Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e36382e302f32342d3234203d3e2034383437.roa
File:                     3231392e37322e36382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          s4eVAxQpXF49VSNUtT5632EkSPUX7A8F2eDvRrC8o5w=
Subject key identifier:   DF:ED:C1:76:6F:BE:DF:EB:2C:DF:A5:17:5B:70:91:0A:0C:A1:4F:5E
Certificate issuer:       /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial:       0DDCD996DFD68F726CF183EAA58D4ED8E93E9403
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e36382e302f32342d3234203d3e2034383437.roa
Signing time:             Fri 05 Jun 2026 06:18:49 +0000
ROA not before:           Fri 05 Jun 2026 06:13:49 +0000
ROA not after:            Fri 04 Jun 2027 06:18:49 +0000
asID:                     4847
IP address blocks:        219.72.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:dc:d9:96:df:d6:8f:72:6c:f1:83:ea:a5:8d:4e:d8:e9:3e:94:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
        Validity
            Not Before: Jun  5 06:13:49 2026 GMT
            Not After : Jun  4 06:18:49 2027 GMT
        Subject: CN=DFEDC1766FBEDFEB2CDFA5175B70910A0CA14F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:ad:bf:85:de:92:0a:79:ad:5e:a7:8a:3e:
                    c8:1d:aa:41:6c:d4:a6:07:6c:aa:7d:2f:ad:0f:84:
                    5f:f2:49:b5:bd:74:f5:3c:b3:fd:7d:c4:48:6a:c6:
                    cc:98:8c:56:97:28:a5:d4:01:ee:35:c8:d5:6e:b8:
                    45:dc:81:b3:df:8d:63:6e:0d:f6:07:81:73:1b:07:
                    66:ae:c4:64:6c:9a:09:b3:34:e9:7d:a6:71:a6:65:
                    8d:e1:b2:d0:a0:3d:0b:f7:15:06:c5:b6:b2:64:d7:
                    b3:0b:84:c0:85:36:04:a9:8f:25:e1:bf:10:88:4c:
                    19:aa:cb:48:41:77:10:d2:0b:97:0e:0a:57:10:fa:
                    0c:ec:85:40:87:db:96:a4:aa:4c:89:de:69:c0:34:
                    4a:63:51:a5:05:ad:1d:45:b9:c6:c8:0c:ee:64:41:
                    e0:18:b8:fa:a9:1f:9b:30:bd:cc:e0:57:4a:96:fb:
                    c9:65:e2:c8:62:2e:b5:5a:4d:d2:74:b2:62:13:9f:
                    b5:10:90:77:e9:c8:73:ff:d7:17:f6:69:1a:fd:b5:
                    d7:df:64:46:5d:73:3b:1f:a7:15:cf:7c:69:03:e4:
                    5e:fb:d7:4e:5f:ef:d0:21:22:8e:5e:55:7b:44:32:
                    e7:1f:21:2b:e6:23:2e:91:36:99:47:1a:95:5e:7e:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:ED:C1:76:6F:BE:DF:EB:2C:DF:A5:17:5B:70:91:0A:0C:A1:4F:5E
            X509v3 Authority Key Identifier:
                keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e36382e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.72.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:02:22:80:06:d1:80:35:9a:2f:78:0b:a1:4a:bd:b4:34:19:
         81:f5:b9:05:91:31:a4:87:74:3b:bf:11:7a:5a:54:91:6b:38:
         ad:22:4d:57:82:4b:33:d1:1e:1d:46:e0:36:78:e7:30:6b:f6:
         9a:9c:c1:9a:6f:73:1c:a3:0b:6d:4f:37:e1:39:bc:29:08:0e:
         12:6c:6d:44:49:3f:47:a9:d7:82:35:f1:4b:bf:bf:47:47:28:
         07:6f:6c:7f:56:4a:3a:c1:68:dc:fb:19:56:df:86:5c:91:26:
         83:fb:35:82:e5:dc:5d:f3:a5:f5:77:fa:4c:b9:aa:83:e3:38:
         0f:f7:5b:69:7a:12:83:13:8b:66:1a:5f:c8:b8:e6:0d:11:3a:
         a3:91:97:2e:0a:47:81:c5:93:70:df:e7:28:12:85:97:60:7b:
         b0:d0:2f:ed:ea:1d:5d:21:87:3a:90:a9:14:1a:e4:49:48:25:
         82:37:cb:7f:25:a5:c2:60:21:9c:46:0e:a0:db:1f:20:2d:f6:
         60:89:a2:8f:58:79:67:b1:ef:05:73:5e:ec:b6:71:1e:44:4b:
         00:54:51:06:8c:fb:ac:54:31:58:b1:51:10:96:82:76:37:4f:
         28:ca:8a:13:8d:8d:88:11:58:d0:87:48:47:96:d9:cb:be:6b:
         df:06:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client