Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203234313338.roa
File:                     3231392e37322e3234312e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          Z/+rZKtNc8HIf9vkHh37k8N7jY9ZzfogQxOUrY+ZJxY=
Subject key identifier:   54:9D:51:42:B6:3F:DE:71:97:51:9C:81:20:08:1F:88:76:35:67:87
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       1EA6487E47F63FF7455F34FDC697831F76182543
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203234313338.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     24138
IP address blocks:        219.72.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a6:48:7e:47:f6:3f:f7:45:5f:34:fd:c6:97:83:1f:76:18:25:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=549D5142B63FDE7197519C8120081F8876356787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:44:af:30:78:24:a9:0b:c4:4d:29:71:39:
                    5b:12:f7:2a:51:c1:85:b5:d6:07:f1:78:8b:fe:57:
                    56:85:17:f3:75:6d:5d:3e:dc:e0:f2:fd:b6:b3:ac:
                    45:61:a1:ee:1a:cd:3c:cb:5b:a7:ef:83:8f:e7:3f:
                    dd:0f:8f:8e:c5:21:91:a6:2e:e9:f0:10:9d:16:92:
                    02:d8:98:c0:dd:29:de:9d:2d:07:97:51:15:82:b0:
                    d5:69:b4:60:9a:19:0d:49:f8:0b:06:2e:d7:09:3d:
                    9c:67:ca:a6:d9:65:c6:b2:ba:76:d5:13:d8:bb:ea:
                    0a:31:61:13:73:d1:b5:ae:f5:bf:7d:4e:60:27:27:
                    25:6d:12:e0:34:d5:25:bf:df:cc:de:de:b2:33:cf:
                    e1:88:23:23:ac:49:2f:41:f6:26:4a:6e:f6:07:6a:
                    0c:36:21:63:0e:58:84:34:07:70:6e:13:7a:c2:7e:
                    47:bb:0c:8f:1f:ca:81:be:b3:5f:d5:ff:a1:0b:32:
                    61:d3:23:cb:61:5d:75:81:d5:96:03:1d:6f:25:c2:
                    8f:e4:7e:c3:47:d6:38:dc:6e:fe:5d:06:c6:96:27:
                    72:9a:5a:ce:85:e2:ff:89:f5:84:02:d9:c1:98:bc:
                    dd:0e:59:05:c6:03:bc:0a:2b:8e:40:70:e5:6d:4f:
                    2c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9D:51:42:B6:3F:DE:71:97:51:9C:81:20:08:1F:88:76:35:67:87
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:e3:aa:3a:ad:9a:b8:35:9d:b8:75:93:9c:8a:f6:58:73:
         cd:a7:97:78:9d:31:7b:bc:e1:9c:7e:82:55:b8:ee:ea:6f:8a:
         b8:ca:b6:74:61:5c:72:af:2d:2c:20:f6:8c:c0:9f:59:57:db:
         58:3a:a5:71:54:f0:aa:59:70:ef:ed:49:2b:00:da:fe:d3:69:
         3d:8d:87:2b:f0:54:29:db:de:16:54:46:c8:cd:30:81:15:80:
         8a:dc:b1:29:52:92:b9:16:56:31:c1:e5:c9:6d:11:1e:ef:1f:
         f3:91:9a:14:5f:10:a8:da:d4:8f:e6:1a:73:dd:a3:1b:c7:c3:
         98:6b:4f:f9:0c:6b:a4:0a:21:16:b6:18:7b:03:de:cb:d9:42:
         45:a3:1b:0e:e5:8c:8f:30:24:54:ed:db:92:25:41:fb:f3:96:
         0a:b9:d7:8d:05:15:f2:4a:cb:b3:62:a9:22:9e:08:c1:49:b6:
         44:da:bd:95:b0:b9:d6:1a:b7:b9:a6:79:aa:0d:6a:be:c7:a1:
         11:42:0d:9d:1b:41:49:5d:af:c8:63:20:7a:c2:25:79:ec:62:
         c1:1a:6f:97:ed:e3:cb:78:0a:ed:82:7e:3e:a5:8a:db:7d:7b:
         87:61:a1:96:55:37:e0:f5:fb:52:84:98:93:58:18:62:30:07:
         45:19:8c:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:29 2026 by rpki-client