Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e203536303438.roa
File:                     3131382e3139342e35362e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          3h+1mGvW/F1q6aPyrG2uRJfP0NCyMy+g8d9cHabmE9I=
Subject key identifier:   DC:25:83:47:26:6B:9E:9C:3A:0F:22:E6:B8:C2:61:C4:1D:45:93:C4
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       0851C70538732687A8758B69A8926FB4B7F50CD1
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e203536303438.roa
Signing time:             Tue 02 Jun 2026 07:48:53 +0000
ROA not before:           Tue 02 Jun 2026 07:43:53 +0000
ROA not after:            Tue 01 Jun 2027 07:48:53 +0000
asID:                     56048
IP address blocks:        118.194.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:51:c7:05:38:73:26:87:a8:75:8b:69:a8:92:6f:b4:b7:f5:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:43:53 2026 GMT
            Not After : Jun  1 07:48:53 2027 GMT
        Subject: CN=DC258347266B9E9C3A0F22E6B8C261C41D4593C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:9a:25:5e:31:21:b4:17:0d:ca:6e:d9:44:
                    ed:a5:32:9a:52:c7:6f:42:4a:93:35:2c:7b:0b:ec:
                    ea:e5:24:a3:ac:c9:69:4b:ad:cd:8c:46:70:78:4a:
                    1e:ed:97:16:54:9b:d5:0a:6c:13:f6:e4:86:f2:af:
                    3f:b1:6c:84:52:e4:dd:92:40:7e:90:ce:09:99:55:
                    a6:c5:ce:03:a2:19:c1:fe:7b:7f:f7:18:fc:32:84:
                    be:3d:11:1b:13:29:c5:77:6a:e1:45:75:98:b0:1b:
                    9a:54:ff:ef:4c:7d:d3:d2:55:e5:fc:f1:0f:df:4f:
                    76:0a:44:04:d6:c2:47:41:03:c3:95:c2:06:6c:7a:
                    ea:b9:80:be:bf:1d:63:3e:cd:11:37:cd:73:dd:e3:
                    b7:e0:28:4a:fa:6d:8c:21:4e:29:a6:5a:3d:b0:e8:
                    16:57:a2:99:04:ce:e5:0a:aa:4e:df:26:5f:26:31:
                    89:1f:8c:2c:5f:47:ce:4d:dd:52:41:3e:d6:46:b6:
                    0f:29:82:5e:fa:7d:84:8c:2e:a2:5e:fb:bd:9d:23:
                    17:98:bb:3d:90:59:f6:b2:eb:fb:58:62:b9:d6:30:
                    10:99:4e:7b:89:0e:13:ef:77:77:f6:3e:8b:24:8c:
                    6f:f5:8d:75:84:b7:20:80:de:78:a4:89:65:2c:12:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:25:83:47:26:6B:9E:9C:3A:0F:22:E6:B8:C2:61:C4:1D:45:93:C4
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.194.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:93:66:58:f3:da:16:41:d6:0a:53:09:41:5e:f9:e7:65:f9:
         8f:19:da:9a:d9:09:fe:53:26:06:e6:07:a4:d4:a6:d3:d9:5a:
         16:a3:25:dc:bb:be:65:1b:fd:25:f5:00:45:53:e7:48:63:29:
         68:4d:ca:d7:ba:28:d7:fa:5f:70:a3:23:aa:25:24:01:a8:6a:
         51:98:60:d6:19:be:8a:01:13:11:d1:fd:08:dc:3f:59:1a:61:
         c3:a7:10:5d:15:26:78:a2:cc:95:92:04:ef:20:80:32:5c:0b:
         11:ab:73:02:e4:07:e3:93:e4:73:e9:93:c8:07:5f:a9:a3:7f:
         00:2c:0b:1f:73:66:3e:d5:2e:4e:57:0c:05:a6:4c:cf:cf:c5:
         93:b8:ea:b7:ee:02:c3:48:7c:38:79:e2:be:1b:a5:0c:21:00:
         02:6c:2a:1f:05:21:b5:52:95:bb:5a:3a:83:62:09:a8:d4:d1:
         0f:da:bf:39:5f:4f:a6:c6:79:87:eb:1c:ef:3d:ca:91:cf:d2:
         ae:da:89:21:9d:9b:cc:d6:e8:a6:1d:26:26:a7:b6:f6:7d:0b:
         66:ac:a0:83:81:15:08:0a:27:49:f6:91:66:f5:ac:bd:f3:7d:
         79:7d:fc:51:be:3f:2f:e0:a2:66:85:5f:b0:12:60:bb:51:5f:
         7d:98:9f:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:03 2026 by rpki-client