Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134382e302f32322d3234203d3e2033343931.roa
File:                     3132302e33312e3134382e302f32322d3234203d3e2033343931.roa (raw, json)
Hash identifier:          Dk2vzhhMA9nFAhNDXqzDa0LdWBD5+GpvNI5Ospe3OQw=
Subject key identifier:   1F:9C:F9:6B:65:0D:4C:90:9E:4F:B0:FE:A4:62:33:21:FD:0F:BD:D4
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       362C38C4DDE45B7C26BD97C2C388EF4B97ED3D2C
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134382e302f32322d3234203d3e2033343931.roa
Signing time:             Tue 26 May 2026 08:10:31 +0000
ROA not before:           Tue 26 May 2026 08:05:31 +0000
ROA not after:            Tue 25 May 2027 08:10:31 +0000
asID:                     3491
IP address blocks:        120.31.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2c:38:c4:dd:e4:5b:7c:26:bd:97:c2:c3:88:ef:4b:97:ed:3d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: May 26 08:05:31 2026 GMT
            Not After : May 25 08:10:31 2027 GMT
        Subject: CN=1F9CF96B650D4C909E4FB0FEA4623321FD0FBDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:2c:53:d0:0c:61:48:b5:48:b0:69:76:3d:
                    0a:0e:19:0a:c3:2a:56:7b:9d:84:00:b8:61:3d:1d:
                    ea:6b:d6:e3:64:96:2c:6c:f3:ae:f1:d8:de:ca:e4:
                    f1:b4:16:de:fd:ea:e3:f1:ee:49:0b:fe:58:cb:4e:
                    3b:63:d6:8b:3f:37:80:9e:44:64:64:0b:77:78:9a:
                    6a:c9:02:c8:97:0c:ad:cb:35:4a:2c:0f:af:99:e8:
                    da:89:81:b6:8a:6f:57:75:09:6f:f5:62:b8:55:28:
                    07:16:f5:f5:31:1b:b8:2c:f4:2e:85:d2:d4:95:e5:
                    a0:aa:54:2d:ac:9a:7f:e6:d0:35:83:4e:49:60:78:
                    c3:55:02:2a:56:9f:a7:36:f4:36:83:1b:e6:b8:dc:
                    48:36:85:0b:53:43:a7:61:d4:5c:d4:6d:4f:3d:a6:
                    17:45:eb:4b:07:df:3f:ab:d2:53:3b:d0:06:ca:2b:
                    ad:a7:ac:05:86:20:23:86:02:bf:f1:c6:45:fe:05:
                    84:60:47:15:2f:dd:ec:21:63:56:61:21:43:00:d7:
                    54:97:1c:14:40:1c:7e:e8:7e:22:38:09:55:8e:56:
                    4a:7f:f3:2d:cb:1a:cf:77:6c:e0:7e:07:46:ec:8d:
                    e7:2f:67:a8:26:f0:d1:42:cf:cd:4c:d5:12:49:19:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9C:F9:6B:65:0D:4C:90:9E:4F:B0:FE:A4:62:33:21:FD:0F:BD:D4
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3134382e302f32322d3234203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:6d:e3:27:d2:80:18:1f:0e:a5:45:3d:0d:7a:99:d8:31:12:
         68:03:89:0f:96:a1:24:b9:3a:fc:21:34:99:2a:b7:85:80:58:
         3c:d5:c3:d3:34:20:e9:ad:c4:50:7c:d7:5c:4f:b3:14:97:0f:
         3d:f9:3f:f1:fe:b7:b7:44:2c:fa:9f:0b:c4:22:a8:ec:75:50:
         b9:34:d1:a9:b4:de:fd:11:d7:6e:16:86:fe:d3:21:ab:ce:5c:
         58:8b:c4:04:6d:ee:c9:30:40:9c:7e:6d:2b:06:25:37:31:c4:
         01:7c:49:ae:34:eb:f6:d2:e1:9e:85:4b:3b:24:07:bd:c1:20:
         69:3f:fd:dd:01:9e:cd:ce:50:d1:4b:a4:07:4b:c7:1d:74:04:
         df:86:3f:10:7f:51:9b:bb:50:1b:3b:ea:e4:a6:8c:18:ea:d8:
         44:1c:d4:81:c0:b5:84:b2:8e:2f:a5:28:ec:16:f3:64:9b:be:
         3c:cd:41:ba:97:8d:48:3c:66:f2:87:3a:fb:4c:39:1f:b1:24:
         d7:ae:b8:c5:dd:05:7f:b3:34:94:90:92:c9:1d:14:25:51:8f:
         5c:2f:14:5a:ec:35:29:be:d1:ce:11:8d:e0:3a:08:30:05:66:
         05:28:9e:43:cc:d7:f6:24:68:86:1f:49:38:98:51:d5:87:14:
         64:32:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:41 2026 by rpki-client