Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203234313338.roa
File:                     3231392e37322e3135362e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          fS6P/6IEsgEkp1ojMcpL2XQpxY4GqW/5kUUapQ7VbYw=
Subject key identifier:   1D:84:AC:45:05:44:0A:D7:44:E8:6A:07:8D:BF:FF:C8:7A:B9:77:BA
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       792B8C71050B04E0608294DBE39396D03B619F99
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203234313338.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     24138
IP address blocks:        219.72.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2b:8c:71:05:0b:04:e0:60:82:94:db:e3:93:96:d0:3b:61:9f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=1D84AC4505440AD744E86A078DBFFFC87AB977BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:eb:a5:1f:06:0b:97:09:90:5f:c6:fc:f4:
                    c7:d5:49:86:11:78:bb:de:7a:6e:2b:da:a6:3f:d1:
                    ee:62:93:e4:cb:cc:50:13:de:30:5e:5d:96:00:32:
                    50:01:b0:94:1f:9e:2c:63:75:84:09:29:5d:de:7b:
                    35:0c:27:f9:fc:4a:97:cf:ee:4d:70:70:f8:36:a1:
                    27:7a:05:4d:73:20:6d:0f:a5:e9:2d:2f:12:87:77:
                    fa:de:b2:ac:46:06:a0:90:40:ed:02:45:ef:ef:55:
                    80:a7:a7:60:bb:90:9f:e9:4b:a5:03:13:80:cd:ba:
                    03:c5:59:96:2c:55:05:59:cf:83:b6:a9:ef:53:15:
                    4b:34:c0:68:4b:28:a6:3e:1e:20:4a:f5:1f:9d:e9:
                    aa:c8:71:e3:de:8a:06:23:7a:25:c3:d0:6c:f0:fb:
                    fa:1b:c7:ac:95:dc:8b:c7:11:ea:ec:c1:fc:c2:28:
                    04:08:24:d7:d6:05:34:95:36:10:e6:c7:b9:8d:59:
                    95:f9:86:45:de:9b:54:e9:a2:2a:ca:e0:2a:d8:99:
                    e4:cc:d0:d2:be:98:e2:f3:57:03:00:7e:8b:74:b5:
                    8d:dd:92:9f:d3:b4:26:cf:a7:d8:14:ed:44:5c:f5:
                    05:a9:42:2f:9d:50:29:f1:1f:f1:a1:e5:17:a6:1c:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:84:AC:45:05:44:0A:D7:44:E8:6A:07:8D:BF:FF:C8:7A:B9:77:BA
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7f:14:5c:5f:8d:47:93:96:a5:93:e3:9e:18:19:83:b8:a4:
         47:13:01:d5:23:8a:98:f4:31:3d:ef:02:77:31:95:89:3a:36:
         de:af:26:98:fa:54:ef:fb:58:58:87:59:8c:95:2e:f3:55:1e:
         cf:ce:cb:d1:a8:07:3f:88:8e:80:76:e7:60:72:ea:ec:d1:95:
         4c:3f:40:5a:65:95:bf:23:b0:c4:bf:64:e5:8b:ea:ba:e5:28:
         80:1f:11:2d:a8:68:15:50:42:a4:cc:93:0e:db:9f:20:88:66:
         01:11:ca:2e:4d:a2:33:0d:e8:ed:71:88:b6:04:fd:d4:e6:bc:
         35:50:4c:43:de:ca:ed:04:58:42:38:f0:90:a9:62:57:a4:83:
         08:a3:ae:ff:e2:62:de:f3:54:97:e6:c9:9e:7d:b4:3d:be:fa:
         04:49:e6:d6:20:34:c3:86:0a:aa:d5:3e:90:5d:56:7e:60:20:
         94:2e:fa:29:6a:63:e2:af:f2:95:3b:4e:88:b1:a5:b4:8b:64:
         dd:72:7b:ce:3c:c5:a6:1f:18:78:3e:35:09:64:90:de:e8:11:
         cc:46:ca:c0:72:f5:ad:11:3b:35:da:8b:65:97:c5:23:72:41:
         d4:de:59:47:2e:66:17:18:3f:92:d0:2d:cf:b6:a5:84:e6:76:
         17:3d:ec:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client