Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203137343238.roa
File:                     3231392e37322e33322e302f32302d3230203d3e203137343238.roa (raw, json)
Hash identifier:          c0FVzlWCWzZVTEVJTSyAhF+fpKJlCgBr79QMaX/45zc=
Subject key identifier:   D8:03:AF:F7:F9:44:9D:BA:B0:5E:D8:3F:95:24:52:B1:90:8F:71:F0
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       5AEF9B226047FC0F6C9C4A633EFB569A1C0330DB
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203137343238.roa
Signing time:             Fri 05 Jun 2026 06:23:49 +0000
ROA not before:           Fri 05 Jun 2026 06:18:49 +0000
ROA not after:            Fri 04 Jun 2027 06:23:49 +0000
asID:                     17428
IP address blocks:        219.72.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ef:9b:22:60:47:fc:0f:6c:9c:4a:63:3e:fb:56:9a:1c:03:30:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:18:49 2026 GMT
            Not After : Jun  4 06:23:49 2027 GMT
        Subject: CN=D803AFF7F9449DBAB05ED83F952452B1908F71F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:91:be:85:79:86:c8:58:ed:b4:f4:59:83:
                    77:a0:73:3c:49:5a:78:3f:91:1e:83:19:4c:c2:41:
                    68:75:98:24:45:cd:8e:75:4b:81:4b:91:c0:1b:30:
                    0f:57:a5:4d:d8:50:8e:b1:ae:15:a5:11:2d:21:5a:
                    49:1b:61:5e:7f:3a:0c:6e:16:74:9c:e3:08:74:d5:
                    83:fd:3f:0e:b9:13:02:d5:df:61:38:3e:d6:04:af:
                    55:ea:e4:2b:73:f6:50:f2:fc:9e:93:ea:33:73:31:
                    63:ea:ba:19:79:ed:16:a1:d7:96:02:18:87:cd:86:
                    17:c1:35:38:79:88:db:62:c1:b5:34:d4:e1:d2:62:
                    6e:47:cb:22:39:c1:84:fa:d0:dd:09:b9:88:5f:a6:
                    5e:23:cb:9f:cf:2d:ef:3a:f4:08:f9:5d:0a:75:75:
                    98:17:cc:24:92:df:99:ec:24:fd:84:a9:f8:0e:05:
                    9c:d1:19:c3:3a:e7:6c:d1:52:b5:39:14:99:87:a7:
                    4f:f8:1b:aa:c7:89:80:04:f1:3c:9d:81:38:f6:9a:
                    17:9d:59:00:cd:80:0e:6c:f4:41:ab:33:99:d4:c6:
                    41:dc:e3:a3:6c:ee:eb:a8:1c:72:52:52:2d:6d:fb:
                    7c:1f:b1:8e:01:d1:13:2e:cc:30:42:36:9b:21:b4:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:AF:F7:F9:44:9D:BA:B0:5E:D8:3F:95:24:52:B1:90:8F:71:F0
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203137343238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:30:19:25:c9:fe:fb:f1:c9:36:df:1f:fa:d8:dc:5d:51:08:
         c5:10:b9:30:4c:69:26:62:b5:ca:f6:5d:f8:f2:35:19:16:4e:
         60:62:0f:f5:03:ac:e6:2a:9f:e6:80:e2:fe:d6:f9:c4:26:f1:
         ca:28:69:b9:a4:f7:fa:22:37:87:2f:f7:24:21:b8:53:da:73:
         55:d7:44:d5:70:c8:3a:3a:1d:d7:9e:d8:a9:e9:38:82:f9:01:
         8c:4b:4b:1f:30:85:01:a5:07:f2:c4:97:27:ee:2a:13:e2:54:
         45:9f:f9:01:68:82:45:8d:f4:c1:5d:01:64:e1:3b:35:37:48:
         cc:98:31:d9:8d:79:86:12:fe:b0:d4:13:2d:a3:85:0e:4d:88:
         e8:49:53:e7:f6:26:23:9c:aa:30:53:79:b1:96:22:ee:ff:20:
         99:75:6f:3c:b6:83:da:06:41:6b:a8:6a:cd:49:3c:53:82:50:
         11:88:d2:de:97:5c:fb:ca:6f:ef:3d:46:95:2d:f7:68:c4:d7:
         6c:92:14:ce:9d:5e:ad:0d:06:d4:ab:0d:51:a8:f3:57:a3:0f:
         72:a1:33:fb:f7:d0:27:9c:40:da:66:b4:60:a2:93:27:f4:08:
         65:8a:d5:3b:dd:02:15:e6:89:90:3f:87:51:9a:14:af:6f:cc:
         96:9d:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client