Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e362e36342e302f31382d3234203d3e20313337373138.roa
File:                     3132342e362e36342e302f31382d3234203d3e20313337373138.roa (raw, json)
Hash identifier:          6RiYTv1K83sOy0+SuZF6r+MIQPwty279ln0kGfAEYaU=
Subject key identifier:   17:6C:2A:C7:75:04:98:CA:3B:3F:CB:F9:5F:B8:7E:F6:B9:7E:C3:1D
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       3DD2307EA69DCCFE2A5EBA40A23C5BEDB5FE79D1
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e362e36342e302f31382d3234203d3e20313337373138.roa
Signing time:             Fri 05 Jun 2026 07:38:32 +0000
ROA not before:           Fri 05 Jun 2026 07:33:32 +0000
ROA not after:            Fri 04 Jun 2027 07:38:32 +0000
asID:                     137718
IP address blocks:        124.6.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d2:30:7e:a6:9d:cc:fe:2a:5e:ba:40:a2:3c:5b:ed:b5:fe:79:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jun  5 07:33:32 2026 GMT
            Not After : Jun  4 07:38:32 2027 GMT
        Subject: CN=176C2AC7750498CA3B3FCBF95FB87EF6B97EC31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:86:e3:76:91:b5:4b:e2:12:f5:97:de:ba:
                    99:e3:ba:ee:12:ec:dc:23:93:53:00:d1:2f:ee:04:
                    b4:3c:db:e5:5d:1b:07:f4:24:47:6f:10:f7:78:e3:
                    30:0e:d2:22:7e:46:46:d8:4e:ed:80:c8:52:3a:cd:
                    44:64:8e:49:e1:f7:34:49:6d:56:6a:bb:eb:9d:7c:
                    fa:7d:63:2f:19:54:0c:7f:9c:e3:8f:cd:f6:fe:c8:
                    9c:60:5f:d2:53:0d:44:7d:83:4c:a4:04:f6:d2:a5:
                    97:ad:7d:2d:90:8c:11:da:31:94:39:5c:19:ac:b4:
                    36:81:14:3d:43:4f:37:8c:be:db:31:a9:3d:8a:9f:
                    4e:f8:0e:9d:56:95:56:d3:a5:73:c2:a5:f4:36:cc:
                    d5:c4:5c:52:36:0d:f8:1a:b2:6e:44:8f:d0:00:b5:
                    ce:9e:70:b5:f6:06:76:a6:b2:70:23:37:6f:44:93:
                    db:44:53:fa:83:aa:de:7a:27:47:ae:35:22:52:4d:
                    96:f0:c8:96:97:27:e4:33:d3:65:86:e6:1a:0b:8c:
                    7a:81:6b:a7:7d:ad:3d:41:da:31:97:5c:a6:7f:c6:
                    a2:d5:c7:7d:ea:c7:9e:f0:10:bd:69:16:b0:01:ff:
                    1a:cf:eb:65:e1:bb:e5:b5:60:4b:37:db:bf:77:f1:
                    7b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6C:2A:C7:75:04:98:CA:3B:3F:CB:F9:5F:B8:7E:F6:B9:7E:C3:1D
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e362e36342e302f31382d3234203d3e20313337373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:b0:31:49:32:76:f4:16:71:d7:51:9a:71:01:d1:cc:60:
         11:9a:a9:c9:69:52:42:f4:f4:19:ed:ca:1d:cb:a4:97:7d:65:
         3e:66:ef:ff:a2:e3:6c:59:3d:e2:db:9e:b2:b4:e3:20:6d:ed:
         df:41:cd:92:db:63:05:87:7b:12:e6:00:81:b3:fc:09:3c:7b:
         e5:17:2d:0d:dc:52:c7:e2:cc:6b:59:ac:69:b3:31:68:d2:df:
         1d:2b:4a:48:c3:b2:58:09:42:c0:d2:2d:87:be:76:0f:d3:e3:
         b6:8f:da:81:c1:22:98:a2:af:6c:5a:ea:11:99:82:00:e2:c6:
         e6:43:70:d9:52:0e:c2:c9:2e:90:89:40:77:43:f6:52:4d:23:
         d0:66:31:79:fb:cb:0b:9f:61:43:57:6b:36:ed:7a:35:ba:67:
         a3:5e:ce:02:4e:2f:d6:e2:f9:1d:f3:88:a0:12:a4:ea:52:6f:
         3c:f6:d4:66:fd:6d:67:fd:e9:a3:4b:7f:9e:b3:c6:01:0a:b1:
         fe:1b:1a:5b:f2:0a:ad:c4:32:95:6e:7d:7d:a5:2c:6f:e6:3c:
         18:b1:e8:17:15:45:33:88:e5:3d:95:a9:1b:40:66:3c:67:c3:
         45:7d:81:5a:ad:5d:c9:0a:0b:07:68:49:73:cb:f2:3d:d1:ec:
         72:8c:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:46 2026 by rpki-client