Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e302e302f31362d3136203d3e2034383437.roa
File:                     3231392e37322e302e302f31362d3136203d3e2034383437.roa (raw, json)
Hash identifier:          Jz00+XnWIzoWBCbPpIVvgqEi5JDZ7BUQCDtYowOkfGc=
Subject key identifier:   FA:A9:E7:CC:D5:43:01:63:08:DC:51:6C:AC:4E:E2:67:3B:D8:FA:7A
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       76BD5003130192E637F0DE852DE198E1B51BCA5F
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e302e302f31362d3136203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:30:55 +0000
ROA not before:           Fri 05 Jun 2026 06:25:55 +0000
ROA not after:            Fri 04 Jun 2027 06:30:55 +0000
asID:                     4847
IP address blocks:        219.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:50:03:13:01:92:e6:37:f0:de:85:2d:e1:98:e1:b5:1b:ca:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:25:55 2026 GMT
            Not After : Jun  4 06:30:55 2027 GMT
        Subject: CN=FAA9E7CCD543016308DC516CAC4EE2673BD8FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:75:3e:b9:eb:5d:75:34:9c:0d:0b:14:05:
                    15:c0:e3:e3:6c:63:96:5f:e1:10:3e:70:f7:1a:47:
                    68:75:b4:62:40:5d:f4:55:6c:12:b4:57:27:e8:07:
                    2d:43:48:13:79:e8:9b:a6:13:01:66:9c:dd:1c:15:
                    bd:f7:5f:b9:5e:db:31:ca:44:94:0f:f5:c8:f1:5c:
                    40:a4:68:f1:b7:d1:a6:f4:f9:a0:aa:97:a1:42:4b:
                    b6:63:29:c7:20:41:3c:ce:30:1b:69:fd:b4:f0:d6:
                    29:52:ba:54:25:46:ae:0d:d2:5c:3a:7c:25:c8:4b:
                    19:49:de:2c:38:c1:de:72:eb:24:b0:17:9a:89:e2:
                    56:4c:88:9e:a6:df:45:3a:2c:b0:3d:b9:81:55:93:
                    57:0f:f9:52:d5:82:90:10:3a:41:42:91:a7:82:d1:
                    e5:05:cf:fe:9c:ce:a1:ff:95:c9:03:40:26:3b:60:
                    0e:de:0b:25:ca:bd:23:9b:ec:73:18:4d:3f:9b:ae:
                    48:78:08:31:a0:cf:c3:61:15:3c:73:e0:19:da:2b:
                    83:0a:8c:fb:30:65:c1:b3:4a:e6:b9:13:84:96:ef:
                    18:20:6e:10:ae:47:6b:6a:ae:f3:7a:2c:26:a8:7d:
                    73:fc:8c:5a:3f:e2:1d:7e:0d:ba:11:bf:82:ac:94:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:E7:CC:D5:43:01:63:08:DC:51:6C:AC:4E:E2:67:3B:D8:FA:7A
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e302e302f31362d3136203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:19:3f:88:1e:d6:26:da:8a:5e:da:40:f1:f7:34:7e:15:
         1c:44:70:86:bc:4a:a8:2e:45:46:be:7f:e6:f3:77:1d:fd:07:
         cd:00:d2:16:66:1d:74:ab:c5:ca:53:6b:a3:9c:d3:15:83:75:
         80:04:5a:2f:73:e6:87:38:06:4e:78:e2:e9:8e:ae:55:30:95:
         2f:96:45:17:44:ae:69:33:c0:c3:a9:9e:1f:08:f7:69:70:dc:
         8b:6c:e0:c8:4d:2b:7a:fd:21:ab:fa:47:a8:82:a8:70:1a:63:
         c2:88:97:4c:08:27:4e:10:ff:dd:2f:3c:6e:33:ce:5a:7e:14:
         1e:1b:c0:ae:c7:cf:81:01:9f:6b:fb:a9:7c:6b:b4:93:4b:3b:
         7c:d7:4f:98:bb:77:f4:b2:47:1a:b5:1d:36:38:68:c1:5a:29:
         f6:ee:b6:06:65:8d:b0:c1:48:24:11:de:0c:4b:2b:66:60:4b:
         7f:64:59:4f:9c:42:bf:72:10:4f:32:bd:f4:8e:d3:f6:4c:13:
         66:02:ea:f7:85:cc:0a:c6:4a:2a:68:2d:8c:79:e4:ae:44:86:
         bb:41:b9:a8:57:8f:3e:09:80:4b:dc:b4:0a:49:23:56:ad:7b:
         6f:96:47:cf:90:06:39:5b:9d:e8:5a:9a:0a:f3:12:fa:e1:4a:
         be:2c:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:26 2026 by rpki-client