Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230322e302f32342d3234203d3e203138323435.roa
File:                     3231392e37322e3230322e302f32342d3234203d3e203138323435.roa (raw, json)
Hash identifier:          EmwhBuwbrUEez8Q1XQJPlAu8xQjP+WO+0DDamWxy7qU=
Subject key identifier:   58:51:19:51:85:92:25:A7:87:34:1A:28:23:45:AC:3A:62:3E:98:3D
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       7C3391F8684BD649E557A14FD32D2A504754C965
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230322e302f32342d3234203d3e203138323435.roa
Signing time:             Fri 05 Jun 2026 06:21:23 +0000
ROA not before:           Fri 05 Jun 2026 06:16:23 +0000
ROA not after:            Fri 04 Jun 2027 06:21:23 +0000
asID:                     18245
IP address blocks:        219.72.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:33:91:f8:68:4b:d6:49:e5:57:a1:4f:d3:2d:2a:50:47:54:c9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:23 2026 GMT
            Not After : Jun  4 06:21:23 2027 GMT
        Subject: CN=58511951859225A787341A282345AC3A623E983D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cd:98:71:db:ec:03:7f:ac:4f:79:1d:72:30:
                    23:7d:8f:28:7d:7b:37:c0:11:05:c2:4c:14:6e:da:
                    9d:99:d8:16:11:af:2d:82:f8:4a:d2:53:67:14:1f:
                    f0:3d:56:9b:80:f9:cf:41:17:c5:10:21:89:b5:e7:
                    89:9e:ec:bd:44:a5:18:35:7f:6f:a6:54:d9:cc:67:
                    05:f3:39:d3:f7:e9:ff:3d:ed:98:f1:7e:e9:02:ca:
                    5b:13:97:27:d2:84:68:18:f3:2a:64:6a:85:6b:38:
                    59:e1:2c:f7:24:57:0c:d4:64:41:a6:64:03:0f:2a:
                    4e:4e:13:a6:26:ad:7e:4e:6a:4c:33:62:20:3c:9f:
                    c9:d5:e0:3f:4b:52:53:ab:1c:ca:21:2d:93:52:d7:
                    c5:89:b4:1a:bf:96:5b:97:33:ef:0a:e8:46:98:6b:
                    b6:a9:10:f8:22:29:2c:ef:b6:c7:bd:f3:45:d8:f0:
                    43:d2:30:37:20:7b:f2:88:b7:e4:74:65:52:66:ee:
                    62:bd:c5:41:91:de:02:af:40:4d:6b:41:73:da:45:
                    3c:3a:fd:30:f8:76:4c:65:8c:84:11:18:77:e0:86:
                    4e:d5:4c:14:ea:24:16:87:04:20:c8:6e:85:5d:be:
                    56:cf:94:43:38:04:09:dc:78:f4:a6:3a:47:30:51:
                    ed:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:51:19:51:85:92:25:A7:87:34:1A:28:23:45:AC:3A:62:3E:98:3D
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230322e302f32342d3234203d3e203138323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:14:ea:91:a5:57:67:ac:da:be:0e:01:35:fc:c4:7f:03:
         ef:ab:15:30:23:d7:74:03:3d:40:b9:ec:75:ef:d1:d0:1c:ed:
         84:14:d8:6d:9b:5f:2f:eb:80:e3:ed:1c:8c:ff:50:f7:05:5b:
         da:ec:34:92:5a:21:36:7a:8c:ea:8a:9e:70:36:cf:ee:6f:6b:
         b2:f6:23:48:c9:1c:d4:a7:d2:e6:08:f3:ab:3a:6d:53:ad:3d:
         e7:8a:9d:27:84:03:d7:e6:d1:59:7d:2c:4a:9a:30:66:64:ac:
         97:0a:3b:7d:2a:7d:b7:d4:62:82:71:82:dc:15:11:55:cd:10:
         0b:ee:10:2d:aa:d8:f2:67:cb:0e:29:44:30:be:9f:f8:26:58:
         22:c4:15:0e:4c:8e:e0:50:49:50:2f:19:7b:1e:33:3f:ea:04:
         e8:39:97:d2:d8:37:02:e9:e2:f7:9e:31:89:77:40:55:21:5d:
         35:56:20:2b:17:71:6e:13:fd:ef:85:65:c0:ca:c0:05:7c:80:
         4b:11:9a:c7:a6:4d:ff:43:b6:ff:45:69:2b:cb:c6:08:dd:db:
         17:eb:8a:a0:fb:41:04:99:82:75:ae:c3:fd:f1:f3:d8:13:31:
         8c:30:b7:70:19:86:1a:33:43:6a:a6:71:aa:e5:85:c9:e8:07:
         fe:00:52:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client