Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e33322e302f32312d3231203d3e203536303438.roa
File:                     3131382e3139342e33322e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          66bgFsuwP5YR6jczc1wT5regWMhuco+8bvtJ9aQPcFU=
Subject key identifier:   FF:61:F4:8A:BD:6F:66:47:20:A3:BF:1A:27:9E:D3:C5:33:E2:7C:28
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       12D103B0B51CD0066BC5A7E55AC375A74013EB8C
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e33322e302f32312d3231203d3e203536303438.roa
Signing time:             Tue 02 Jun 2026 07:48:54 +0000
ROA not before:           Tue 02 Jun 2026 07:43:54 +0000
ROA not after:            Tue 01 Jun 2027 07:48:54 +0000
asID:                     56048
IP address blocks:        118.194.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d1:03:b0:b5:1c:d0:06:6b:c5:a7:e5:5a:c3:75:a7:40:13:eb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:43:54 2026 GMT
            Not After : Jun  1 07:48:54 2027 GMT
        Subject: CN=FF61F48ABD6F664720A3BF1A279ED3C533E27C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:67:89:6c:79:57:d9:f8:bf:7c:e1:ae:8c:
                    13:6e:84:4a:2c:e4:e8:7c:d2:61:c0:8f:0f:c6:39:
                    6b:28:09:af:4c:15:41:5a:a8:96:74:76:00:72:de:
                    92:49:9c:c5:54:7c:84:ab:fd:ee:35:d6:20:2a:33:
                    e3:c6:c3:30:63:aa:eb:59:66:84:10:34:95:27:fe:
                    5a:f5:7e:91:7f:4a:56:19:c2:18:1b:63:3c:21:73:
                    c9:aa:aa:16:ad:e0:54:0d:6e:06:39:3d:c5:3d:b2:
                    ce:54:35:bd:15:16:c2:40:01:40:07:32:b4:bc:c3:
                    27:4f:70:83:d5:78:08:9e:56:8f:4e:95:9a:92:34:
                    0a:99:7f:66:62:66:1f:ee:f4:ac:a3:e7:4f:37:cb:
                    6b:77:93:1a:fc:58:38:14:96:63:31:2f:61:af:bf:
                    4e:d1:40:06:20:05:38:97:8b:8b:0d:50:9b:41:b3:
                    56:5e:07:1a:f6:89:de:c5:8c:5f:16:42:65:b6:3c:
                    fc:9f:d3:f0:a3:33:e7:17:ae:34:7c:a8:6a:1f:93:
                    dd:01:52:3f:d2:d3:66:80:fd:63:75:8e:d2:c6:5f:
                    bc:5a:00:f2:19:1d:ec:48:d9:9f:34:5c:59:4c:77:
                    cf:54:b7:c1:82:a3:de:40:df:f6:18:fc:ac:b5:4b:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:F4:8A:BD:6F:66:47:20:A3:BF:1A:27:9E:D3:C5:33:E2:7C:28
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e33322e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.194.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:48:8d:33:ec:66:9b:45:74:49:35:df:7b:fd:e0:45:52:79:
         8a:42:5c:b2:44:55:c7:75:b7:5e:bb:63:05:f7:22:61:e3:33:
         02:84:00:5b:80:5a:db:4e:73:9e:b1:26:d2:70:c0:fe:92:db:
         06:33:6d:73:e3:4f:c3:11:4e:ae:e6:73:23:2f:71:d1:a5:b3:
         ff:91:01:34:95:98:3d:ab:38:d7:0e:5d:7e:d1:30:41:f7:ea:
         12:05:7e:ad:c1:78:3a:01:45:04:bb:a9:79:15:5e:a0:88:ea:
         63:5b:e1:03:d9:06:2a:4d:d8:26:60:47:fe:1e:64:e5:61:7f:
         26:3b:a3:77:e2:d7:17:b2:79:3e:24:bd:c2:44:46:f6:bf:1d:
         79:de:76:4c:9e:a9:fd:3b:47:8f:e4:24:10:1e:b5:1a:93:10:
         ee:3a:7a:79:c9:25:37:cb:ca:c6:f4:7b:b3:58:b1:43:f6:99:
         ec:9f:33:93:4d:65:cb:84:0a:1a:35:df:39:75:16:e4:44:f6:
         52:df:92:81:77:72:df:62:ac:28:84:79:f9:20:1e:a3:67:c3:
         68:7e:bd:8f:9d:47:fc:c1:a9:c6:14:fb:5f:a0:61:52:be:ac:
         87:aa:a4:6f:94:e5:e8:2f:13:6a:62:db:a8:ac:1a:8f:d1:b0:
         d8:91:f1:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:02 2026 by rpki-client