Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203234313339.roa
File:                     3231392e37322e3235302e302f32342d3234203d3e203234313339.roa (raw, json)
Hash identifier:          CawygXBuYI8Yj9/Bksl5voAZYY4CYu/Kv2UH1rQnuXw=
Subject key identifier:   1A:6C:C5:63:2D:40:2C:AA:40:BB:08:E9:36:26:A5:3F:F5:20:D3:53
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       6E90DA254EF0430AD65DB9914715164D3883CE83
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203234313339.roa
Signing time:             Thu 04 Jun 2026 09:13:19 +0000
ROA not before:           Thu 04 Jun 2026 09:08:19 +0000
ROA not after:            Thu 03 Jun 2027 09:13:19 +0000
asID:                     24139
IP address blocks:        219.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:90:da:25:4e:f0:43:0a:d6:5d:b9:91:47:15:16:4d:38:83:ce:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  4 09:08:19 2026 GMT
            Not After : Jun  3 09:13:19 2027 GMT
        Subject: CN=1A6CC5632D402CAA40BB08E93626A53FF520D353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:f9:87:c6:01:f5:65:b1:48:a1:00:f6:69:
                    26:e5:14:66:00:91:a5:4b:f8:20:e0:87:e6:84:cf:
                    43:01:8f:09:70:d5:31:03:4c:37:36:0d:a5:66:45:
                    87:f3:d2:86:1a:6b:e4:5a:15:da:9b:46:d6:a4:fe:
                    00:c5:b9:a6:19:c5:87:66:a5:0d:38:e4:9c:4f:aa:
                    f2:25:d7:9c:5d:45:56:5b:be:12:4f:80:01:42:2c:
                    ed:da:27:27:f2:82:24:84:ac:3a:a2:05:6d:e2:8b:
                    54:41:ec:2f:33:b6:09:98:f4:d1:41:46:a0:49:20:
                    9a:7a:41:ca:10:f8:56:40:ac:7e:fc:ac:e2:65:93:
                    14:b6:9a:05:43:cc:84:0c:a9:ef:77:d2:42:30:1f:
                    f6:a6:6c:82:f7:f5:3b:83:86:37:11:d0:48:bf:a7:
                    43:da:58:5a:1a:a0:6e:8d:3d:d5:fd:e0:06:54:a8:
                    78:d5:bf:8d:f7:fa:7d:2b:4c:ff:10:89:59:57:e4:
                    c9:21:93:41:a6:92:cc:2d:ac:db:32:0f:66:1e:5e:
                    21:fa:26:12:6b:4d:93:e0:39:00:5c:3c:47:8e:23:
                    43:d0:bf:dc:89:4b:20:cc:e8:b9:69:d2:cf:94:cf:
                    29:ef:50:7b:8d:39:53:e3:69:9a:a1:0d:93:07:d6:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:C5:63:2D:40:2C:AA:40:BB:08:E9:36:26:A5:3F:F5:20:D3:53
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203234313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:8e:68:42:e7:3b:42:27:9f:83:10:91:1b:bb:34:24:1b:c1:
         ea:7b:4b:37:39:d4:dc:d8:70:d0:d9:52:d7:98:02:a8:0b:f6:
         41:09:73:1c:ec:34:18:57:88:b0:16:09:bf:34:e7:46:02:00:
         a1:46:d9:c2:07:a4:87:73:a2:71:94:5d:de:c5:1f:49:87:dc:
         9b:2c:32:22:7b:d7:d3:5e:06:a6:4d:0b:bf:03:8b:f3:29:20:
         ff:a7:69:14:06:e6:84:7a:19:86:2e:af:39:b0:cd:32:60:53:
         2b:bd:df:d8:24:ae:45:45:9e:b0:4e:8f:cc:7f:42:b0:c8:a3:
         27:80:9d:e1:16:35:d9:e9:a3:f9:09:5b:91:bd:4d:79:d5:d0:
         02:11:1a:c9:6d:52:dd:20:78:3d:95:88:97:e0:dd:9c:e9:37:
         86:bd:3a:e7:bc:0e:8f:91:31:95:58:e3:33:23:12:62:c3:f9:
         e8:46:00:2a:31:0e:8a:c5:14:52:69:c1:19:75:74:81:d9:a1:
         7a:7f:c5:74:6c:43:c8:96:88:41:42:e6:1a:b9:d1:24:bc:59:
         65:1c:fe:b2:9c:09:3c:af:8d:f3:58:5f:5e:3b:4d:b3:fc:61:
         e2:e8:e7:54:c4:23:11:97:28:30:54:e7:75:0e:58:5e:24:a3:
         4d:ff:39:a8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUbpDaJU7wQwrWXbmRRxUWTTiDzoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MDQwOTA4MTlaFw0yNzA2MDMwOTEzMTlaMDMxMTAvBgNV
BAMTKDFBNkNDNTYzMkQ0MDJDQUE0MEJCMDhFOTM2MjZBNTNGRjUyMEQzNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqPmHxgH1ZbFIoQD2aSblFGYA
kaVL+CDgh+aEz0MBjwlw1TEDTDc2DaVmRYfz0oYaa+RaFdqbRtak/gDFuaYZxYdm
pQ045JxPqvIl15xdRVZbvhJPgAFCLO3aJyfygiSErDqiBW3ii1RB7C8ztgmY9NFB
RqBJIJp6QcoQ+FZArH78rOJlkxS2mgVDzIQMqe930kIwH/ambIL39TuDhjcR0Ei/
p0PaWFoaoG6NPdX94AZUqHjVv433+n0rTP8QiVlX5Mkhk0GmkswtrNsyD2YeXiH6
JhJrTZPgOQBcPEeOI0PQv9yJSyDM6Llp0s+UzynvUHuNOVPjaZqhDZMH1p2NAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUGmzFYy1ALKpAuwjpNialP/Ug01MwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz
MjJlMzIzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzMzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANtI+jANBgkqhkiG9w0BAQsFAAOCAQEAVY5oQuc7QiefgxCRG7s0JBvB
6ntLNznU3Nhw0NlS15gCqAv2QQlzHOw0GFeIsBYJvzTnRgIAoUbZwgekh3OicZRd
3sUfSYfcmywyInvX014Gpk0LvwOL8ykg/6dpFAbmhHoZhi6vObDNMmBTK73f2CSu
RUWesE6PzH9CsMijJ4Cd4RY12emj+Qlbkb1NedXQAhEayW1S3SB4PZWIl+DdnOk3
hr0657wOj5ExlVjjMyMSYsP56EYAKjEOisUUUmnBGXV0gdmhen/FdGxDyJaIQULm
GrnRJLxZZRz+spwJPK+N81hfXjtNs/xh4ujnVMQjEZcoMFTndQ5YXiSjTf85qA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client