Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36302e302f32342d3234203d3e203536323832.roa
File:                     3131342e36372e36302e302f32342d3234203d3e203536323832.roa (raw, json)
Hash identifier:          7geGjPaGD31tXjQBjca6pWzliEEXP++dH5kyDhmLqSY=
Subject key identifier:   4C:C3:72:4A:6A:DE:CB:62:29:F5:FA:A1:A5:36:59:F1:65:DA:32:E1
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       0F89F0B0FB75F1E249B0D27A7E43CCC087964F84
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36302e302f32342d3234203d3e203536323832.roa
Signing time:             Tue 09 Jun 2026 06:53:16 +0000
ROA not before:           Tue 09 Jun 2026 06:48:16 +0000
ROA not after:            Tue 08 Jun 2027 06:53:16 +0000
asID:                     56282
IP address blocks:        114.67.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:f0:b0:fb:75:f1:e2:49:b0:d2:7a:7e:43:cc:c0:87:96:4f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jun  9 06:48:16 2026 GMT
            Not After : Jun  8 06:53:16 2027 GMT
        Subject: CN=4CC3724A6ADECB6229F5FAA1A53659F165DA32E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:28:d3:7d:b4:84:fd:16:ce:ea:d9:eb:5f:
                    d6:fa:13:09:5e:7a:f2:5c:70:8f:66:0e:05:c1:53:
                    8b:d1:bb:4f:e7:74:e1:9f:ec:b7:c7:51:8e:7d:a2:
                    22:16:ac:61:f8:08:81:02:f6:a1:93:d7:64:8f:95:
                    7a:2d:ee:9e:6c:15:1e:a9:60:32:72:0e:07:f4:cd:
                    6e:57:87:ef:4e:c1:1d:05:1d:7d:ef:1c:d0:04:df:
                    4a:49:93:cc:52:c6:f3:c1:07:20:a0:fe:61:84:86:
                    12:f7:17:8e:37:27:4d:37:b4:91:5d:be:1d:a6:9c:
                    b6:2e:d9:ff:9f:74:be:67:4d:91:6c:56:91:44:e4:
                    bf:ae:9a:02:8d:8d:31:60:75:b6:8e:04:ae:3f:b3:
                    73:33:59:cb:a4:f3:ae:01:2d:99:52:82:56:17:be:
                    48:a9:7a:15:ce:d2:02:e5:b5:f3:69:92:2a:5e:1d:
                    c6:bf:03:07:12:c4:29:ba:70:d9:94:fc:f8:c5:57:
                    80:22:b4:4d:4c:39:4e:41:44:b2:c3:bb:57:6b:b9:
                    f8:20:c4:25:ac:62:84:9b:52:8f:a6:3f:c1:ca:37:
                    e2:0b:bc:88:c4:3a:25:af:9b:ae:34:77:d7:4b:1f:
                    b6:5c:3f:22:ab:92:55:82:0f:64:ca:5a:82:3d:f8:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C3:72:4A:6A:DE:CB:62:29:F5:FA:A1:A5:36:59:F1:65:DA:32:E1
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3131342e36372e36302e302f32342d3234203d3e203536323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.67.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:19:fe:1e:3f:94:e2:3a:f0:45:45:e3:17:1f:a2:c5:3e:
         13:d4:cf:4a:92:42:51:31:32:94:78:89:5b:a0:0e:34:a5:7e:
         79:58:de:89:ef:67:59:14:18:6a:9c:d0:07:43:3c:44:1b:e0:
         60:48:9b:84:0d:a6:d0:3b:15:9b:02:a1:a4:0a:49:fb:e9:bd:
         d7:3d:38:2d:88:e2:cc:8e:dc:bc:a0:2d:92:be:90:6b:2d:ae:
         a0:d6:7c:08:e9:72:cd:9b:22:a2:ad:cd:89:c6:8a:dd:2c:31:
         62:4d:de:5f:65:e4:30:df:5d:11:ae:59:56:01:df:f9:17:df:
         fa:89:91:2e:6e:61:d2:4a:d0:fa:15:60:a3:93:9b:32:25:b9:
         8f:23:63:71:47:91:ee:19:2e:ac:65:04:7c:df:84:66:be:e7:
         2c:c0:dd:3e:92:c5:52:94:c0:6e:d9:c7:55:d6:d1:7f:f8:64:
         34:40:e0:b8:92:58:e7:49:b2:25:4f:81:bf:f7:08:89:97:a4:
         eb:a8:1f:82:7b:1c:6d:1e:df:dc:af:92:c2:01:e1:e6:64:22:
         00:83:2e:35:5b:e9:13:46:62:e8:67:49:3b:9a:ff:d8:42:83:
         ca:38:24:48:3a:2b:a3:a7:b1:cc:16:00:16:46:d7:70:72:49:
         78:a1:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:08 2026 by rpki-client