Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e32372e36342e302f31382d3234203d3e2034383131.roa
File:                     3131392e32372e36342e302f31382d3234203d3e2034383131.roa (raw, json)
Hash identifier:          o5f40ge6dlzp8OGXJ2/cNgTpmgQqSGQUrdERnRul2a4=
Subject key identifier:   F2:AF:2B:C6:3E:0C:F5:6C:51:51:9F:14:B6:4B:D0:15:E6:DA:E1:CA
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       24B3096E043F1E8CED6D6CFCA96EF11867F72056
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e32372e36342e302f31382d3234203d3e2034383131.roa
Signing time:             Fri 05 Jun 2026 07:38:32 +0000
ROA not before:           Fri 05 Jun 2026 07:33:32 +0000
ROA not after:            Fri 04 Jun 2027 07:38:32 +0000
asID:                     4811
IP address blocks:        119.27.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b3:09:6e:04:3f:1e:8c:ed:6d:6c:fc:a9:6e:f1:18:67:f7:20:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jun  5 07:33:32 2026 GMT
            Not After : Jun  4 07:38:32 2027 GMT
        Subject: CN=F2AF2BC63E0CF56C51519F14B64BD015E6DAE1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:98:c1:2d:d8:a8:05:4e:6e:86:8f:31:6e:
                    87:51:4c:98:8e:5f:be:fd:25:19:ef:0e:13:77:ef:
                    44:16:5c:57:b1:db:d1:ce:de:f9:1f:dd:3d:29:09:
                    dd:62:3d:f6:4a:ae:cf:d6:f6:9d:98:c8:9b:31:9f:
                    98:d1:3f:f3:5e:bd:d9:db:76:87:16:6b:0e:9a:75:
                    f0:83:c4:ef:6a:84:2c:83:e1:ed:0b:15:e9:3e:1a:
                    41:46:4d:5d:8e:0e:b5:4f:cc:fd:25:ad:dd:bf:ae:
                    fe:fa:35:39:17:4f:fc:e5:50:68:02:b7:98:22:35:
                    41:5e:3c:fc:80:1c:36:bc:34:40:d2:63:1d:ba:ac:
                    ac:df:89:7c:ba:d9:f0:33:fc:d4:9d:08:22:2e:69:
                    56:4a:0d:2c:a8:43:37:36:7c:6c:e3:69:ec:81:20:
                    c9:60:d2:98:d5:79:ea:02:58:ff:a7:0d:ed:75:99:
                    97:26:e3:94:7a:f5:03:e2:5f:0c:19:28:8e:01:94:
                    78:95:3d:63:ca:96:7e:de:da:cb:da:18:7a:4a:61:
                    71:4c:ec:fa:50:df:98:39:61:cb:f3:90:06:a1:0f:
                    83:00:15:f3:74:09:44:56:db:00:af:bc:78:32:9e:
                    71:3a:a8:4e:2c:10:c3:30:12:72:42:bd:65:f9:f5:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AF:2B:C6:3E:0C:F5:6C:51:51:9F:14:B6:4B:D0:15:E6:DA:E1:CA
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3131392e32372e36342e302f31382d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.27.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:1b:8d:ef:f8:74:e9:d1:2f:e7:28:61:db:8c:03:49:a1:b4:
         dd:fb:d7:fd:2d:1c:92:1a:85:22:89:26:b9:69:7f:4e:cd:63:
         d2:66:5d:8f:15:ca:b1:25:35:e8:0a:7c:05:38:aa:de:b7:e4:
         30:07:43:f3:aa:84:b8:44:89:d5:8a:57:24:b7:00:5b:b4:f9:
         ef:03:03:ec:de:25:eb:73:6e:0d:bf:d6:de:74:ed:4d:1c:c2:
         ce:3c:14:be:d7:c4:3e:cd:5c:c3:21:48:9a:11:60:92:83:08:
         3b:d6:e5:6e:4d:b4:98:73:ab:d0:65:46:10:9a:c2:b1:8f:3d:
         60:67:a5:77:c1:74:2e:e1:52:67:1f:05:44:35:26:38:c9:f2:
         fe:d3:4d:f5:df:c6:46:6e:ba:0f:79:a4:30:ee:70:22:bb:12:
         09:ca:5a:b9:8e:0d:0b:99:e2:87:9d:8f:a0:11:d6:a9:e8:b0:
         9e:23:b7:35:23:c9:a6:99:ca:a2:fb:62:bf:80:91:f1:02:df:
         cd:15:65:a9:e8:63:b1:bc:30:23:d6:2d:7b:8c:7e:6e:aa:20:
         d5:cc:63:d9:be:1d:35:8c:bd:77:fc:94:b8:92:23:45:94:97:
         c4:89:0c:aa:8e:b5:0d:b3:d1:8a:75:e3:a2:b5:be:f2:68:4e:
         c0:c0:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:45 2026 by rpki-client