Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa
File:                     3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa (raw, json)
Hash identifier:          G0rZMHqe+PAJHwE84BgTMh18+HAvAvGd4CT0wpSupDo=
Subject key identifier:   8F:22:EA:88:12:98:D6:E2:D7:29:77:40:CB:02:81:8C:CD:9B:2A:96
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       37FBA52BBEB3A31CFCAF1179BE9EC63F18B19A32
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa
Signing time:             Tue 02 Jun 2026 08:18:51 +0000
ROA not before:           Tue 02 Jun 2026 08:13:51 +0000
ROA not after:            Tue 01 Jun 2027 08:18:51 +0000
asID:                     207550
IP address blocks:        120.31.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fb:a5:2b:be:b3:a3:1c:fc:af:11:79:be:9e:c6:3f:18:b1:9a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: Jun  2 08:13:51 2026 GMT
            Not After : Jun  1 08:18:51 2027 GMT
        Subject: CN=8F22EA881298D6E2D7297740CB02818CCD9B2A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:1d:36:fe:e6:0b:98:50:a2:a4:69:9a:9c:
                    9f:ed:09:ff:8d:53:b6:3b:ab:a2:0f:80:58:7f:ae:
                    b5:45:78:58:ec:db:ec:df:29:f2:b4:89:59:2e:dd:
                    a9:37:39:40:c7:89:d7:c1:e0:8d:03:db:8a:1a:62:
                    cb:aa:04:e7:68:11:58:9b:77:03:c6:95:0d:35:33:
                    2d:84:ef:cf:b3:17:76:8f:2d:76:6d:99:d7:e2:90:
                    fb:2f:c9:8f:a7:02:78:74:8b:bd:00:81:24:ef:b2:
                    70:02:49:88:5e:01:2d:f1:88:38:80:dd:fc:0d:65:
                    b5:1a:97:ff:4e:4f:ba:e9:ca:09:4d:b6:a6:75:80:
                    e8:d7:22:ae:d6:9a:08:31:16:e0:fa:1f:c4:5a:0a:
                    2c:6b:64:db:00:32:9a:e9:39:98:71:97:c5:ac:f5:
                    f3:1c:50:2b:6c:4a:08:10:c6:f8:2b:22:95:bb:72:
                    1a:13:5e:cd:30:cb:19:36:f3:53:b0:6b:eb:1e:93:
                    78:93:73:b3:08:ee:b9:a6:4d:ca:dc:b4:9e:d4:da:
                    19:2f:d8:2b:2b:b8:6f:5d:19:55:b8:13:e0:75:f2:
                    39:ff:87:fb:96:3e:a6:bf:67:f7:74:5a:7b:d1:97:
                    a6:da:fe:92:3c:2f:c1:aa:cb:20:1b:8c:31:a3:6a:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:22:EA:88:12:98:D6:E2:D7:29:77:40:CB:02:81:8C:CD:9B:2A:96
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3139322e302f31382d3234203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.31.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:00:97:80:3a:d4:05:b6:1c:73:99:5b:af:1f:8a:e4:e7:a2:
         44:7e:3c:90:d6:a4:4b:60:24:b5:16:f7:03:cb:46:c6:25:eb:
         89:69:6b:15:6f:ee:cd:e7:93:c6:94:7f:c9:fb:40:57:77:f7:
         cd:27:75:3e:df:dd:9d:52:76:d1:29:07:5f:43:3f:0a:22:16:
         53:b3:0c:f2:a4:f8:9c:d5:77:84:d8:c5:3a:2a:3b:f7:6d:47:
         ad:da:46:db:83:43:c6:43:31:b1:47:84:d6:6c:d2:10:09:49:
         7c:48:d7:23:d8:4c:b1:01:ff:1e:e7:cd:1f:22:cf:64:e4:63:
         7b:62:a1:1b:d5:4c:af:a6:e1:13:6f:53:4e:4f:02:ab:ed:8b:
         ca:da:5a:b6:e8:8d:8e:77:eb:bc:19:d9:dc:48:5f:94:80:56:
         21:cb:18:0c:a4:cd:e3:47:d3:c7:f6:47:3d:08:fe:62:df:b7:
         f6:1f:ec:02:ae:20:2a:dd:23:eb:6e:bd:88:7a:9e:ee:37:af:
         d2:67:f0:69:6a:e7:7f:25:ce:e7:cf:24:a9:0b:c6:b8:cb:cc:
         66:51:cf:8b:52:44:27:8b:4f:06:91:b4:0b:04:8d:c0:4f:d1:
         3a:55:c2:f0:5e:92:20:91:6b:bc:16:61:82:9a:43:c4:ea:10:
         ee:bb:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:16 2026 by rpki-client