:
                    33:fb:b6:64:f1:57:38:a5:05:f0:c9:e9:32:45:26:
                    69:d4:10:53:98:f4:0f:8b:a1:f0:7b:9a:aa:4d:3c:
                    e7:17:9c:0b:4f:e8:53:b7:7a:4c:b1:14:fe:a2:94:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:12:96:AC:D4:33:40:56:33:09:B9:08:56:34:43:70:29:E4:E8:AE
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e36342e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.45.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:c9:62:ea:07:21:61:d6:94:60:65:88:86:31:3f:74:fe:
         20:20:3c:53:54:7c:1a:df:eb:63:c0:7c:22:3e:9d:c9:02:8b:
         be:f2:2a:0f:a0:78:58:3f:98:c7:92:3c:b6:df:13:37:52:c2:
         e6:f3:ad:a1:ad:cc:29:30:bd:07:c0:9b:cb:2c:5c:81:4c:26:
         97:60:e6:2b:e1:51:be:e2:e7:8c:c5:c5:b4:23:26:49:3c:a9:
         bf:3c:22:11:6f:08:40:b9:f7:87:b4:10:b3:e0:b8:a1:a6:3e:
         f6:8b:30:2f:9f:bc:b0:cd:e7:c8:d3:8e:07:f3:a7:f9:52:51:
         32:6d:51:e4:60:76:ca:d3:88:29:8e:96:d3:e4:21:33:76:2c:
         89:27:68:9d:12:a6:d8:19:8b:3d:b5:64:3b:8a:d6:9f:a4:a5:
         70:5a:88:d5:14:b2:6c:e8:80:92:67:ea:8f:57:25:97:56:a7:
         9c:97:d7:81:b7:ff:78:6f:a1:fa:87:cd:99:9f:07:7d:33:1b:
         5f:82:f2:1f:6b:02:45:cb:f4:23:92:4d:f7:80:9b:1e:d6:70:
         1f:b5:a3:02:c5:38:02:d6:0d:bd:59:64:4f:78:d1:e8:77:56:
         1d:f9:aa:46:7b:74:cc:12:ce:07:2e:81:64:c0:dd:74:7f:af:
         9f:dd:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:41 2026 by rpki-client