Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32322d3232203d3e203234313338.roa
File:                     3231392e37322e3135362e302f32322d3232203d3e203234313338.roa (raw, json)
Hash identifier:          mswNCg4B6v7dq5A3f/hnDTTVFDCd3vA3Mvfj8K/y4wE=
Subject key identifier:   7F:48:16:AA:40:73:A6:33:FB:0F:F0:86:08:85:68:B1:24:33:E8:39
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       13CCFF7AE5AA6DF02D883E16B24150849D95F0CA
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32322d3232203d3e203234313338.roa
Signing time:             Fri 05 Jun 2026 06:23:48 +0000
ROA not before:           Fri 05 Jun 2026 06:18:48 +0000
ROA not after:            Fri 04 Jun 2027 06:23:48 +0000
asID:                     24138
IP address blocks:        219.72.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cc:ff:7a:e5:aa:6d:f0:2d:88:3e:16:b2:41:50:84:9d:95:f0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:18:48 2026 GMT
            Not After : Jun  4 06:23:48 2027 GMT
        Subject: CN=7F4816AA4073A633FB0FF086088568B12433E839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:67:7f:4c:a1:f3:a9:5c:04:5f:d1:21:e7:
                    7c:fd:92:ec:fb:bb:d7:fd:d3:16:87:79:ac:5d:d5:
                    2d:a0:05:44:c2:1c:f8:89:a6:b4:61:d0:e0:07:d1:
                    bf:84:5b:82:da:66:4b:f1:2f:12:39:85:c8:a7:ae:
                    d8:b4:75:ab:06:85:b2:89:c8:ee:08:b4:14:43:7a:
                    54:42:ef:e9:c8:0b:bb:aa:39:8a:81:9d:0f:87:1f:
                    b4:b5:49:97:f6:04:aa:a6:eb:90:19:22:0c:fe:4e:
                    19:91:f3:e9:55:d3:fe:64:1c:57:d1:87:ea:8e:ba:
                    3c:38:f3:3c:1b:32:c2:de:6f:bc:10:20:2a:fc:cd:
                    88:47:3b:9d:e9:67:60:8f:36:a1:9d:16:71:61:5d:
                    29:a0:d6:04:8d:fe:11:53:dd:39:29:c1:85:32:f7:
                    38:f3:1b:3f:30:a0:18:cb:e0:10:93:7c:e2:46:09:
                    91:5d:e3:b6:b0:0b:0d:7b:cb:42:73:af:8c:6d:50:
                    f7:e1:b3:4b:6c:c2:ae:90:a2:c8:c3:95:64:55:6d:
                    9a:52:c2:cf:3c:f1:b6:12:b9:1d:3a:03:05:8c:61:
                    0c:b2:b5:04:ad:c4:60:9b:61:8f:95:33:92:9d:08:
                    9f:48:24:e9:fe:8f:05:9b:15:07:55:dc:24:ec:c1:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:16:AA:40:73:A6:33:FB:0F:F0:86:08:85:68:B1:24:33:E8:39
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32322d3232203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:0e:4e:bd:50:70:62:bc:76:19:aa:45:68:91:9b:de:c9:28:
         c2:f5:d1:04:2d:ac:b0:d9:1b:67:ed:b5:e6:69:2d:da:e7:4e:
         36:aa:f5:32:d2:99:14:2d:67:6d:02:cb:d2:ea:0d:27:24:1d:
         49:37:de:c7:44:df:12:12:35:11:9a:c5:b9:22:cd:eb:ad:c2:
         67:cf:37:fd:39:1a:47:bb:a2:bf:96:09:c4:80:9f:b3:0c:a8:
         db:f0:f3:d9:a2:2c:e5:b2:4c:7c:ec:c7:6f:f5:3f:a7:60:88:
         2a:02:6f:3a:45:3e:1b:e2:4e:1d:27:a6:0f:1c:14:50:ef:6a:
         14:e1:cd:ef:e2:1c:d7:2b:b6:d3:d6:f8:99:12:e7:4e:8b:13:
         3d:ae:eb:23:1a:ff:3a:8c:0a:5e:c2:c3:f2:85:7a:4f:ab:ee:
         22:ad:15:df:77:dd:2f:1b:89:57:a7:b7:b0:d7:0c:49:2d:6d:
         4e:15:b0:cb:d0:eb:bd:7b:39:f4:3f:b2:a3:92:d1:ec:27:e8:
         2e:48:21:e4:ef:a0:d8:b5:71:a0:aa:d7:3c:ad:b6:6d:69:f7:
         01:dd:2e:78:1f:3a:be:bf:ff:7e:d8:d2:b2:a8:d0:02:a9:2e:
         f1:05:bf:b4:00:27:91:c3:e0:35:a1:a8:2f:7e:cf:fd:cc:6c:
         bf:57:0e:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client