Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2030.roa
File:                     3132302e33312e302e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier:          Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=
Subject key identifier:   D6:B8:7F:34:6D:BF:85:FC:B4:AA:89:DA:50:F6:91:0C:41:DB:30:AA
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       230E6C9CA9F1BFB426B31270C443A694D6A413FB
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2030.roa
Signing time:             Wed 17 Jun 2026 02:41:41 +0000
ROA not before:           Wed 17 Jun 2026 02:36:41 +0000
ROA not after:            Wed 16 Jun 2027 02:41:41 +0000
asID:                     0
IP address blocks:        120.31.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 12:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0e:6c:9c:a9:f1:bf:b4:26:b3:12:70:c4:43:a6:94:d6:a4:13:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jun 17 02:36:41 2026 GMT
            Not After : Jun 16 02:41:41 2027 GMT
        Subject: CN=D6B87F346DBF85FCB4AA89DA50F6910C41DB30AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:ef:f7:0b:f4:89:ef:ea:6c:b7:e0:33:c8:
                    a1:17:20:f0:23:1d:f3:4d:61:9a:eb:cc:4f:60:c7:
                    a7:0e:71:68:9e:2a:b0:8c:05:19:d6:2b:fd:c7:de:
                    12:cc:df:30:14:34:f5:f3:4c:68:29:b4:34:84:f7:
                    7f:81:70:1d:d7:c2:26:70:f8:d2:c5:fe:dd:4f:61:
                    9a:8c:3e:61:f0:4e:56:fa:2f:a4:fd:8c:5e:6b:f7:
                    ab:cd:d5:ab:6d:7d:01:f9:b9:4b:71:ca:44:c3:2d:
                    cc:82:e0:85:42:a6:75:5c:5b:98:fa:8a:9e:ae:f8:
                    43:06:63:d1:e6:cb:67:60:3a:cf:88:b2:dd:e9:55:
                    ef:22:a8:09:bd:34:19:c7:83:83:de:00:c9:c0:1f:
                    d5:f6:d2:bf:4b:d4:1c:a1:ec:7f:b9:92:21:9d:3a:
                    10:75:af:f3:68:74:8f:db:18:e8:ae:0e:c4:35:50:
                    ae:89:22:94:c5:aa:15:23:86:c9:07:1a:68:36:29:
                    86:b3:fb:4d:ad:ef:c6:c8:77:80:8f:95:9f:19:eb:
                    c1:f2:7c:fb:b0:b9:b7:af:a0:49:44:0a:cd:f2:8d:
                    b4:f8:59:96:c5:62:73:1d:f2:08:28:58:18:e3:d7:
                    32:34:aa:ca:89:32:dd:23:6f:be:30:ee:fe:44:e1:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:7F:34:6D:BF:85:FC:B4:AA:89:DA:50:F6:91:0C:41:DB:30:AA
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:0e:27:7f:ee:57:15:52:66:79:10:1b:17:14:c5:2d:8d:84:
         31:0b:9c:80:c7:a2:63:9b:25:c0:cd:c0:eb:bd:4a:85:60:de:
         42:33:8b:16:b1:fe:4f:95:fd:6d:aa:81:87:63:bc:16:3a:8c:
         3f:4a:6d:28:79:88:d5:35:97:c7:14:50:af:77:f6:d0:5f:cb:
         e3:65:fd:72:0b:02:0d:6c:ad:ac:07:41:03:de:73:34:73:fa:
         7c:0a:21:11:ba:d1:a4:dc:90:f0:3e:b2:f9:0a:ee:95:ed:56:
         68:52:d3:a7:5f:1c:57:6d:48:2e:9b:5d:6b:f3:b3:03:fa:8e:
         a0:2c:11:39:93:5e:4a:ac:63:3b:2f:98:36:b9:08:73:14:29:
         5a:c4:a1:32:d7:78:41:2c:16:4b:5a:31:28:59:23:01:79:3f:
         d7:3d:68:9e:eb:f4:30:19:58:2b:d1:de:a9:4e:ed:64:85:d4:
         f9:35:63:81:78:52:58:d7:9c:d5:af:9e:7b:5c:f5:5c:e4:d1:
         b5:5b:6b:5e:58:fa:30:4b:f9:e4:c9:51:fb:bb:0b:b8:1e:95:
         85:4b:a4:08:22:b9:c0:b4:1a:c1:cb:fa:d2:57:ea:3b:f7:ac:
         1b:eb:ab:f8:6f:27:dc:0f:22:70:6a:4e:2a:d7:9a:ec:04:ac:
         41:88:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:34 2026 by rpki-client