Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135332e302f32342d3234203d3e203234313338.roa
File:                     3231392e37322e3135332e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          ZrZ8GyCV3rDtysUF+uTup67kz07inSYcSavFnJA7IGk=
Subject key identifier:   92:1F:3D:03:17:92:E2:85:DB:64:5C:CC:C5:82:30:3C:BE:16:47:C1
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       74E391A8A32CB2D85580041787A6E38FF9946BFB
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135332e302f32342d3234203d3e203234313338.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     24138
IP address blocks:        219.72.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e3:91:a8:a3:2c:b2:d8:55:80:04:17:87:a6:e3:8f:f9:94:6b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=921F3D031792E285DB645CCCC582303CBE1647C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:ab:b1:d1:25:30:4e:aa:fa:30:a3:af:49:
                    1a:09:62:81:1d:50:25:77:71:ad:06:bc:08:42:5f:
                    53:06:df:8c:31:d9:fa:33:e6:3a:41:bc:0e:83:12:
                    99:40:40:91:f4:24:cd:c0:b6:b6:28:5d:f2:d6:4c:
                    3e:15:25:ec:b2:b9:26:69:f6:e3:fc:ef:e0:c3:59:
                    ab:d8:55:b9:71:e3:1b:43:07:17:22:e7:8e:cb:48:
                    b5:a7:4a:79:dc:44:c3:7d:9c:c1:08:3d:57:8b:8e:
                    f4:f2:f2:5e:87:22:dc:7f:98:60:de:5a:c9:f6:3a:
                    39:0a:04:96:95:a5:63:e2:7c:92:5e:d9:e6:48:32:
                    cb:22:c3:26:ea:18:18:f1:c3:b6:53:05:58:15:a9:
                    8f:bc:4d:b4:20:bf:29:34:f6:0b:60:6b:e3:4e:2c:
                    e3:a9:a1:85:a6:76:64:d9:bf:f6:9a:6e:1a:18:fd:
                    42:de:82:7c:0b:af:ec:86:ca:80:47:0e:8e:8d:cf:
                    f8:8d:6b:db:2b:ff:50:cb:65:dc:04:69:e7:07:4a:
                    4a:fd:40:ed:bb:3a:1e:92:7c:64:df:99:ee:92:3b:
                    01:fe:ef:99:e4:82:81:07:5c:3c:c9:01:54:56:70:
                    3d:c8:be:ca:d3:8a:17:99:a2:dc:70:de:d2:e6:d5:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1F:3D:03:17:92:E2:85:DB:64:5C:CC:C5:82:30:3C:BE:16:47:C1
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135332e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:a2:e5:4c:45:ca:15:46:22:68:f8:8f:df:58:e8:60:5f:
         fc:77:e4:13:58:f4:22:6c:03:8f:f8:12:c1:99:82:b0:ad:cd:
         d8:11:43:a8:21:67:12:6a:49:91:ab:39:96:09:ec:f2:ec:68:
         f8:61:13:7f:b0:7a:7e:3a:57:b5:61:82:c4:a6:8e:14:74:59:
         a6:13:3d:ab:9b:d6:4b:d6:c3:4f:00:9b:8b:2b:29:f4:5b:1d:
         ed:42:6c:56:9f:2b:12:2b:e1:4c:2d:a4:db:e2:20:80:00:af:
         cc:30:d0:03:a7:05:f8:ec:bc:42:ff:d0:fc:d2:6f:7c:6c:83:
         f5:d3:62:4b:07:50:a8:29:68:e7:12:6d:85:a7:9a:2e:e8:af:
         77:b5:c2:1d:a1:a3:26:50:80:56:04:9c:61:bf:1e:1b:79:b4:
         f9:8e:03:94:30:9a:26:c8:05:da:eb:0d:86:40:16:45:67:3d:
         5a:75:0e:74:2e:0c:6f:9e:7c:ec:a4:96:8d:e4:ac:b4:88:f2:
         83:24:41:60:13:8b:a3:b2:eb:d6:c3:24:ea:e4:2e:e6:9d:e1:
         c7:f6:0c:64:23:ed:b4:69:3e:9f:33:80:e0:28:91:da:65:68:
         d7:4d:6e:92:bd:b2:a6:83:85:83:66:93:60:5c:c4:93:b0:48:
         b0:38:22:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client