Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2033343931.roa
File:                     3132302e33312e3134362e302f32332d3234203d3e2033343931.roa (raw, json)
Hash identifier:          dUq8RsBDIh/fgYY92vdLaoohdgrRxGzVHxGbpsbNeFo=
Subject key identifier:   18:02:10:2D:5E:91:1C:A7:42:41:11:D4:C3:C9:C0:0B:A3:72:86:39
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       57FF01838084AE7EDD32A2D808558A0C9E9104FF
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2033343931.roa
Signing time:             Tue 26 May 2026 08:10:31 +0000
ROA not before:           Tue 26 May 2026 08:05:31 +0000
ROA not after:            Tue 25 May 2027 08:10:31 +0000
asID:                     3491
IP address blocks:        120.31.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ff:01:83:80:84:ae:7e:dd:32:a2:d8:08:55:8a:0c:9e:91:04:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: May 26 08:05:31 2026 GMT
            Not After : May 25 08:10:31 2027 GMT
        Subject: CN=1802102D5E911CA7424111D4C3C9C00BA3728639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:14:79:f7:70:4c:a6:ee:b4:dd:a5:aa:96:a2:
                    ae:95:07:54:e9:ef:cd:f7:98:41:2d:5e:8b:c8:3a:
                    83:67:75:f0:11:2b:f4:15:53:00:cc:ba:6b:c4:aa:
                    e3:bf:bf:b6:a6:44:8e:fd:ba:17:25:44:6c:c0:40:
                    4f:f4:6e:b4:36:a9:b5:c8:ab:21:42:1d:84:f6:d2:
                    ef:d4:f7:ef:e5:4e:49:50:cd:5b:58:5e:7c:7d:f1:
                    11:bd:6e:a3:c5:10:55:14:e6:86:86:8f:86:5c:c7:
                    c5:ae:02:c6:48:0b:82:6b:16:be:d7:62:cc:c6:e6:
                    8f:76:c9:bf:63:4f:ec:de:11:f3:70:9e:3e:fe:6c:
                    91:93:6d:7d:38:b4:f9:40:a8:4d:4d:70:6d:bd:84:
                    94:89:bf:c9:3e:cc:f2:7b:5b:f9:a9:bf:89:cf:90:
                    cd:a0:96:17:6c:3e:1b:9c:e4:98:3a:8c:c9:30:56:
                    dc:40:05:59:2d:f8:5a:c9:74:24:da:e8:27:a0:0d:
                    36:dc:35:f7:4b:80:c8:36:aa:fc:6a:39:0e:b5:de:
                    34:ff:2b:4d:26:74:9a:8a:42:0e:7d:0b:40:e7:a0:
                    2d:e6:78:5d:31:16:91:20:6a:f1:1d:27:ad:c8:95:
                    c6:d2:3e:31:6b:46:97:d7:36:7b:1d:1f:a5:cb:d2:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:02:10:2D:5E:91:1C:A7:42:41:11:D4:C3:C9:C0:0B:A3:72:86:39
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134362e302f32332d3234203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:54:03:1b:95:6d:36:90:b5:b0:17:6d:ec:3e:22:70:21:22:
         ed:0b:7b:2c:9c:7f:5f:39:28:66:b8:5f:83:11:31:d3:7b:bc:
         45:a8:5d:1f:c1:96:eb:03:a4:57:7d:e6:f2:82:16:58:fb:dc:
         9c:13:af:91:f0:c0:9f:6e:85:85:94:23:4b:1f:44:45:17:4e:
         ab:58:61:7c:bd:80:3c:5c:96:43:c2:e8:0b:7e:76:f9:45:ff:
         b2:f1:f9:e0:b3:cb:f3:f5:fc:35:12:13:03:e7:5e:ad:99:09:
         89:3f:be:b3:b3:c1:83:91:02:47:a8:48:6f:dd:55:9c:4d:80:
         20:5b:63:da:93:fe:5e:04:88:38:50:0a:a9:c4:79:4f:31:c6:
         91:1a:17:6a:d8:1b:23:21:16:e7:9a:17:df:3c:08:92:ea:53:
         6f:eb:ec:f2:78:3b:f1:17:b1:21:7b:b8:60:16:1b:41:e4:a9:
         d0:97:93:88:f2:aa:e5:0b:f2:f5:c6:78:c7:18:4b:eb:4e:fa:
         32:17:1b:1e:c3:05:5c:de:bd:17:d1:21:d9:dd:1e:d7:e2:f5:
         8b:1f:a6:9e:f8:16:94:c5:ac:d9:b8:8e:e0:6f:5c:8e:41:9b:
         44:67:66:58:5e:8f:a3:a9:22:f9:fd:c8:61:a1:4e:6b:7d:ec:
         df:7e:f4:61
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUV/8Bg4CErn7dMqLYCFWKDJ6RBP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy
QjAzQjBCRDAeFw0yNjA1MjYwODA1MzFaFw0yNzA1MjUwODEwMzFaMDMxMTAvBgNV
BAMTKDE4MDIxMDJENUU5MTFDQTc0MjQxMTFENEMzQzlDMDBCQTM3Mjg2MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FHn3cEym7rTdpaqWoq6VB1Tp
7833mEEtXovIOoNndfARK/QVUwDMumvEquO/v7amRI79uhclRGzAQE/0brQ2qbXI
qyFCHYT20u/U9+/lTklQzVtYXnx98RG9bqPFEFUU5oaGj4Zcx8WuAsZIC4JrFr7X
YszG5o92yb9jT+zeEfNwnj7+bJGTbX04tPlAqE1NcG29hJSJv8k+zPJ7W/mpv4nP
kM2glhdsPhuc5Jg6jMkwVtxABVkt+FrJdCTa6CegDTbcNfdLgMg2qvxqOQ613jT/
K00mdJqKQg59C0DnoC3meF0xFpEgavEdJ63IlcbSPjFrRpfXNnsdH6XL0qAbAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGAIQLV6RHKdCQRHUw8nAC6NyhjkwHwYDVR0j
BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD
MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx
MmUzMTM0MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMzM0MzkzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAXgfkjANBgkqhkiG9w0BAQsFAAOCAQEAg1QDG5VtNpC1sBdt7D4icCEi7Qt7
LJx/XzkoZrhfgxEx03u8RahdH8GW6wOkV33m8oIWWPvcnBOvkfDAn26FhZQjSx9E
RRdOq1hhfL2APFyWQ8LoC352+UX/svH54LPL8/X8NRITA+derZkJiT++s7PBg5EC
R6hIb91VnE2AIFtj2pP+XgSIOFAKqcR5TzHGkRoXatgbIyEW55oX3zwIkupTb+vs
8ng78RexIXu4YBYbQeSp0JeTiPKq5Qvy9cZ4xxhL6076MhcbHsMFXN69F9Eh2d0e
1+L1ix+mnvgWlMWs2biO4G9cjkGbRGdmWF6Po6ki+f3IYaFOa33s3370YQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:42 2026 by rpki-client