Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3132382e302f31392d3139203d3e2034383437.roa
File:                     3132302e34372e3132382e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          /OE1de9aK/9MFXGsZB2N4X9Mgx29KPJ0rrxvFaucypE=
Subject key identifier:   3D:2F:18:10:C6:CF:EB:62:14:F3:B1:5C:A1:46:65:D2:5A:86:8C:14
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       3B65F471F0090F8EB104F48875EFB77D8D22CBD1
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3132382e302f31392d3139203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:24:57 +0000
ROA not before:           Fri 05 Jun 2026 06:19:57 +0000
ROA not after:            Fri 04 Jun 2027 06:24:57 +0000
asID:                     4847
IP address blocks:        120.47.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:65:f4:71:f0:09:0f:8e:b1:04:f4:88:75:ef:b7:7d:8d:22:cb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:19:57 2026 GMT
            Not After : Jun  4 06:24:57 2027 GMT
        Subject: CN=3D2F1810C6CFEB6214F3B15CA14665D25A868C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:90:e4:cf:9d:42:31:87:e4:28:5d:ca:12:
                    d2:dc:73:bd:14:62:a2:e9:a0:43:2c:1b:3e:6b:76:
                    aa:04:10:e8:cd:01:fc:5e:e0:4f:c5:d4:84:c2:10:
                    46:fc:a4:c4:a7:dc:b4:37:03:1f:37:a6:c4:78:81:
                    2c:03:17:85:5c:37:eb:01:4e:c9:b1:54:a0:4b:61:
                    b9:19:f5:87:75:b3:52:fe:b5:02:36:59:fa:a9:46:
                    98:1a:89:d6:c1:cd:1d:cb:0b:28:8d:bf:86:e7:0b:
                    18:95:a8:12:cd:2a:bf:a7:bf:99:f8:fe:e6:b6:77:
                    af:22:e4:99:6c:2a:73:db:b6:3b:0d:f0:5e:1f:e9:
                    54:30:b5:e5:8f:ef:73:7c:3c:00:20:28:07:06:71:
                    0e:aa:9b:32:52:98:99:66:ac:02:5c:4e:89:ac:ef:
                    7b:46:51:53:cc:73:f4:5d:03:ef:23:f4:c6:71:e8:
                    d3:8c:b7:1b:7b:8d:5f:3d:89:76:49:3d:24:77:db:
                    1e:db:a7:ff:c9:7c:63:1e:f4:7b:e7:72:2f:27:f5:
                    28:17:c8:15:e5:da:e5:c3:3c:72:15:84:da:1c:3d:
                    7d:be:11:98:31:7b:b6:80:f9:ff:10:6d:b8:81:43:
                    20:54:72:47:4f:de:12:b5:4a:d2:25:3c:f0:9a:b3:
                    5c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2F:18:10:C6:CF:EB:62:14:F3:B1:5C:A1:46:65:D2:5A:86:8C:14
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3132382e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:17:ef:eb:c2:d6:db:64:79:2f:1e:00:45:5f:09:c7:35:
         42:c3:98:03:99:a8:ca:9b:e7:8e:5a:d0:25:84:ca:4e:64:6e:
         5d:3d:92:77:48:c5:70:b3:64:ee:e7:4d:3a:50:31:21:2c:b9:
         20:49:02:c6:b7:c3:fb:47:f0:a2:86:06:e2:41:5b:3e:ba:b2:
         27:40:3f:1a:7c:84:37:ec:09:52:55:15:e5:8c:6c:d3:93:99:
         1b:2c:b7:01:55:d4:1a:af:f2:2e:f7:68:d0:42:9b:54:9e:ca:
         f3:1e:d0:65:af:34:9f:7b:28:af:9a:12:f2:6b:cd:58:e8:b0:
         38:64:38:3d:fb:f8:8b:7d:0d:91:b6:24:93:95:63:63:57:73:
         a7:87:02:37:99:15:9e:b5:2f:5e:74:d7:5d:f9:d1:f6:d9:15:
         2a:c5:b0:87:ea:0c:46:d6:31:41:ff:7c:ff:e9:7e:b3:cc:6a:
         58:53:e4:12:d0:15:82:b8:b6:d5:57:d7:1a:a1:ab:f9:0c:ac:
         aa:07:38:4f:6e:94:21:4b:15:8a:37:f4:ad:51:ac:e7:57:8f:
         78:96:e2:08:6d:d8:92:4d:b0:a1:3e:97:cc:d8:8a:f2:28:34:
         77:99:86:21:d3:20:ae:f7:9a:45:f1:dd:bf:7c:e2:77:34:82:
         bb:5f:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client