Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31392d3139203d3e2034383437.roa
File:                     3132302e34372e302e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          tqCw+bm0vw6Or3iDdnIth2DLds9ee8qoA7vzUiAE2CY=
Subject key identifier:   CD:D2:6D:81:D8:A4:EE:C1:CF:88:C4:3A:23:CB:57:AB:9D:4D:6E:A0
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       0CF09429F73748F9C7DC7E74CC78C77E999E4288
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31392d3139203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:24:57 +0000
ROA not before:           Fri 05 Jun 2026 06:19:57 +0000
ROA not after:            Fri 04 Jun 2027 06:24:57 +0000
asID:                     4847
IP address blocks:        120.47.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f0:94:29:f7:37:48:f9:c7:dc:7e:74:cc:78:c7:7e:99:9e:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:19:57 2026 GMT
            Not After : Jun  4 06:24:57 2027 GMT
        Subject: CN=CDD26D81D8A4EEC1CF88C43A23CB57AB9D4D6EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:b6:ed:d5:07:99:72:d1:74:9e:72:de:b4:
                    01:50:15:5c:af:08:ac:b1:ad:8d:21:83:98:af:81:
                    83:88:10:c3:06:23:c3:7d:98:99:65:30:28:cc:12:
                    6d:35:e9:f7:9b:ba:ec:35:91:7f:e5:2b:e1:0d:42:
                    f6:f1:9d:b8:38:53:3d:7b:e3:49:bc:73:ea:3d:fd:
                    26:91:a7:01:4e:a8:3f:f1:c7:d9:1c:76:18:ec:b1:
                    d1:53:46:b8:04:14:99:38:ba:77:3b:d6:f4:8a:c4:
                    aa:7b:17:bf:a3:75:8e:c3:cc:f4:70:18:ea:de:bc:
                    d7:32:59:48:74:b7:89:9b:4d:93:26:2e:7a:25:5b:
                    b2:eb:ad:4a:4a:62:83:94:6b:60:a6:2d:c3:17:99:
                    24:d9:1d:b5:a9:7f:f7:f6:95:17:b6:73:17:81:fa:
                    78:c7:ca:f3:07:8b:44:2c:0d:cb:31:18:62:5e:f7:
                    c6:29:b0:27:8a:88:92:7a:2b:ee:de:c7:04:f5:73:
                    88:1c:91:a8:a5:a6:ff:38:72:36:67:4f:12:72:24:
                    d2:84:1a:48:5c:1d:fc:dc:37:cc:5b:44:f8:9d:0c:
                    88:f5:43:64:c4:3e:76:22:12:2b:aa:26:d3:ec:c8:
                    5f:53:a8:00:15:26:a9:35:66:7d:c0:31:a5:1f:2d:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D2:6D:81:D8:A4:EE:C1:CF:88:C4:3A:23:CB:57:AB:9D:4D:6E:A0
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:b8:cd:20:94:fc:33:70:b9:7b:0a:ab:50:19:c7:d5:1c:a8:
         99:e4:12:7b:02:69:45:38:3b:b5:04:17:cc:73:81:cf:79:76:
         81:91:7f:06:d1:bd:83:f9:d5:a2:18:76:10:29:db:61:1f:76:
         89:5a:7c:24:ef:84:54:dc:9d:4e:d5:07:5c:4a:84:29:23:93:
         87:b0:1b:24:cc:34:3c:82:2e:96:3d:b1:9a:a4:8b:72:39:17:
         c6:ea:d9:88:ce:89:b9:78:af:03:76:5c:7f:a0:24:34:a5:8d:
         5b:44:2a:81:76:c8:b8:04:1e:bd:4d:13:20:1a:4e:d0:71:1c:
         be:6f:76:59:2a:af:d1:80:fb:9a:20:4a:b0:6a:64:54:09:5f:
         a0:2b:8d:a5:e1:f6:6b:77:81:94:f1:9e:21:b7:95:55:8a:f2:
         fb:25:b2:ae:ee:99:e1:f9:1f:ac:a2:5e:09:ff:82:38:93:1e:
         7a:35:81:55:88:09:d0:33:57:cb:df:ac:d0:ec:0f:42:c4:04:
         8b:b5:79:20:c5:96:e4:e5:f7:7b:3a:74:c6:cd:d8:f5:a3:74:
         e2:ed:73:6b:a7:b7:15:c1:ce:3d:fe:4e:13:04:52:97:17:be:
         6b:ec:62:d9:e3:ce:53:d0:e6:8a:79:8d:e7:d5:b2:ea:6a:00:
         81:b0:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:40 2026 by rpki-client