Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203535393930.roa
File:                     3231392e37322e3235302e302f32342d3234203d3e203535393930.roa (raw, json)
Hash identifier:          DhxPQ3npyd8AjwwtDyMMDmCtI84qF3r+S2UMAB91R5s=
Subject key identifier:   1A:24:D5:85:43:0F:81:28:11:11:17:88:25:3F:82:2A:82:9A:8D:30
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       4CF8F0688B0F4D2CB6C8B43093A5B4AB92EDEC9E
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203535393930.roa
Signing time:             Fri 05 Jun 2026 06:21:24 +0000
ROA not before:           Fri 05 Jun 2026 06:16:24 +0000
ROA not after:            Fri 04 Jun 2027 06:21:24 +0000
asID:                     55990
IP address blocks:        219.72.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f8:f0:68:8b:0f:4d:2c:b6:c8:b4:30:93:a5:b4:ab:92:ed:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:16:24 2026 GMT
            Not After : Jun  4 06:21:24 2027 GMT
        Subject: CN=1A24D585430F812811111788253F822A829A8D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:cf:68:42:50:5d:08:26:37:ea:6c:95:cb:
                    d3:18:0c:67:d4:aa:0b:1f:f8:62:0e:29:1a:93:4a:
                    b2:6e:a5:4b:73:1b:6e:0a:f8:cb:26:43:79:04:e8:
                    d9:ad:63:6f:9d:d4:ff:d8:7e:22:25:e4:c7:36:dc:
                    2b:b1:1d:7f:6d:bc:be:51:73:56:b1:70:28:5a:59:
                    ca:b6:a5:ae:c5:c7:f1:ee:39:1c:44:1e:22:4c:a6:
                    91:60:d9:68:01:86:cb:15:9c:69:5d:eb:80:7f:67:
                    c2:46:63:d4:ee:14:bf:fd:ce:40:05:85:1e:39:40:
                    f1:7b:32:fc:5a:cf:c1:01:7e:55:7a:21:1c:68:82:
                    9d:33:56:1e:46:99:98:ec:fb:72:ad:51:84:ea:d6:
                    80:1c:ce:a3:b0:c3:50:45:97:66:e6:25:13:ab:9a:
                    48:5b:54:1c:86:f4:e8:88:85:4a:c9:4b:f7:b4:56:
                    f6:76:bd:6e:64:ae:7b:3c:89:8c:28:ce:ed:7f:ec:
                    53:fa:3c:29:a9:05:71:7b:18:b2:57:58:5d:b3:45:
                    c1:c1:a7:03:f4:31:c8:ab:81:75:ad:e1:d2:e0:7d:
                    04:65:47:6a:0f:29:2d:92:13:e9:86:09:af:7a:63:
                    b3:a2:60:f0:4a:19:3e:79:b9:d6:14:9b:96:0a:fb:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:D5:85:43:0F:81:28:11:11:17:88:25:3F:82:2A:82:9A:8D:30
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203535393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:37:88:6c:9a:f4:5d:26:2f:75:ac:ba:01:f9:5c:3a:56:50:
         5d:8e:b5:b5:10:74:ec:91:94:f6:af:2c:55:5f:80:92:b1:47:
         a7:bc:80:92:2d:91:35:46:c6:10:e9:99:5a:89:06:3a:8e:9d:
         b2:23:71:49:47:4a:84:4a:f7:a5:eb:c5:30:54:17:7f:b1:80:
         27:b4:85:fd:c1:5b:9a:29:63:ec:51:7d:b6:0a:98:59:89:f7:
         70:2a:42:49:f6:d1:bd:9e:e7:ec:62:a2:4f:a7:b8:e2:11:04:
         70:bb:32:e7:3f:26:cf:ba:21:c4:a1:c9:48:a5:b6:14:e0:64:
         02:b1:cd:5b:77:a2:93:4b:fb:6e:40:2b:e0:cc:3d:83:7f:53:
         27:db:7c:4c:92:02:5a:40:e4:cb:58:b4:f0:d5:2d:57:a8:30:
         de:91:48:a4:fc:07:16:ca:f3:19:f0:0f:68:a8:7a:0a:16:92:
         ed:07:b3:c1:6a:77:be:a6:50:d6:a4:12:cc:72:b5:03:80:83:
         c0:03:ea:98:77:be:97:b1:75:2f:c1:7e:25:47:d3:c0:e9:da:
         8a:e6:a8:ef:35:5d:a0:54:1f:95:7a:70:93:92:8d:8e:ae:c3:
         41:e7:13:4a:6d:5e:2f:04:e7:49:6d:3e:88:fe:a6:d0:c4:6b:
         dc:d4:d0:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:29 2026 by rpki-client