Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e2034383437.roa
File:                     3132302e34372e302e302f31362d3136203d3e2034383437.roa (raw, json)
Hash identifier:          Q9UYrhLPQ6aamGqw+Ntwd22PDl00XXgw8fg/sBhnhzI=
Subject key identifier:   F0:FA:68:2D:6C:87:3B:15:C6:00:E5:8F:13:2D:B8:3B:01:31:68:0F
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4B5E953AA37BE969C9A53152ACD5258098E7C12E
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:30:55 +0000
ROA not before:           Fri 05 Jun 2026 06:25:55 +0000
ROA not after:            Fri 04 Jun 2027 06:30:55 +0000
asID:                     4847
IP address blocks:        120.47.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5e:95:3a:a3:7b:e9:69:c9:a5:31:52:ac:d5:25:80:98:e7:c1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:25:55 2026 GMT
            Not After : Jun  4 06:30:55 2027 GMT
        Subject: CN=F0FA682D6C873B15C600E58F132DB83B0131680F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:54:e8:d0:ac:12:bc:bd:f1:73:ca:6f:a2:
                    db:76:bf:7d:86:1f:47:93:7f:5f:86:33:ef:ad:36:
                    55:8b:b8:30:f4:98:0d:a9:27:aa:7a:55:b9:0c:61:
                    c8:29:6f:38:62:9b:15:65:71:74:42:cb:a6:cd:3c:
                    1a:e9:c2:34:bb:6f:06:85:72:e0:1c:11:b9:e2:4a:
                    17:00:6b:d7:71:8b:36:43:b7:1c:8f:ab:80:56:9f:
                    d4:80:97:75:51:f5:44:fd:8a:66:d7:c8:9d:a6:43:
                    17:cd:92:4d:8b:c5:bf:ab:e4:bb:08:80:3c:65:ed:
                    2a:5c:22:a8:cf:35:87:8b:e5:fd:27:bc:03:54:85:
                    ab:eb:98:2f:4d:90:2d:3b:7a:a8:89:32:8d:d7:d5:
                    ad:e3:d4:13:ea:f2:51:3c:e2:3b:7f:c9:cb:2d:04:
                    2a:f2:70:41:6f:ca:f9:a3:18:93:6a:4d:52:5e:97:
                    65:bd:d2:95:f1:ba:f6:4d:5b:6a:60:d0:c4:43:14:
                    26:82:cf:37:15:45:3b:b7:d8:78:7a:4e:1a:5b:6c:
                    df:59:81:f6:30:0d:6f:c3:47:c2:9c:b4:6b:be:f0:
                    82:5c:61:3f:5a:ac:28:b0:b5:90:d7:fc:f4:38:1c:
                    cb:46:4f:24:79:2e:e2:5b:51:93:26:a2:92:a4:73:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FA:68:2D:6C:87:3B:15:C6:00:E5:8F:13:2D:B8:3B:01:31:68:0F
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:a3:f8:50:fa:49:3d:32:10:62:f2:f2:d0:44:b8:69:8b:
         53:e9:28:3c:96:5e:c6:bd:ef:44:86:df:bc:56:e9:82:c1:44:
         16:f8:9d:95:81:12:34:ba:be:2a:eb:09:a2:de:22:c8:96:13:
         31:ab:eb:d2:5b:67:84:46:33:5f:59:f6:bc:c0:91:f3:ba:3a:
         8e:63:2d:dc:8f:f2:ee:00:5c:97:13:ab:09:20:04:3c:5c:59:
         6b:b7:e5:ea:12:dc:c3:cb:9f:32:ba:e1:8d:6f:d4:36:f8:ec:
         52:46:6b:3b:9b:68:47:92:9d:3e:66:40:fb:01:52:c3:4e:73:
         7c:b0:03:1c:c3:9c:59:a7:80:7b:22:02:ab:82:d8:75:71:59:
         f4:fd:eb:1d:f0:09:99:40:9c:2d:fd:91:e0:59:b2:f9:48:bd:
         e5:7a:b8:2b:c0:4b:8e:c3:4c:8d:f3:bb:5d:b2:39:36:a9:09:
         46:c9:63:a9:18:de:29:81:45:9d:60:37:b9:01:db:15:25:82:
         9e:6b:55:be:c5:39:e2:e6:a1:7d:5b:eb:93:9f:83:ce:6c:c2:
         40:74:bb:a4:0c:1c:78:21:7f:ac:15:24:49:e3:8a:50:75:da:
         d1:ef:92:db:00:d6:19:07:fc:7a:d2:89:4a:0e:dc:de:9a:02:
         0a:2e:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:30:12 2026 by rpki-client