Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e34382e302f32342d3234203d3e203536323832.roa
File:                     3131342e36372e34382e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          Yxj5bjbBz8ElylDAxXlYwWKSvbk5UeNZezinfXo0VmI=
Subject key identifier:   45:EA:7E:8C:28:B4:CE:19:0E:46:86:EC:FB:FE:94:B3:69:1E:59:78
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       2099974616CE63B3181C036D0C6438800B81DE51
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e34382e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:52:35 +0000
ROA not before:           Tue 09 Jun 2026 06:47:35 +0000
ROA not after:            Tue 08 Jun 2027 06:52:35 +0000
asID:                     56282
IP address blocks:        114.67.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:97:46:16:ce:63:b3:18:1c:03:6d:0c:64:38:80:0b:81:de:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:47:35 2026 GMT
            Not After : Jun  8 06:52:35 2027 GMT
        Subject: CN=45EA7E8C28B4CE190E4686ECFBFE94B3691E5978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:b9:54:f3:61:43:b9:b5:6c:88:bc:2d:48:
                    84:5d:7c:f6:31:09:ed:a7:13:c0:4b:5c:f5:a9:1a:
                    86:c7:55:0d:3c:63:17:e2:3e:9f:00:f7:40:4e:56:
                    c7:d7:8f:ec:4e:e0:24:2b:47:18:d1:5a:5d:99:48:
                    ee:3f:92:ce:79:4f:e5:e1:ce:b3:8b:ac:d3:68:25:
                    db:48:f4:5d:c8:07:56:26:e5:8c:b7:80:7f:9a:a8:
                    f6:3a:52:0e:c7:bd:7d:c5:9c:66:40:b2:89:fc:be:
                    e6:2e:61:b2:4b:ba:00:e5:6f:2c:75:c0:ae:f5:12:
                    9c:7b:82:1a:1e:f2:9b:99:d5:9f:82:00:2f:b3:09:
                    6f:66:fe:cc:a8:9c:47:e8:0c:4a:9c:ae:ef:75:a2:
                    b6:64:0a:41:54:49:3e:44:c8:37:00:80:a8:20:5d:
                    5c:fb:7c:74:99:ab:c5:7f:89:33:51:c8:dc:b1:ce:
                    3d:5c:5c:54:58:88:67:81:e7:de:30:1d:6a:d9:f0:
                    62:d2:89:ad:e2:bc:67:1e:62:d4:16:26:10:d7:9c:
                    32:bd:0f:7e:9c:03:79:0d:9d:f4:ce:8f:7a:d4:e0:
                    42:cf:0e:a1:af:31:52:e7:08:c9:2c:f4:c0:69:62:
                    18:4a:d5:8a:52:f5:7f:74:d5:5b:26:be:10:56:d0:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EA:7E:8C:28:B4:CE:19:0E:46:86:EC:FB:FE:94:B3:69:1E:59:78
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e34382e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.67.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:47:71:6d:0a:fc:a7:d2:e5:61:4e:0d:ee:6b:2c:6c:92:
         06:c2:f9:13:d2:1e:d1:1c:bd:b7:b1:54:a9:bd:6f:c8:df:85:
         44:cb:cb:d9:88:ae:a8:38:1d:0f:64:0d:05:21:a9:22:76:7e:
         4b:96:fe:86:90:06:43:ab:c7:5f:50:1c:d8:9c:d7:b2:49:ce:
         05:b6:74:51:68:1d:6c:5f:2a:32:02:b6:ec:ef:b1:af:59:74:
         cd:eb:cd:14:37:77:ba:4d:99:53:42:3c:98:e5:45:22:b9:65:
         02:28:46:c1:d0:c1:dc:80:6f:c5:c3:1d:06:7c:d2:c2:de:99:
         b5:3a:39:36:b0:3c:66:7c:40:87:88:62:01:db:16:81:74:a4:
         57:d0:d7:5b:86:b6:6f:f1:ad:50:cd:5b:6a:58:61:ef:74:31:
         fc:17:f0:fc:a1:3b:ed:7e:aa:f2:c0:83:70:d8:10:eb:b2:83:
         97:fa:36:54:6a:bd:7c:50:63:5e:28:c4:db:e9:e7:d7:44:85:
         6d:33:ef:cf:45:47:fd:53:76:07:7c:7f:e9:21:9a:a3:17:66:
         1a:cd:d0:8c:7f:7f:87:f1:47:04:ac:f2:28:28:2d:ce:19:01:
         d4:f4:c6:c2:70:8b:73:42:67:50:53:7e:1e:dc:96:fe:95:f4:
         de:4d:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:06 2026 by rpki-client