Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203234313338.roa
File:                     3231392e37322e3230302e302f32322d3232203d3e203234313338.roa (raw, json)
Hash identifier:          ROVi99aWr2hQ/NEnxTFaTdvH3hJhEcm3NU5pTV1fp5Q=
Subject key identifier:   4E:FF:BE:83:9D:32:4C:4F:DF:66:00:58:32:9B:09:01:90:CB:56:90
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       2DA34F19846B5A875F68D8A72AC6989011DE63D3
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203234313338.roa
Signing time:             Fri 05 Jun 2026 06:23:49 +0000
ROA not before:           Fri 05 Jun 2026 06:18:49 +0000
ROA not after:            Fri 04 Jun 2027 06:23:49 +0000
asID:                     24138
IP address blocks:        219.72.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a3:4f:19:84:6b:5a:87:5f:68:d8:a7:2a:c6:98:90:11:de:63:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:18:49 2026 GMT
            Not After : Jun  4 06:23:49 2027 GMT
        Subject: CN=4EFFBE839D324C4FDF660058329B090190CB5690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:fe:85:ef:a0:63:61:6f:d9:6d:11:ca:3f:
                    ec:38:36:6e:28:1a:74:4b:43:52:d5:9a:81:b7:5a:
                    0c:bc:e4:94:ec:42:2d:19:f5:31:0a:66:09:32:d7:
                    94:41:10:82:e4:30:d1:b9:05:33:e9:4e:19:47:0c:
                    8f:bc:7d:19:e9:5c:64:ee:a9:58:be:c8:dd:d4:20:
                    ef:30:9e:f9:59:46:67:3b:76:67:17:17:b9:9e:f7:
                    d3:23:47:b3:11:ed:6d:f3:4b:1e:c7:8f:0d:18:4c:
                    6e:eb:dc:d0:08:50:50:6d:4c:19:d8:58:9a:2c:e2:
                    b4:57:68:c9:67:38:7a:a1:2d:c0:fe:05:67:18:53:
                    84:f4:24:e2:82:e9:a0:77:14:b0:a8:b6:31:f5:74:
                    2c:48:cd:2f:18:6d:22:53:8f:b3:11:49:46:24:21:
                    c0:d4:bf:08:36:fd:d8:2c:73:46:92:62:81:53:7c:
                    aa:d7:21:8e:8e:05:a1:8e:35:e9:28:78:d8:31:3c:
                    a0:a1:d8:ea:c6:cb:9d:41:1b:02:cd:4e:bb:75:13:
                    47:28:6f:ba:ed:5c:6c:71:bc:01:47:90:6d:4f:fd:
                    b9:f7:df:6e:e3:a1:dd:2a:5b:9e:b7:db:eb:32:a4:
                    98:c6:d5:ec:9c:5d:45:3b:72:b6:91:ac:41:30:ff:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FF:BE:83:9D:32:4C:4F:DF:66:00:58:32:9B:09:01:90:CB:56:90
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:dc:d3:f8:1a:10:42:78:a8:71:eb:8d:6b:7f:ad:39:08:7d:
         c6:26:cd:ff:b9:48:fc:e5:98:06:14:0b:09:f7:13:ea:1f:61:
         45:30:dd:79:e6:f5:fd:17:ff:0a:0e:53:c9:b7:32:04:a3:5b:
         3e:cf:96:aa:6b:89:63:66:62:6e:77:f3:2f:4a:28:bb:56:b1:
         d4:7d:25:16:d9:42:1d:86:a4:a8:e2:55:0b:46:06:42:d5:4f:
         79:9f:10:13:f0:79:20:b9:eb:7d:07:1c:c1:e6:bf:54:19:ef:
         05:76:c8:f1:aa:06:ab:48:9c:8d:78:59:4e:68:91:52:c6:75:
         bb:81:dd:8e:79:4f:8d:5a:03:d5:df:41:b2:d1:63:9b:c0:b8:
         0f:bf:e9:e7:37:86:fc:fd:28:d6:8f:87:28:59:78:46:1d:f6:
         88:c0:60:c0:d9:86:94:c6:dc:19:4b:35:6c:2a:fa:b6:4d:9f:
         d5:bd:a7:18:88:e5:fc:f0:3d:8e:57:e6:bf:7b:33:10:d5:55:
         3d:f8:f9:40:cb:d2:da:13:b5:a0:d9:f6:be:9c:dc:b0:86:de:
         4b:52:8f:58:8b:d6:09:58:54:92:6e:f9:a1:2e:85:1b:7c:68:
         1b:4d:b5:06:c4:da:80:48:11:15:5e:1f:e1:4c:3f:8f:8e:fa:
         4a:a9:c0:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:29 2026 by rpki-client