Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e2034383437.roa
File:                     3231392e37322e3235302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          R7c2QKAMhnJCLZ/P7BVwWXYHv6EGgU5IQ6dlw0FLDE0=
Subject key identifier:   B0:01:2F:53:5B:DD:65:F1:11:5C:91:7A:C0:A8:BA:9C:23:BF:90:71
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       438AB2F8E2C5448D5ABBF0B6585E8D405D933280
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:18:49 +0000
ROA not before:           Fri 05 Jun 2026 06:13:49 +0000
ROA not after:            Fri 04 Jun 2027 06:18:49 +0000
asID:                     4847
IP address blocks:        219.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8a:b2:f8:e2:c5:44:8d:5a:bb:f0:b6:58:5e:8d:40:5d:93:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:13:49 2026 GMT
            Not After : Jun  4 06:18:49 2027 GMT
        Subject: CN=B0012F535BDD65F1115C917AC0A8BA9C23BF9071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:51:c9:e5:e1:6f:4f:09:8a:63:e8:8a:0c:
                    df:51:6b:84:71:f5:5e:42:ac:95:5e:8f:68:e8:1f:
                    c8:b6:95:73:2a:5f:ff:48:01:72:4d:00:21:51:c1:
                    5f:dc:5b:47:f4:39:6d:ff:c4:83:37:43:b4:53:61:
                    9d:64:5b:f5:d9:3d:91:81:84:a7:7f:8d:67:8d:bd:
                    1b:ac:83:84:a8:db:cc:76:9b:e7:c7:a0:d3:06:77:
                    49:ff:ce:f1:3e:8d:83:c1:49:9f:95:01:91:ed:45:
                    54:55:bf:a1:8b:a7:59:a9:f2:c2:2a:6b:12:ff:b1:
                    08:98:ae:3b:3f:3c:70:a8:1f:db:a3:e9:99:af:b2:
                    12:ff:a1:d3:70:dc:7e:24:41:70:61:52:2d:03:d3:
                    8a:ff:c7:bf:6d:0f:95:d5:fb:47:c5:1b:4a:13:45:
                    c9:54:0f:0a:be:ee:eb:4b:e4:7e:11:ce:8a:a8:16:
                    6e:1d:0f:e0:b8:83:3e:7c:6e:6a:28:4a:81:d0:6c:
                    55:f0:60:65:88:c3:ca:97:28:3d:94:25:a8:e5:41:
                    31:18:e8:7d:48:23:fd:2e:c6:83:a3:05:81:52:20:
                    c4:88:2b:49:10:dc:b7:3b:73:be:93:83:97:6f:61:
                    e0:a3:4a:d2:90:5d:62:e2:d1:72:42:57:1a:c6:2a:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:2F:53:5B:DD:65:F1:11:5C:91:7A:C0:A8:BA:9C:23:BF:90:71
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:98:cb:b7:91:49:ff:a3:3a:ce:c2:01:de:91:96:c7:95:
         df:92:72:99:cf:16:3f:1d:ca:3c:ab:48:38:c9:0c:3c:60:b8:
         63:d5:e1:bd:e4:e8:a0:6a:1d:92:f1:f6:4e:80:a4:40:cb:4c:
         e5:5c:6e:72:6e:e9:c7:a6:e8:4e:fe:95:da:3b:a5:49:aa:bf:
         f0:d7:ea:46:47:10:a4:23:c0:ea:b1:b1:9a:89:c9:d6:b6:68:
         f5:84:25:8f:c7:23:a8:83:35:43:4f:bd:27:f9:4b:9c:4b:19:
         9a:ee:b1:c5:db:69:ff:6c:28:9c:8b:3c:7b:d5:ca:72:80:b9:
         64:45:8e:63:81:31:be:e0:b6:74:ef:0c:82:e1:95:18:16:9f:
         e7:e7:21:1c:96:1b:8c:b9:22:13:6f:00:bd:84:d6:26:10:d4:
         99:ea:2c:55:37:05:dd:dc:32:da:7b:13:ef:02:0c:36:dc:55:
         64:6c:0c:5b:1f:6d:c3:b2:a2:91:29:b6:71:9f:00:d8:67:6f:
         58:7c:4b:39:2f:80:73:c5:8e:da:72:52:28:e7:11:57:28:d0:
         93:1a:dd:23:cd:2f:57:62:5a:a5:6a:24:ca:ca:17:d5:4c:ed:
         3d:b1:e3:c1:9f:19:00:82:44:02:9a:83:8e:1b:f1:5b:f6:29:
         02:f5:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:10 2026 by rpki-client