Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e2034383437.roa
File:                     3132302e34372e39362e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          cjjMaWR/tSpLbQt2E8cAzYwltpw7yJowlIhwq+NT3YI=
Subject key identifier:   2F:C0:EC:3C:E1:99:3F:C7:CC:07:1E:FF:16:08:15:0B:E6:71:B9:17
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       6D345C5909FB4E034602A6FBDD5C8C31F52EDF0A
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:24:57 +0000
ROA not before:           Fri 05 Jun 2026 06:19:57 +0000
ROA not after:            Fri 04 Jun 2027 06:24:57 +0000
asID:                     4847
IP address blocks:        120.47.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:34:5c:59:09:fb:4e:03:46:02:a6:fb:dd:5c:8c:31:f5:2e:df:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:19:57 2026 GMT
            Not After : Jun  4 06:24:57 2027 GMT
        Subject: CN=2FC0EC3CE1993FC7CC071EFF1608150BE671B917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:30:b9:63:b1:59:35:9e:21:6e:46:68:19:
                    d1:58:d2:16:60:1f:4a:36:a1:d7:82:82:3b:7d:c1:
                    46:8c:81:d9:0f:69:f2:d8:cd:21:98:6b:63:14:5a:
                    3a:e8:17:5f:e2:a9:e4:30:f9:e3:38:86:82:cd:0c:
                    cf:61:e7:0e:ff:7d:5d:29:5d:37:91:86:a6:27:9e:
                    f7:9c:a0:bc:b4:d2:17:1b:48:d6:d0:c0:f7:95:70:
                    ea:de:e5:4e:87:0a:22:3e:a8:a6:ee:44:63:a1:5a:
                    ed:d7:8e:6c:3f:4b:67:57:33:27:40:03:7f:11:1b:
                    4a:9f:65:cd:ff:1a:15:ed:97:20:89:6c:73:c8:dc:
                    d9:1f:02:f2:e9:d3:2a:e1:5e:47:5d:ea:60:4e:a5:
                    49:c5:79:f6:bb:53:89:86:ad:d5:ef:b8:9d:2e:bb:
                    29:4e:5a:73:ef:b6:1a:06:d3:53:a8:a8:ac:5b:f0:
                    9f:af:23:d4:30:84:e7:0a:24:58:e5:76:ec:fc:42:
                    8f:bc:9d:a0:d3:c3:9b:40:b8:bd:5c:88:ff:93:0d:
                    51:84:41:32:08:3e:aa:bb:62:89:73:ec:e3:01:58:
                    52:3a:01:6c:c3:f2:a3:1d:9a:cf:bf:43:1b:f2:49:
                    04:77:9f:8c:c8:c1:d2:7d:28:2d:76:ea:f0:eb:d6:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:EC:3C:E1:99:3F:C7:CC:07:1E:FF:16:08:15:0B:E6:71:B9:17
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.47.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:05:32:91:b5:99:17:e0:5a:19:89:89:92:ba:9d:2f:54:
         38:f4:3e:4f:1d:4c:40:af:63:24:29:12:6e:a6:4e:8e:44:89:
         1d:f7:c7:62:77:0a:a3:7e:41:bd:60:03:be:9f:cc:97:98:1b:
         98:4e:5f:b1:78:bd:3d:bb:52:2b:0c:b2:f0:cc:a6:b1:50:68:
         89:8d:8b:7b:93:75:5b:18:dd:3d:65:b3:6e:60:f2:7c:19:34:
         b3:1e:3e:38:bb:08:cd:6d:12:8c:46:e6:03:0c:4a:f9:92:e4:
         b8:50:2c:9c:83:82:8d:0b:f7:6c:f0:47:d3:09:68:06:fe:da:
         e8:5b:d3:f9:37:92:da:12:f3:c8:e2:bd:b9:48:1d:f9:6e:ed:
         ae:39:f7:e9:5c:41:32:33:4a:a3:58:79:02:d2:57:74:59:20:
         34:eb:8e:42:7a:ed:73:d3:ed:1b:34:94:ed:10:21:85:6c:b0:
         78:d1:d7:c3:14:be:c5:00:d4:d7:67:7d:bc:07:53:8c:31:ff:
         bd:a7:b1:15:b9:58:05:b7:d5:71:08:4d:53:6a:0e:3f:80:c7:
         f7:1b:65:61:fb:5d:c8:fd:58:e8:a8:17:73:cb:ea:f5:8f:27:
         83:70:90:a9:c9:a6:69:23:1a:ad:3a:88:ed:c8:86:a1:d9:d3:
         ea:64:43:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:36 2026 by rpki-client