Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e2034383437.roa
File:                     3231392e37322e3135362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          WSB1E1e9VtOho4J76yGqNGCqYkxSCc7Zn4I5xRbiq4k=
Subject key identifier:   3F:5D:BE:4E:20:0D:B8:4F:8D:FE:D7:42:A0:5B:0D:90:7E:9A:B1:63
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       25020C99BC50F9DE2A226690E5E647DF591B2501
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     4847
IP address blocks:        219.72.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:02:0c:99:bc:50:f9:de:2a:22:66:90:e5:e6:47:df:59:1b:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=3F5DBE4E200DB84F8DFED742A05B0D907E9AB163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:3b:ef:27:9f:de:a1:c5:d6:39:d1:94:5e:
                    ed:df:d0:55:6a:4c:4a:9e:9d:0f:2b:38:8e:de:b9:
                    c3:62:75:23:ac:e4:fc:6a:38:a5:1d:b3:17:4b:a3:
                    f5:7e:23:42:55:18:c2:cc:d9:e9:6e:be:53:e4:31:
                    90:1f:56:f3:71:e4:67:b7:ca:16:19:16:12:5d:27:
                    a2:48:af:75:d3:0e:f5:e2:be:d2:7e:f2:92:7b:fc:
                    81:9b:39:24:40:b0:c6:7b:76:74:2c:db:57:91:e4:
                    8f:99:49:6f:84:82:16:50:0c:38:b6:01:99:87:54:
                    32:f4:2f:dc:5a:a0:c4:5b:53:6c:23:ea:54:4a:d3:
                    f3:b9:15:7e:93:5a:79:b7:f9:f3:52:97:53:fe:b0:
                    2d:c5:97:59:14:ba:68:6c:b0:20:9e:fc:cd:4c:20:
                    8c:ae:f5:1e:ff:32:dd:65:8c:30:a5:e9:ff:db:77:
                    5f:03:15:c4:a5:43:d1:3c:b1:67:a7:da:7d:08:6e:
                    2e:33:af:26:3d:c0:41:f1:6e:45:98:88:fc:88:b4:
                    ad:5d:0b:86:a8:f5:ff:61:8b:8a:e3:6f:94:ee:be:
                    60:8c:3a:1e:61:b9:9c:3b:1a:25:17:86:3e:49:99:
                    9e:c8:ca:9f:97:7f:44:35:85:6e:d6:0e:f6:b5:c9:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5D:BE:4E:20:0D:B8:4F:8D:FE:D7:42:A0:5B:0D:90:7E:9A:B1:63
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:fd:55:64:dc:ae:40:8f:a3:d9:dc:4b:7a:7a:9a:2e:f7:
         93:81:6f:73:51:7d:49:2e:8a:e4:bb:5e:fa:46:1b:c8:f2:81:
         b5:04:12:67:57:97:20:72:59:38:3e:5a:2a:a9:ac:02:34:07:
         58:23:53:aa:c9:87:1e:6e:bf:6a:01:be:c2:d7:65:54:24:52:
         cc:31:39:b9:a9:e9:d4:86:ad:df:b2:a1:94:47:b8:c0:a0:8f:
         45:60:d2:c2:78:e3:ab:aa:23:f6:06:d3:97:be:63:41:fa:85:
         54:01:af:61:a9:4f:b4:f3:31:4a:50:3d:4c:f0:48:37:7c:a8:
         8a:b8:a3:fc:49:f6:fc:ed:b0:d0:b3:46:32:92:26:31:7d:f4:
         64:ff:d1:22:1c:b9:b9:37:27:46:23:07:c6:11:ad:5a:90:fb:
         34:3f:91:13:61:08:89:b6:b4:72:73:8b:d7:4c:76:84:32:e6:
         01:c1:df:08:b9:18:e2:29:51:8d:40:c7:1c:c2:ab:5d:ec:ac:
         d1:4a:cb:ee:0a:82:8d:f0:51:0b:2c:04:13:36:a4:cc:a2:c1:
         60:01:ae:03:8a:e3:d1:8d:fb:3d:7d:48:7d:b1:31:61:77:63:
         b9:4e:d0:06:f7:98:01:5f:1c:76:c6:1e:9b:c7:a1:df:f9:ed:
         b0:77:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:09 2026 by rpki-client