Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3136302e302f31392d3139203d3e2034383437.roa
File:                     3132302e34372e3136302e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          zzk3ZY2r1BHLRK3ucLJUQrKxQK+1MS+gQ+z448WxzV0=
Subject key identifier:   4D:5F:9C:BE:F9:2C:B7:C2:17:DE:9C:46:0D:8F:55:0B:C5:6F:79:0E
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4421442718D4AD6B76687A91DC1EA51D49830F4C
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3136302e302f31392d3139203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:24:57 +0000
ROA not before:           Fri 05 Jun 2026 06:19:57 +0000
ROA not after:            Fri 04 Jun 2027 06:24:57 +0000
asID:                     4847
IP address blocks:        120.47.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:21:44:27:18:d4:ad:6b:76:68:7a:91:dc:1e:a5:1d:49:83:0f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:19:57 2026 GMT
            Not After : Jun  4 06:24:57 2027 GMT
        Subject: CN=4D5F9CBEF92CB7C217DE9C460D8F550BC56F790E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:8a:0c:c2:52:bb:ed:46:0b:17:e8:82:e2:
                    e2:b5:03:7b:ba:bb:78:01:f0:8e:53:97:27:6a:7e:
                    c3:fc:1a:b0:63:25:0f:dd:c0:9c:90:05:a5:3b:66:
                    6a:8d:cb:f4:1c:37:85:93:30:e4:4c:19:c4:7d:fb:
                    8f:c2:46:59:6a:f0:d0:e8:18:2a:90:cf:a8:8e:91:
                    cc:2c:10:52:54:93:4d:50:21:c2:b8:e6:4a:41:b1:
                    88:4b:12:61:b8:3c:b4:e0:b7:7b:09:20:28:a2:a2:
                    5c:38:25:5e:ef:70:f2:f2:0d:7e:f2:28:7d:f4:bc:
                    05:59:23:a3:50:41:c5:a7:35:8d:35:b2:bb:82:68:
                    50:36:44:7c:93:bf:69:5d:a5:8c:5a:27:0b:9f:04:
                    4b:9f:37:26:e9:bf:4e:b3:8f:77:92:9d:bb:74:ed:
                    bc:02:46:a4:98:7e:56:2b:d7:07:b3:b2:45:42:88:
                    af:5d:85:40:fc:d5:14:f5:1d:c8:bf:e7:bd:40:a5:
                    49:f4:1a:ef:f3:08:28:64:b0:98:24:7b:a3:86:cd:
                    0b:43:2a:07:f9:af:85:6d:52:1a:1e:84:f9:b6:db:
                    8e:7a:cc:12:60:a7:fb:dd:37:b5:c3:35:56:6b:35:
                    ef:a9:6d:8e:82:9d:d7:3a:f5:4d:30:87:2c:b4:a4:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:9C:BE:F9:2C:B7:C2:17:DE:9C:46:0D:8F:55:0B:C5:6F:79:0E
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3136302e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:61:4b:c5:f8:76:fc:28:c2:41:3d:d3:b2:6b:63:5b:7d:82:
         98:f8:b3:0d:01:cb:ee:14:96:ff:6f:a4:81:db:61:59:e8:59:
         bd:cc:9d:30:af:25:5e:95:dc:8c:74:f0:06:3f:e5:5f:b3:47:
         f6:15:29:31:3f:9b:fc:16:8b:4c:b8:d3:22:ce:66:47:14:e9:
         b0:73:26:fa:66:0d:90:de:15:ef:ef:97:be:36:e3:59:aa:a7:
         ec:0b:ca:75:99:10:46:7e:5d:db:e2:9d:e2:5b:70:75:18:e5:
         3f:24:69:9f:31:c0:6f:13:3f:5d:11:9f:fb:1b:d5:25:ac:c9:
         1f:ae:47:e3:e1:8a:af:80:a5:7d:08:8f:63:22:8b:3f:ff:03:
         4b:73:dc:e7:4f:c9:ae:2b:af:86:e6:85:b6:d3:5a:3d:68:6c:
         0a:87:59:ff:82:bb:42:ab:c6:64:d0:91:7e:bd:3c:e6:45:5b:
         d2:55:36:72:e7:1e:29:27:f2:a2:2c:c2:f2:b3:e2:94:81:ca:
         05:2d:69:bd:28:a3:9f:3d:bc:ef:e0:32:e2:ab:5b:f6:af:a3:
         78:42:a2:26:27:ce:7c:d2:71:a7:19:10:e0:db:a1:e6:be:33:
         e1:02:92:f9:0f:ed:75:51:76:6d:11:58:31:59:2a:cd:e8:f2:
         3b:88:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:52 2026 by rpki-client