Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e2034383038.roa
File:                     3132322e31312e35362e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          UIrLFpYiMVKyR3ZM/CIcfXzkOEOcfkPa2kE4Gw/lutg=
Subject key identifier:   61:63:4D:FD:24:64:3E:6A:F8:92:BC:C3:17:A7:1C:44:88:C9:55:90
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       1FF36939CE8530DD445DC54726F945A078C3604F
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e2034383038.roa
Signing time:             Tue 02 Jun 2026 07:45:09 +0000
ROA not before:           Tue 02 Jun 2026 07:40:09 +0000
ROA not after:            Tue 01 Jun 2027 07:45:09 +0000
asID:                     4808
IP address blocks:        122.11.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:69:39:ce:85:30:dd:44:5d:c5:47:26:f9:45:a0:78:c3:60:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:40:09 2026 GMT
            Not After : Jun  1 07:45:09 2027 GMT
        Subject: CN=61634DFD24643E6AF892BCC317A71C4488C95590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:7d:b7:af:18:72:d5:36:76:ae:bb:bb:67:
                    ae:6c:91:b1:4c:49:b5:ca:7b:3f:ce:ca:d8:b8:b1:
                    01:0c:4e:10:05:3a:44:6d:0d:d8:f4:f7:e6:d3:f9:
                    d3:d2:63:ba:9c:81:60:67:0a:75:4a:6f:bd:f7:81:
                    34:d0:d0:1b:c0:d6:96:5a:51:f9:2c:7b:74:31:cf:
                    2c:5d:7a:c1:31:bd:de:cc:e0:75:c4:33:25:ac:f8:
                    2e:d1:24:ed:9a:d1:be:fd:54:91:f8:16:53:20:92:
                    7f:d6:10:8a:e3:8d:14:72:a4:2f:3c:78:a6:8e:70:
                    12:cb:44:12:f6:3b:96:bc:e0:c3:66:fc:48:3b:b8:
                    b8:df:c8:3a:38:4d:81:5f:49:40:31:48:93:d6:d6:
                    1f:5a:1c:d1:d1:18:e9:43:69:0d:ed:16:b3:a1:72:
                    83:ae:b1:1a:4e:85:64:f3:41:56:fb:ba:01:3c:09:
                    58:d1:04:35:38:2a:4d:22:d4:aa:26:e8:07:c2:de:
                    cb:9d:a3:c3:70:e6:6b:5f:0c:c8:81:64:36:c2:23:
                    ac:b1:be:c2:85:cf:69:15:a8:37:d8:d9:01:e7:61:
                    7d:bd:36:f2:a8:22:9f:4f:38:a2:cd:63:42:ef:44:
                    11:05:73:c2:e8:1b:92:7f:42:dd:b7:6b:54:43:8f:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:4D:FD:24:64:3E:6A:F8:92:BC:C3:17:A7:1C:44:88:C9:55:90
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e35362e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:e6:f9:d1:ad:e6:21:f0:03:d0:dc:b3:82:c3:72:9d:d7:
         c3:44:8b:2c:4c:fe:41:ad:fa:71:1f:57:09:40:a0:9e:ea:29:
         aa:5e:c3:a6:7b:fe:3d:e1:48:cd:af:f3:ab:0b:d4:c7:5d:22:
         1f:2a:97:01:92:b5:ee:2e:e5:ca:c6:df:50:ed:10:7b:fb:65:
         57:05:d7:7d:73:2a:13:93:17:4b:14:ae:a2:de:63:0b:7e:a6:
         fc:58:e6:1b:a9:a5:20:e1:0d:8c:1b:d8:30:9b:91:79:a8:fd:
         40:f0:22:d3:f6:ec:0d:82:2e:b9:56:e8:53:f0:cc:a9:4e:42:
         ab:e6:20:77:30:a8:36:45:0e:88:06:d1:69:03:94:79:76:97:
         dd:bd:36:9c:a5:b8:c9:f2:25:b1:5c:54:84:7a:15:a3:b7:10:
         3c:e6:06:e4:9b:0e:46:f9:94:45:85:06:a9:2a:cd:de:ab:80:
         9d:44:d3:6f:84:83:d2:cd:78:a7:2c:fb:33:bf:3e:47:31:99:
         52:af:3b:62:2e:28:f9:fd:9f:1d:70:96:b1:5a:32:36:e9:2f:
         0e:fa:c6:ee:52:29:bd:8d:28:e5:21:9c:93:ad:93:18:b6:53:
         10:c0:37:38:62:61:d6:ad:fd:fc:17:4f:a0:16:2e:82:ce:85:
         c4:28:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:13 2026 by rpki-client