Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e2034383437.roa
File:                     3132302e34372e33322e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          qid0XpgIAWQ5vt+Fx77CtldA6bP1wEpT+H8b63Y5a4o=
Subject key identifier:   8E:A3:3F:E8:2B:3B:6A:F2:CD:47:1F:EA:40:13:A3:09:AF:73:55:BC
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       18667A5FF0CD23E2B94DAA78064C227E540B08E6
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:24:57 +0000
ROA not before:           Fri 05 Jun 2026 06:19:57 +0000
ROA not after:            Fri 04 Jun 2027 06:24:57 +0000
asID:                     4847
IP address blocks:        120.47.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:66:7a:5f:f0:cd:23:e2:b9:4d:aa:78:06:4c:22:7e:54:0b:08:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:19:57 2026 GMT
            Not After : Jun  4 06:24:57 2027 GMT
        Subject: CN=8EA33FE82B3B6AF2CD471FEA4013A309AF7355BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:7c:be:ec:ce:95:9f:cc:6c:6e:5a:73:df:
                    6f:47:89:79:bc:02:ef:93:88:fb:a1:a4:06:f5:d0:
                    0a:91:1a:f7:a8:21:ec:b3:bc:0f:a4:b2:cc:39:bf:
                    3b:f2:a5:88:2b:65:a9:10:8b:66:70:49:1f:41:59:
                    5b:c7:7a:44:a8:35:cf:48:6c:38:da:08:50:1b:73:
                    6f:60:a3:41:21:3b:f2:59:e1:6c:2f:54:f8:d2:2d:
                    32:b0:f2:5d:d1:a0:7b:21:92:a5:e5:5d:fd:ea:82:
                    a8:83:aa:97:23:a1:f8:7a:6b:a6:1d:29:1c:84:c2:
                    49:3a:3e:bd:d9:94:e9:6e:6a:60:a8:80:7a:4a:26:
                    92:8b:03:6d:5b:9d:b1:8a:82:a9:cd:f0:40:51:24:
                    c8:9d:9e:ec:7f:23:1f:bf:39:8f:d4:f6:0a:5b:fa:
                    35:b4:43:29:30:9a:73:26:8f:f3:f6:6f:f2:c9:e5:
                    27:d1:9b:43:cf:79:43:87:91:4c:27:12:c6:1c:ec:
                    c2:12:cc:a6:b1:c4:89:05:c4:97:51:6f:fb:35:eb:
                    f1:a9:7d:4a:8e:5e:00:34:48:43:10:16:ce:81:b2:
                    5b:b0:44:d8:1e:78:5e:e8:3d:bf:26:f4:19:5b:bb:
                    05:6e:b1:51:ac:20:bc:f8:fd:f2:83:b2:c4:dd:98:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A3:3F:E8:2B:3B:6A:F2:CD:47:1F:EA:40:13:A3:09:AF:73:55:BC
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:a4:b2:2b:50:ec:2c:34:59:2d:3a:1e:b2:36:58:13:25:44:
         af:cf:98:eb:44:c4:84:b3:57:54:c7:6c:1b:a8:97:01:23:c8:
         f3:fc:f6:b5:64:88:32:83:28:e6:d7:82:83:6a:a0:53:d7:cd:
         4b:24:f0:97:af:e2:f5:31:e2:50:8a:08:b8:4d:9f:41:08:95:
         19:f1:3a:ea:07:b3:e8:69:8d:59:bb:db:6d:a0:9c:a7:96:cd:
         2b:82:fd:b3:f2:87:56:9a:51:98:73:d8:3a:a8:cf:ed:00:10:
         1e:00:eb:7f:be:72:79:78:8d:5a:ce:08:38:40:39:0d:98:aa:
         94:1e:bc:3c:76:5c:b0:54:3a:65:e2:af:d5:aa:df:59:34:a7:
         53:c3:8a:c9:5f:92:4d:15:43:75:ec:24:db:5d:74:31:8f:b7:
         e5:3f:56:a6:3f:0e:8d:96:ea:8c:17:34:86:25:2b:93:f6:53:
         3d:5f:6b:69:c4:25:8f:7a:8a:c4:f3:e1:14:6c:3b:59:31:41:
         f3:66:f6:a1:59:64:7b:74:55:8e:8d:30:69:80:6c:19:42:d9:
         42:dd:a8:c4:53:8d:f4:98:a4:b1:95:de:3a:50:5d:62:9d:7f:
         c3:04:c2:12:d9:10:78:11:0d:32:5b:3f:20:31:fc:63:f8:98:
         09:77:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client