Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203138323435.roa
File:                     3231392e37322e3135362e302f32342d3234203d3e203138323435.roa (raw, json)
Hash identifier:          xT1AzZLeUkqHDG0FAhIc9d8rq+bQ6ueXGeoW4eLvtC8=
Subject key identifier:   91:93:04:AC:29:7B:18:EA:2D:BA:68:FE:CB:34:6A:8C:AF:4B:EE:A6
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       2BD52916947BFA3F584E87C35CEECBEAA1569A2A
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203138323435.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     18245
IP address blocks:        219.72.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d5:29:16:94:7b:fa:3f:58:4e:87:c3:5c:ee:cb:ea:a1:56:9a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=919304AC297B18EA2DBA68FECB346A8CAF4BEEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:b3:c7:bb:b7:0a:2b:3d:a9:d9:29:96:09:
                    90:3d:38:76:67:87:75:c6:10:f1:33:23:d1:03:60:
                    de:c1:83:e4:63:fd:20:88:d9:66:23:3d:ac:2b:88:
                    56:98:39:4a:88:4e:50:7d:cd:6f:89:cf:e4:43:90:
                    0a:ed:35:6d:81:d2:9b:93:1d:b9:cf:9c:ed:86:56:
                    f1:6b:95:a1:8d:79:b6:aa:3a:3e:de:c5:e7:18:5d:
                    8a:de:57:8c:5d:86:0e:89:af:0f:f6:76:17:cd:00:
                    6b:7a:d4:28:e0:bd:0d:bb:f5:e9:8c:15:c8:cf:e3:
                    ec:0f:f4:b8:99:7d:c8:9b:88:ca:ff:1e:d0:b2:c5:
                    67:5f:04:8b:ab:91:e2:d0:90:96:1a:d8:29:be:b3:
                    78:11:fe:21:91:9b:f4:d4:1c:98:33:da:3a:aa:a9:
                    d2:2c:e1:48:dc:5f:b9:bc:b9:55:03:5c:3e:6e:a4:
                    0e:6f:b2:ae:dc:71:e8:4b:2d:d2:1a:af:f9:a0:f4:
                    02:b5:3b:df:22:8f:1e:33:eb:bd:f8:d0:d1:31:e7:
                    d9:cb:2f:f3:e8:28:0f:ad:28:9a:ff:a2:ee:76:4e:
                    0f:83:90:be:a6:c9:bd:05:cd:3e:9d:8a:d4:c9:36:
                    c2:57:7a:f9:47:fe:3d:16:20:0d:63:b2:1f:6c:0e:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:04:AC:29:7B:18:EA:2D:BA:68:FE:CB:34:6A:8C:AF:4B:EE:A6
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203138323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:7e:9d:ef:f2:30:2e:1e:02:a3:47:17:7f:b7:2c:1b:28:91:
         5c:44:6c:0e:a5:8d:25:ef:56:bb:b2:bb:72:35:dd:03:57:80:
         2f:19:39:cb:bc:4f:f4:7f:bb:e1:73:1a:86:53:08:91:3f:aa:
         e6:20:a8:0c:3a:f5:a1:fe:de:21:a4:9a:99:5c:e7:32:d9:a8:
         19:ed:0c:f4:59:8a:78:18:dc:90:76:5c:b5:87:40:9f:fd:4c:
         0c:23:19:94:47:19:74:5b:e6:ec:ec:dd:80:88:2d:1c:15:0f:
         2c:06:ae:24:ea:9b:fd:ab:43:4f:94:38:5a:29:5e:fb:9d:1a:
         5a:a0:eb:bd:e9:07:b0:aa:4b:a3:cc:0b:18:e7:fe:fa:e1:a5:
         18:e4:b8:ee:21:59:43:9f:fb:46:5c:72:be:45:f1:73:d3:6f:
         b6:87:0a:13:7e:6b:82:53:23:7c:f8:4e:96:42:e9:0e:d9:bc:
         b3:bc:be:2d:f1:ec:12:1a:19:10:3a:b5:21:c8:5d:2c:07:2c:
         2a:b7:31:3a:d1:5a:1b:d2:ae:55:56:c0:32:1b:07:17:6b:6a:
         e3:e8:fc:ab:36:d1:bb:9f:f9:a2:64:21:28:f7:3c:23:d1:41:
         c7:13:2a:da:21:f5:7b:dd:94:d6:64:6a:15:1f:45:c9:36:5b:
         0c:05:0d:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client