Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e362e36342e302f31382d3234203d3e2034383131.roa
File:                     3132342e362e36342e302f31382d3234203d3e2034383131.roa (raw, json)
Hash identifier:          kh0e7adfKIfP9nAxENEF/mPBp8/wZPz5mL/RNx3hpTw=
Subject key identifier:   94:B3:C7:0A:63:DF:71:F3:4F:3D:C7:60:C9:58:1F:15:26:65:DE:91
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       5196D575D8A0FB0FB87137E77E51B05FA251CA44
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e362e36342e302f31382d3234203d3e2034383131.roa
Signing time:             Fri 05 Jun 2026 07:38:32 +0000
ROA not before:           Fri 05 Jun 2026 07:33:32 +0000
ROA not after:            Fri 04 Jun 2027 07:38:32 +0000
asID:                     4811
IP address blocks:        124.6.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:96:d5:75:d8:a0:fb:0f:b8:71:37:e7:7e:51:b0:5f:a2:51:ca:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jun  5 07:33:32 2026 GMT
            Not After : Jun  4 07:38:32 2027 GMT
        Subject: CN=94B3C70A63DF71F34F3DC760C9581F152665DE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:07:46:52:80:83:4e:4a:4d:b9:39:2f:f9:
                    07:f7:de:aa:4d:6d:14:1c:ca:0e:1d:bd:6f:d3:d5:
                    73:60:33:2e:f7:58:ae:26:b7:04:f5:53:3a:91:cc:
                    86:ba:45:b5:e2:2d:7b:e8:19:b1:f7:89:39:c3:7f:
                    eb:8b:d5:34:54:fe:b4:29:63:85:96:63:3c:a9:56:
                    e2:34:1e:70:fc:37:b0:c8:ec:ec:e0:61:52:ec:45:
                    20:cc:2d:7b:2e:a3:f9:1a:46:50:20:54:e7:c4:a9:
                    0d:a6:ee:7a:66:9f:b7:86:2f:ef:5e:1c:5a:b3:11:
                    34:a9:4e:e3:aa:98:4e:16:47:67:dd:9b:61:6e:da:
                    28:1b:e6:97:a5:8b:c5:55:86:51:c9:72:6a:de:63:
                    cc:5f:76:e7:63:04:2c:e7:04:a4:83:70:93:cc:5e:
                    d4:22:75:fe:d5:21:54:07:f5:e8:e6:13:1e:36:f4:
                    92:11:42:60:ac:0b:c7:11:82:eb:64:c7:48:9b:d5:
                    a8:30:4a:eb:52:68:14:aa:5c:8e:65:ec:1c:9a:4b:
                    e5:b6:f4:e5:3d:47:36:ea:f8:b1:1f:86:be:11:4d:
                    86:c5:bc:e3:52:27:a6:99:5e:c8:4d:ee:0f:c0:4c:
                    7a:59:f5:8f:21:a3:7e:a1:06:67:c3:5d:80:d0:c5:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:C7:0A:63:DF:71:F3:4F:3D:C7:60:C9:58:1F:15:26:65:DE:91
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3132342e362e36342e302f31382d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:1d:4b:f8:b8:31:80:2e:5b:9f:73:54:52:77:f4:60:ed:
         51:8e:99:7d:fe:d4:0d:ab:f2:44:88:b4:43:e8:22:b8:a1:34:
         ed:eb:b9:31:73:15:ae:1b:a4:42:ed:6a:11:e4:b0:af:75:0e:
         a8:f0:21:53:20:da:7d:fb:b8:f8:1b:e1:87:79:de:1a:e3:0b:
         dd:92:2f:f1:ea:ea:78:2c:00:26:8d:d9:f5:b4:03:8b:b1:41:
         cc:bc:5e:24:f2:74:26:9d:29:54:b4:40:33:03:a9:6e:30:51:
         83:82:64:76:5c:7e:0a:61:7a:b2:c4:57:e2:f3:48:ba:3c:d2:
         ba:e6:12:f3:0a:bf:d4:f3:8d:88:d3:05:32:5a:bf:b8:f4:39:
         f2:55:ec:a1:ef:dd:70:d0:bd:8c:b9:2e:41:14:54:8f:a9:3c:
         60:e1:f7:9d:2d:c9:25:2e:aa:d9:2b:65:0d:10:41:7b:a3:28:
         e2:cc:b3:f1:7b:ae:ec:81:04:33:52:f2:ea:87:a4:c6:8d:a9:
         89:54:d5:fe:ef:33:81:98:71:40:30:e9:c5:8a:71:bd:36:ea:
         b8:36:3f:58:8d:24:9f:08:ad:41:e4:c9:09:da:e6:42:9e:38:
         87:dd:b1:31:34:fa:16:18:df:e9:8a:ef:0c:0b:79:e0:d5:af:
         c8:ee:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:47 2026 by rpki-client