Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234302e302f32332d3233203d3e2034383437.roa
File:                     3231392e37322e3234302e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          mXYJFerUoHF1p+SHUEJWvDzR+9DZxulf2xQXVouTZH8=
Subject key identifier:   89:6B:6E:E7:98:63:B3:42:1A:91:46:0B:93:81:AB:10:8A:D1:E8:3D
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       7D8FE9F70B11B71C51F0C875CB35D8EC5D36A233
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234302e302f32332d3233203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:23:49 +0000
ROA not before:           Fri 05 Jun 2026 06:18:49 +0000
ROA not after:            Fri 04 Jun 2027 06:23:49 +0000
asID:                     4847
IP address blocks:        219.72.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8f:e9:f7:0b:11:b7:1c:51:f0:c8:75:cb:35:d8:ec:5d:36:a2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:18:49 2026 GMT
            Not After : Jun  4 06:23:49 2027 GMT
        Subject: CN=896B6EE79863B3421A91460B9381AB108AD1E83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c7:b2:92:42:c6:48:bb:3d:c8:f8:f1:88:bb:
                    bd:43:85:15:87:cd:49:16:01:b4:03:01:e1:60:e4:
                    48:db:db:01:d8:a5:f2:00:1b:ee:ca:a3:88:aa:ad:
                    9a:9d:7d:0e:f1:88:14:08:07:ca:62:fa:a0:4b:d7:
                    91:df:ea:ac:4e:ba:f5:dd:cb:73:13:fe:a7:e2:78:
                    f0:d2:78:f2:9a:cb:59:f0:87:ff:b4:7e:80:bd:c3:
                    63:6e:d3:8a:4f:c6:46:63:a1:1e:7d:27:b4:ca:82:
                    86:ee:63:41:e6:7a:16:8a:05:a3:60:ef:11:20:92:
                    de:18:b7:5d:0b:6d:c8:84:5a:2b:79:2e:91:41:47:
                    ee:52:c9:b4:2d:8a:44:58:23:53:3a:0d:5a:b1:79:
                    c9:99:57:fc:d2:d0:a5:3b:3b:b6:e0:c9:67:b2:b5:
                    f6:e5:f3:e5:98:44:48:20:b2:2f:f0:dc:17:fd:5c:
                    d3:e8:4e:ab:1c:95:1c:51:17:00:6d:0f:58:51:18:
                    95:78:21:ef:03:eb:d8:99:be:82:3e:34:96:49:78:
                    0b:03:16:5d:f3:56:59:26:0b:16:6f:76:13:a4:4e:
                    55:25:b1:b1:29:27:ed:61:03:d3:e1:45:e8:67:ec:
                    bb:43:1d:1a:18:05:5e:42:ff:3b:ed:d8:27:0a:a3:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6B:6E:E7:98:63:B3:42:1A:91:46:0B:93:81:AB:10:8A:D1:E8:3D
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234302e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:11:9a:ad:49:0a:ee:26:1f:61:48:88:6b:dd:53:2a:f2:3e:
         b3:9a:92:18:af:f5:ca:be:d3:e9:99:f9:77:34:a1:a1:cb:9f:
         3d:a2:bf:2e:c2:7a:1c:d2:98:45:8f:6e:a9:00:b9:38:60:aa:
         97:82:21:f1:13:5b:9a:a4:81:03:db:52:32:85:24:d8:22:42:
         b1:8e:e6:d8:d1:c9:0c:5f:07:0f:5d:32:e7:64:7b:d1:de:21:
         e4:63:7f:f8:7a:68:00:83:da:8b:37:0e:1a:09:70:00:98:14:
         bc:48:ca:66:9c:e2:e1:cb:79:e1:1a:a5:c2:b2:b9:26:a9:a8:
         ad:be:11:56:9f:9c:e8:89:2f:94:69:31:2c:f4:2d:39:7f:03:
         a5:a9:c3:51:93:94:3c:40:9d:04:20:4b:27:af:aa:d3:c7:6e:
         01:67:6e:b2:66:1c:01:4d:13:4e:78:ac:08:41:f3:68:7d:ba:
         7b:73:e5:71:fc:29:58:46:2b:6f:91:dc:9c:b6:45:5a:4a:40:
         68:2e:9c:7e:96:e8:af:1b:bd:0d:98:0e:fd:07:83:7c:2a:f4:
         ad:95:7a:76:43:65:d8:88:35:d2:da:11:aa:f0:67:8d:a3:9f:
         94:c1:70:ee:4a:06:44:1f:be:42:cf:96:d3:f5:0b:bf:a7:0b:
         e8:54:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client