Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2030.roa
File:                     3132302e33312e3139322e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier:          zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=
Subject key identifier:   9E:3C:7D:68:62:9A:09:DA:09:C8:A4:37:44:28:69:9F:CC:CC:E7:B5
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       77801C3DC04C31B86854B23E7ACE78BDFCD1968A
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2030.roa
Signing time:             Wed 17 Jun 2026 02:41:41 +0000
ROA not before:           Wed 17 Jun 2026 02:36:41 +0000
ROA not after:            Wed 16 Jun 2027 02:41:41 +0000
asID:                     0
IP address blocks:        120.31.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 12:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:1c:3d:c0:4c:31:b8:68:54:b2:3e:7a:ce:78:bd:fc:d1:96:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jun 17 02:36:41 2026 GMT
            Not After : Jun 16 02:41:41 2027 GMT
        Subject: CN=9E3C7D68629A09DA09C8A4374428699FCCCCE7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:ce:f6:c2:93:36:a9:a7:e4:64:97:3a:15:
                    cc:cd:07:c4:d0:b9:c9:70:80:30:fb:19:01:24:bb:
                    73:34:25:a6:11:c3:a4:5f:0f:65:07:ba:b3:6a:84:
                    91:52:e6:e9:a1:52:3b:fa:d0:2c:f0:ea:64:f4:d5:
                    31:58:73:dc:01:88:5b:7d:66:31:0f:b5:9a:13:5d:
                    78:44:28:f6:5c:5e:5f:2d:3a:69:0f:0f:62:bd:c5:
                    4f:5a:a3:b4:c7:24:e5:f4:ce:d4:6b:92:f4:88:76:
                    af:7d:3e:d2:99:1b:f0:8f:42:ae:c5:96:ee:e7:16:
                    ca:1d:45:78:1a:8e:6f:87:06:09:64:ce:4d:e1:9a:
                    d1:28:0c:64:e2:4a:9f:c8:34:fa:13:8c:bc:f9:91:
                    0d:ae:11:e9:6b:a0:5d:de:83:1a:09:ab:72:50:7c:
                    71:fa:a8:af:ab:0b:d1:21:93:82:e2:77:b7:c7:66:
                    1a:b6:c6:ff:cd:65:9e:b7:76:48:55:53:bf:41:bc:
                    7a:f8:bc:99:0c:6d:bc:5a:91:5f:a9:12:9b:79:9a:
                    11:a9:65:a7:e2:96:cd:3a:1a:56:07:c2:57:ae:aa:
                    19:a2:81:50:33:87:6a:b5:18:0e:43:47:e1:19:7d:
                    67:19:a1:e0:66:fc:7a:ce:75:cc:a1:4e:95:31:f7:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3C:7D:68:62:9A:09:DA:09:C8:A4:37:44:28:69:9F:CC:CC:E7:B5
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:fb:77:4e:be:69:60:57:46:01:a4:39:60:d1:c2:a0:11:
         da:21:d9:96:c1:17:28:89:4b:9a:b9:0d:8f:a5:60:36:bb:b2:
         60:90:96:ee:eb:b0:cb:95:90:c5:d0:b5:d6:77:1f:06:ac:77:
         46:f2:fc:5e:ba:22:39:43:0b:c1:3b:59:06:23:9e:df:eb:0d:
         33:10:a9:17:18:ee:11:c7:7e:3e:17:6d:81:dc:bd:ea:4c:2b:
         82:d6:e9:64:2e:94:54:f7:7e:f7:fc:f8:95:a7:ae:6f:fa:b0:
         0b:52:ae:c6:37:7f:ff:86:e1:23:21:37:3d:e8:1a:3b:e3:73:
         68:92:b1:17:bb:da:26:2e:50:ee:36:40:8f:ef:8a:55:d0:cc:
         4f:80:c5:81:3f:7a:7f:d7:96:a0:08:90:d5:28:ca:a2:54:7d:
         98:3c:12:07:61:95:37:43:19:36:9a:9a:44:8c:18:89:63:a9:
         35:3e:a4:3c:c4:3c:42:e2:e2:ae:d3:e1:2d:19:6a:14:2f:bd:
         6b:49:c6:d8:55:12:05:13:3c:36:ae:19:74:f2:f4:29:38:14:
         19:30:d6:3b:a2:9b:82:f9:d8:91:8b:a8:8d:fc:bf:c7:27:71:
         d7:e5:9c:df:6f:fb:21:fa:11:f0:d2:23:fd:58:5e:05:cc:c0:
         f2:6e:41:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:11:40 2026 by rpki-client