Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135352e302f32342d3234203d3e203234313338.roa
File:                     3231392e37322e3135352e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          EC17Ryz4mTQkEJ51VIfPUh6+CCjIaRv0f9ZLilkE0fM=
Subject key identifier:   3C:2C:DE:40:CA:4C:27:C7:BD:8C:0C:F6:A7:E5:29:30:A5:4B:21:D6
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       618E8EB5B44C64ACD06E2B3827CB7DF5F1967629
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135352e302f32342d3234203d3e203234313338.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     24138
IP address blocks:        219.72.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8e:8e:b5:b4:4c:64:ac:d0:6e:2b:38:27:cb:7d:f5:f1:96:76:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=3C2CDE40CA4C27C7BD8C0CF6A7E52930A54B21D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:3b:c5:00:e0:08:4d:ea:49:85:94:9e:b0:
                    5c:0f:35:28:6a:cc:2e:fb:5c:08:82:5d:55:76:b0:
                    67:7c:7b:37:77:15:8a:ea:81:47:dd:dd:57:e7:35:
                    d0:45:44:fd:17:b8:fa:53:c5:66:bf:e6:c4:82:48:
                    cf:a9:98:21:2d:bc:56:b1:ce:03:49:02:0a:3c:cd:
                    4d:d9:d3:c3:8d:6e:1b:50:8c:fc:0c:c1:fd:70:74:
                    32:27:d1:82:d4:cb:32:e3:c3:0d:83:2f:40:0a:14:
                    d3:44:f1:d8:0b:99:aa:bc:e6:ac:86:0e:34:cc:8f:
                    03:00:01:cd:3b:62:f1:64:66:86:70:0f:1c:78:de:
                    22:bc:d8:2a:40:9e:87:e7:ae:c1:92:53:36:e3:4b:
                    e8:75:c2:80:8c:46:7d:2d:67:85:e9:35:2b:09:93:
                    64:97:c0:4a:8e:14:80:27:c8:89:bb:5a:d6:ae:a0:
                    4d:5d:ee:92:1c:a8:32:11:96:17:b8:a5:ec:e3:97:
                    9f:de:4d:b9:ed:c7:f8:4e:44:c4:a4:f6:fa:9d:ec:
                    d3:b5:d4:3a:ed:cb:cf:51:01:e5:08:21:cf:36:23:
                    c1:4b:19:3f:98:d8:02:0e:28:b1:28:41:35:ba:52:
                    5b:fd:1e:45:7a:62:03:9d:eb:c2:aa:91:40:55:80:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2C:DE:40:CA:4C:27:C7:BD:8C:0C:F6:A7:E5:29:30:A5:4B:21:D6
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135352e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:c9:c9:b0:47:96:36:b6:48:25:9a:59:ac:28:91:c9:29:
         c3:5c:37:0c:2e:e3:64:e4:85:e4:7c:32:b5:fb:63:91:7c:03:
         c6:95:e9:a4:4a:3d:28:1f:5c:38:c1:ff:d5:0f:ff:67:37:e9:
         cb:da:39:e1:92:23:67:87:43:6e:b7:e6:ea:7b:54:f5:53:43:
         fb:42:12:2c:ee:3f:19:ca:15:00:4e:e7:69:40:87:5b:1b:be:
         b6:13:06:44:f6:a2:ab:07:96:c8:b1:cb:05:25:d2:02:18:da:
         72:35:f6:f2:c6:57:8f:36:09:f9:79:f3:68:42:35:ff:0c:62:
         f6:22:fa:51:00:49:0c:aa:20:56:8e:a1:3c:72:4c:c1:42:ad:
         b4:6a:2e:e8:d6:d2:ae:e7:92:54:73:01:08:8a:76:e9:d2:ba:
         0f:85:64:0c:56:99:73:76:70:10:25:37:4d:11:26:f5:8f:05:
         14:a0:53:0a:10:e8:c7:7a:ac:e5:ff:81:34:0e:58:0d:ee:ff:
         9a:67:a2:65:bb:1a:a5:a6:c7:c3:2f:27:03:e7:d9:57:14:ed:
         8d:b1:cf:7a:0a:46:67:3d:7e:19:38:3e:ce:27:2e:ba:b3:51:
         ee:c5:78:8e:66:e0:19:4a:ca:4c:31:42:00:55:af:ee:19:e0:
         86:6d:d2:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client