Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e20323037353530.roa
File:                     3132302e33312e3134362e302f32332d3234203d3e20323037353530.roa (raw, json)
Hash identifier:          82B9H3rjtYm4fIjmAzS+NCnF0wL16WX5jDJJd5P6yxw=
Subject key identifier:   B5:84:83:DB:35:77:5F:60:46:C4:E5:9B:F1:6D:CD:FB:E2:7C:F6:AE
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       388F35C8CF03A70FAD817A24337F2F8CAA245D99
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e20323037353530.roa
Signing time:             Tue 02 Jun 2026 08:18:51 +0000
ROA not before:           Tue 02 Jun 2026 08:13:51 +0000
ROA not after:            Tue 01 Jun 2027 08:18:51 +0000
asID:                     207550
IP address blocks:        120.31.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8f:35:c8:cf:03:a7:0f:ad:81:7a:24:33:7f:2f:8c:aa:24:5d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jun  2 08:13:51 2026 GMT
            Not After : Jun  1 08:18:51 2027 GMT
        Subject: CN=B58483DB35775F6046C4E59BF16DCDFBE27CF6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:c1:0d:76:41:f5:41:67:79:eb:d2:e6:67:
                    e4:db:56:d9:8f:f8:13:4f:b5:0c:4f:0b:ca:18:1d:
                    d8:1d:8d:0e:b7:65:53:85:59:2b:92:a5:0a:b3:fb:
                    d6:b0:45:11:e2:8f:da:3d:7b:e0:01:d7:61:7f:5e:
                    c7:36:e3:ba:78:f8:0a:0b:da:59:f1:0f:3d:3f:e6:
                    e3:83:6f:17:cb:24:8e:65:de:ce:cf:5f:14:bf:6f:
                    fb:71:e2:0a:36:45:eb:83:72:a0:3b:a4:c2:d2:3d:
                    4f:e9:3e:4e:2a:37:fd:e9:3a:49:cb:41:35:5c:44:
                    11:99:22:ff:1f:7e:27:d4:f8:78:88:7f:fc:f9:40:
                    14:7a:a6:01:10:a3:6b:e3:67:9d:20:91:4e:39:86:
                    f1:4c:35:41:21:d4:70:7b:b6:88:1d:92:3a:e5:6c:
                    80:e6:3a:b3:c9:2e:c9:31:6e:09:d1:cc:7e:61:92:
                    c9:cb:b2:3c:ec:fe:f6:a7:3c:ce:79:26:6c:b6:5c:
                    af:e6:ab:fe:2d:d5:86:2a:4d:48:c1:3c:4b:bd:b6:
                    ab:ec:01:19:a8:fe:8a:62:e2:3a:a4:fc:78:c1:7d:
                    a5:8f:3a:96:5f:4d:d2:10:6a:57:34:07:d9:4e:54:
                    d9:b6:eb:ff:47:b0:33:55:a9:dc:f3:90:01:f8:ac:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:84:83:DB:35:77:5F:60:46:C4:E5:9B:F1:6D:CD:FB:E2:7C:F6:AE
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:70:f7:61:e7:a3:c8:31:aa:24:6a:a4:9d:4a:35:77:61:
         9b:4a:da:9c:d4:31:a5:b1:e0:44:83:b5:99:c5:c3:20:ab:21:
         f4:d5:ed:8a:9e:5b:ec:15:e6:58:b0:78:c4:43:d8:78:7d:07:
         77:49:b7:dd:68:7d:e9:89:4f:b4:6d:fe:2a:95:9f:b6:38:55:
         95:87:76:25:05:50:24:43:94:6e:5a:44:34:45:14:c8:90:9f:
         6c:f9:53:66:1e:5b:34:e1:5a:6c:78:bb:5a:94:69:ec:f3:0f:
         0c:a4:66:0d:e3:00:ce:54:06:e6:69:23:72:b3:d2:fa:fe:d5:
         81:53:87:e4:74:97:f1:d6:3b:ac:ed:46:17:81:4e:17:33:37:
         4f:78:22:d7:37:cd:ca:c2:94:40:b9:af:bb:a4:cd:eb:6e:e7:
         1f:9e:31:89:ce:31:24:d6:8a:51:40:11:cb:1b:8a:fc:54:f5:
         98:92:4d:2e:48:57:c9:e5:e7:a4:1b:36:f3:ba:dc:47:62:e5:
         90:b5:91:63:6e:2c:d5:5c:b1:b7:9f:8c:1a:dc:61:69:85:20:
         09:02:84:63:58:ee:cb:bb:2f:86:16:13:c0:d1:ab:72:76:30:
         fb:cc:cd:9c:5e:3e:ad:77:48:c9:01:b6:1e:ab:8b:a2:f0:ce:
         86:ce:4b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:15 2026 by rpki-client