Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203536303438.roa
File:                     3132322e31312e34382e302f32312d3231203d3e203536303438.roa (raw, json)
Hash identifier:          OeABueeL5bVOfgm0ioMscNw6JnIbVThJEuNaqIcxCnc=
Subject key identifier:   FB:5F:6B:25:AA:20:A5:93:17:68:AB:D1:F5:71:A3:68:94:99:86:A4
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       7A513D9BE679CF080DAF43CCFE8ECB969E7A9442
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203536303438.roa
Signing time:             Tue 02 Jun 2026 07:48:53 +0000
ROA not before:           Tue 02 Jun 2026 07:43:53 +0000
ROA not after:            Tue 01 Jun 2027 07:48:53 +0000
asID:                     56048
IP address blocks:        122.11.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:51:3d:9b:e6:79:cf:08:0d:af:43:cc:fe:8e:cb:96:9e:7a:94:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:43:53 2026 GMT
            Not After : Jun  1 07:48:53 2027 GMT
        Subject: CN=FB5F6B25AA20A5931768ABD1F571A368949986A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:30:b3:c5:c3:4d:d4:e2:ec:20:b0:29:be:
                    ee:85:0e:d6:ef:21:63:e0:95:6b:54:34:e0:db:07:
                    c9:e1:33:08:23:74:e0:92:a3:37:00:b7:7f:26:b2:
                    3e:cf:2f:d3:b9:93:0f:0b:d2:ff:d3:a8:32:e3:1e:
                    a9:b1:87:23:e0:0c:da:16:ac:39:92:46:c0:f1:9f:
                    bb:ac:03:5c:6d:6c:9b:ca:43:5c:6a:d3:0c:e0:64:
                    17:91:2a:f5:e4:0e:ee:6b:88:7f:ab:81:ec:b5:d7:
                    f6:81:c8:53:88:4f:90:66:a0:a2:e5:08:41:c5:f2:
                    fd:2b:0e:ea:72:c0:ac:72:bc:17:c3:b6:39:48:e0:
                    2b:34:c1:2f:19:f9:68:ac:c3:c6:02:be:b2:6c:9a:
                    69:2d:02:a4:b7:34:88:cd:bb:01:41:a2:fb:7c:2d:
                    58:77:53:06:50:24:2c:26:72:7e:c8:49:c8:34:97:
                    48:4c:14:43:93:48:fb:49:d4:97:e8:6d:c3:8e:0a:
                    a0:05:55:20:a8:49:4f:3b:f3:3c:ec:48:3e:96:02:
                    ba:a6:ce:73:dc:60:e0:63:e4:94:dc:ee:1b:0e:aa:
                    fb:2b:4f:39:a9:09:c8:5d:17:ec:ac:a0:00:3c:64:
                    ae:29:27:94:5e:72:48:e0:df:8b:2c:dc:74:89:5c:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:6B:25:AA:20:A5:93:17:68:AB:D1:F5:71:A3:68:94:99:86:A4
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e34382e302f32312d3231203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:77:64:b8:21:44:4f:52:4c:9e:55:ab:d1:a1:f8:7d:b9:02:
         33:aa:65:3e:9c:4e:d0:35:5d:1c:66:57:be:2f:c8:41:35:1b:
         93:8c:e3:86:74:1c:c3:30:5d:df:b1:27:7e:e4:3a:08:ac:77:
         91:3e:41:f3:d2:fc:52:bf:76:9a:b2:d2:cd:48:a2:59:03:9b:
         cf:4d:de:db:8e:1a:ff:ae:27:99:9d:be:65:86:64:96:b8:23:
         9b:31:e1:ed:88:d1:e0:61:c0:76:ce:7a:d7:97:05:62:cf:ea:
         8a:ae:08:e4:56:c0:b2:f6:d7:2d:b7:02:19:2c:8d:42:eb:ea:
         e8:99:17:b5:48:e7:c5:48:f2:31:f7:56:ab:35:e4:aa:3c:ba:
         8d:ef:8f:e4:28:7c:3d:fc:d7:10:18:8e:5c:54:41:3a:15:04:
         5c:93:5a:9a:d0:e2:c9:29:0d:16:ef:f3:78:8d:17:a4:29:c2:
         f2:12:b9:64:5c:13:f5:e4:2a:52:9d:e1:03:bb:6a:26:fd:6a:
         71:6b:5d:12:79:2c:6a:9b:19:bc:a9:1b:44:59:f4:e1:8f:8a:
         15:02:fb:ec:75:aa:61:cc:8b:30:1a:83:d3:3d:9a:0d:1a:63:
         29:f2:3e:97:64:58:34:99:00:2f:dc:62:76:ed:fc:a7:cb:64:
         e1:f1:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:35 2026 by rpki-client