Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35382e302f32342d3234203d3e203538343436.roa
File:                     3131342e36372e35382e302f32342d3234203d3e203538343436.roa (raw, json)
Hash identifier:          cYwwgcRTTCL21Mw1zTvOvGT6eLmUiDmcaPy4D/S8cQQ=
Subject key identifier:   D4:6E:D0:43:50:FE:8E:4E:84:6E:6C:D9:50:09:AD:34:4E:FD:4C:0F
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       19E6C7291867FB62CA76A06AB47D6E6C1D5710BB
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35382e302f32342d3234203d3e203538343436.roa
Signing time:             Tue 09 Jun 2026 06:54:59 +0000
ROA not before:           Tue 09 Jun 2026 06:49:59 +0000
ROA not after:            Tue 08 Jun 2027 06:54:59 +0000
asID:                     58446
IP address blocks:        114.67.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e6:c7:29:18:67:fb:62:ca:76:a0:6a:b4:7d:6e:6c:1d:57:10:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:49:59 2026 GMT
            Not After : Jun  8 06:54:59 2027 GMT
        Subject: CN=D46ED04350FE8E4E846E6CD95009AD344EFD4C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:d5:a5:7c:08:39:dc:5b:a2:41:f4:d6:e0:
                    82:9a:6a:16:99:ec:de:19:52:4d:8a:57:d7:9b:41:
                    ea:c6:e8:12:b3:12:7b:67:6d:04:e1:52:29:20:59:
                    0d:ac:1c:e3:28:95:1a:f5:9c:50:85:ac:b3:44:99:
                    5a:77:d0:36:82:bd:ad:36:3e:40:90:26:59:ea:10:
                    16:48:40:67:1a:c9:36:86:e7:61:19:10:f4:2c:f9:
                    ec:bb:f0:ec:cd:18:2f:3c:06:8f:59:ca:bb:02:38:
                    cd:82:6b:72:43:a9:50:b7:b2:fe:a6:59:54:bf:6c:
                    98:10:be:71:f1:b6:f0:21:1f:a2:48:4f:40:4f:c7:
                    5a:0e:a0:2d:50:61:e9:cd:c3:05:1b:07:3d:41:a9:
                    4d:99:d2:41:5a:2d:d9:7a:aa:47:76:d1:54:88:0c:
                    91:e0:7f:cc:c7:ca:19:c3:66:d6:f2:fa:87:0a:31:
                    ff:c9:54:56:77:cb:35:b2:87:d2:22:d3:f5:84:96:
                    08:27:e7:2d:9c:cc:f4:39:16:a5:e4:ec:be:7a:76:
                    fe:ab:16:6d:cf:fe:1f:b8:5c:e9:c7:81:1b:37:03:
                    01:76:b5:a1:ae:6e:56:bc:3b:7a:6d:80:0f:52:ff:
                    25:d9:d8:65:4d:7e:a5:9e:c9:bf:5b:8f:44:f4:91:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:D0:43:50:FE:8E:4E:84:6E:6C:D9:50:09:AD:34:4E:FD:4C:0F
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e35382e302f32342d3234203d3e203538343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.67.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:50:f6:50:27:db:b4:3f:5b:47:52:1a:50:f9:70:98:d1:
         0f:59:84:8d:14:d2:68:3e:c0:a6:af:0e:71:fc:e3:b5:62:28:
         42:8a:17:62:40:1c:02:04:ef:5b:e1:2d:2b:c1:9d:35:8b:a8:
         a3:4c:7f:2b:dd:1f:ff:7c:eb:e0:ff:07:c3:7e:84:0c:4e:0d:
         72:19:de:52:51:e3:e7:1c:ae:4e:2a:4e:db:e3:86:e8:9b:c8:
         c3:11:de:c4:28:36:32:1d:54:ec:21:49:47:ff:cd:18:e7:f6:
         ca:0f:94:57:46:83:88:d0:80:c9:9e:8c:17:07:20:f8:e4:c5:
         b3:70:26:43:c6:3f:7a:8e:35:8c:ac:9b:26:b3:74:b9:79:23:
         5b:48:1a:6b:c3:3d:2f:fd:87:79:ea:2d:0e:dc:36:b5:24:39:
         42:a5:ab:62:b4:bb:03:80:80:bc:d2:80:bf:e6:0f:2a:12:a3:
         bd:45:0e:f9:80:f0:7a:25:13:c7:df:c3:6d:16:8e:fe:46:9b:
         f5:18:a9:39:34:58:08:a9:11:ae:84:50:6e:cd:ef:69:7c:87:
         fd:f1:d1:e6:ba:3d:04:31:3f:75:3e:a0:59:65:15:74:f3:71:
         ba:79:2d:3e:2c:18:01:48:4c:d3:f9:6d:e4:33:09:74:be:c9:
         22:e6:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:05 2026 by rpki-client