Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e2030.roa
File:                     3132302e33312e3134352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=
Subject key identifier:   9D:59:1E:D9:D2:07:7E:C0:F4:4A:2C:77:49:E8:A7:34:F9:53:6C:3A
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       53ADB0FCF5923FD5EEE9D8894CEE4A34990787D4
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e2030.roa
Signing time:             Wed 17 Jun 2026 02:41:41 +0000
ROA not before:           Wed 17 Jun 2026 02:36:41 +0000
ROA not after:            Wed 16 Jun 2027 02:41:41 +0000
asID:                     0
IP address blocks:        120.31.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 12:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ad:b0:fc:f5:92:3f:d5:ee:e9:d8:89:4c:ee:4a:34:99:07:87:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jun 17 02:36:41 2026 GMT
            Not After : Jun 16 02:41:41 2027 GMT
        Subject: CN=9D591ED9D2077EC0F44A2C7749E8A734F9536C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:fe:17:89:47:23:2f:b5:ef:71:d0:70:72:
                    dd:1b:9b:8a:3c:ab:aa:59:8f:ef:95:4b:13:ce:42:
                    d4:8f:bb:7b:81:83:90:a1:09:cd:17:28:c7:a4:0f:
                    9b:10:59:41:13:b5:ed:55:75:79:60:25:71:d1:29:
                    10:e0:b7:af:1d:6e:57:ec:f8:db:2e:77:73:3a:e6:
                    86:f7:a7:74:3d:40:fd:fc:bb:03:4f:dc:b5:bb:42:
                    49:f5:e6:49:9e:16:9c:21:87:ec:c0:a2:c0:d0:0a:
                    e3:42:e3:06:b9:b2:17:6a:a7:77:d0:35:fb:7c:52:
                    21:d5:60:c7:64:9a:f0:7a:d8:27:d8:1f:35:cb:6b:
                    25:8f:3a:1f:96:5e:c9:a1:14:21:1f:c4:0a:9f:fd:
                    6f:d4:02:fd:b0:54:a7:3a:4b:b6:86:80:fd:55:43:
                    88:89:c7:c3:c5:a2:73:e8:4f:51:ed:f2:8d:74:d3:
                    d0:ad:7d:ea:12:db:ed:37:d8:6b:cf:fc:0a:aa:46:
                    75:0e:67:19:06:47:7b:e1:9a:3e:37:9c:77:0e:f2:
                    37:fb:ed:9f:db:fa:75:8d:99:59:65:44:1d:d3:4e:
                    fa:85:45:fe:23:d1:65:49:eb:93:33:3d:43:0e:81:
                    2e:37:50:36:68:1c:10:e3:f6:c7:b2:98:65:83:14:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:59:1E:D9:D2:07:7E:C0:F4:4A:2C:77:49:E8:A7:34:F9:53:6C:3A
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:04:ce:b0:84:38:4b:59:32:12:46:66:12:81:04:67:a6:40:
         c3:4c:67:0d:30:3e:a3:8c:75:8a:5d:0f:8b:32:8f:47:9f:b2:
         8e:f8:8a:aa:91:c7:1b:49:57:e1:18:57:57:15:8e:ab:44:98:
         03:34:ab:42:9e:e8:86:ee:e3:e3:85:3b:8c:a2:24:63:8e:8e:
         91:f9:b4:77:cf:17:0d:fa:41:bd:9d:78:c1:32:06:e3:44:85:
         14:d7:14:64:ce:d1:f9:d2:23:ee:9a:89:dd:c7:4f:53:e5:c0:
         41:88:ee:85:98:f7:89:04:c9:6a:55:55:07:1a:90:9e:f7:7b:
         db:85:01:55:15:ce:8a:64:68:b5:8b:30:27:8d:e4:49:63:bb:
         6e:d5:d4:5c:62:bd:1c:d3:00:1d:26:01:06:99:35:b7:dc:97:
         f4:2a:bd:94:92:8a:15:1a:65:fa:94:a6:66:cb:98:8f:72:82:
         0f:3e:39:05:fb:90:32:5d:1c:5f:86:1c:1c:b5:8b:30:3b:8e:
         c6:aa:89:87:63:63:26:ad:9d:e5:45:98:02:7f:34:12:ea:33:
         e8:15:29:a0:a7:9d:b3:b6:45:c6:a2:f5:b3:1a:bd:fd:5c:f0:
         95:61:6a:d5:10:0d:6f:0a:1c:84:c0:9b:ea:af:4f:76:e3:11:
         3e:2b:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:53 2026 by rpki-client