Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e203133333335.roa
File:                     3131392e35392e3132392e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          VTToJoKkrscQTUIQBkMLXC57t6zNRl/PNFX97oSQiVY=
Subject key identifier:   6F:25:4D:EE:65:FD:CA:80:DC:84:20:5B:6F:16:C4:CD:A1:BC:A6:87
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       742DE570F6F26A7B3BA1E8346F3EBF460D3E9CF4
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 12 Oct 2026 05:57:46 +0000
ROA not before:           Mon 12 Oct 2026 05:52:46 +0000
ROA not after:            Mon 11 Oct 2027 05:57:46 +0000
asID:                     13335
IP address blocks:        119.59.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 01:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:e5:70:f6:f2:6a:7b:3b:a1:e8:34:6f:3e:bf:46:0d:3e:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Oct 12 05:52:46 2026 GMT
            Not After : Oct 11 05:57:46 2027 GMT
        Subject: CN=6F254DEE65FDCA80DC84205B6F16C4CDA1BCA687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:0d:a5:83:2b:2b:a1:42:ad:29:7b:75:6f:
                    f3:b1:9c:00:eb:53:f5:96:9a:bb:49:1e:61:51:81:
                    7b:d1:24:4d:28:1a:8b:b9:9c:39:02:b4:3d:e8:61:
                    a9:a1:44:8c:61:d5:bb:8d:77:4a:2e:6f:e7:5b:55:
                    04:2d:41:49:92:b7:62:40:03:8c:03:cb:c9:75:14:
                    9a:f3:2c:a6:d2:dd:1d:ab:ab:47:bc:88:5b:98:79:
                    1f:ba:92:88:b1:a3:dc:a3:f9:7c:38:b6:1c:dc:35:
                    f5:a5:16:c1:be:bf:b1:b2:21:96:ee:9b:a4:bb:c8:
                    76:45:3d:26:9e:66:05:fb:73:6f:c6:0b:cf:8b:50:
                    5e:f1:a4:fa:8b:9d:a2:44:b8:c3:0d:e8:26:f7:58:
                    16:77:04:1e:42:48:18:93:7d:76:3e:66:db:1b:64:
                    d1:6f:bc:d1:16:a8:5a:4c:b3:fd:9e:1c:43:28:24:
                    12:e5:38:a9:86:bc:cf:83:9e:67:d3:f7:45:3c:7f:
                    d0:8c:d4:32:7e:29:b6:e2:b2:db:33:d9:17:e6:07:
                    9c:0b:39:fa:3c:26:bc:af:cf:2c:f3:3e:c9:b4:1d:
                    13:09:9e:9e:35:fe:a9:02:ea:d9:35:9f:15:9b:2e:
                    5f:3b:5c:be:de:df:87:1d:09:f0:58:39:16:2d:89:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:25:4D:EE:65:FD:CA:80:DC:84:20:5B:6F:16:C4:CD:A1:BC:A6:87
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ff:5f:cc:82:62:b2:ae:12:17:30:d0:d6:23:7c:52:a0:a9:
         d4:82:86:2d:5c:9e:32:57:87:d3:b8:85:fe:f6:a0:bb:c3:b6:
         fb:c9:74:48:78:3d:5a:4e:af:17:27:56:45:8d:fc:a4:08:b8:
         c5:36:e1:80:20:92:21:84:d2:d1:46:09:74:c5:4b:a9:85:52:
         4d:e9:58:05:c4:01:e1:fd:f9:7c:de:ab:b1:e6:ba:34:a7:8b:
         6f:fb:b9:aa:c9:db:37:64:05:ac:8e:c9:5a:20:d1:26:71:f0:
         2d:25:1b:e8:f3:fb:ab:85:43:99:4e:7b:10:e2:95:8d:d7:48:
         48:4c:d3:a2:b4:e8:13:60:af:95:9f:33:88:68:f4:d1:02:01:
         b5:3d:89:79:39:78:6f:cf:cb:3a:8e:1e:e8:c7:20:08:b2:e2:
         d2:e7:aa:53:a9:1f:97:c7:ce:39:73:cb:f5:04:11:f6:81:43:
         c2:f3:59:26:c5:8b:0f:25:b5:9a:36:84:5b:25:90:b8:98:e4:
         cb:a4:f8:11:d9:f9:89:25:98:76:43:9b:6b:97:c4:8b:b0:ae:
         1f:cc:d9:1b:1d:1e:55:08:71:43:3c:d9:a6:e7:fd:46:b4:f4:
         f5:9c:88:11:60:8a:51:5b:e1:5a:4c:e9:70:30:0c:44:62:01:
         a4:41:94:98
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdC3lcPbyans7oeg0bz6/Rg0+nPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjEwMTIwNTUyNDZaFw0yNzEwMTEwNTU3NDZaMDMxMTAvBgNV
BAMTKDZGMjU0REVFNjVGRENBODBEQzg0MjA1QjZGMTZDNENEQTFCQ0E2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+g2lgysroUKtKXt1b/OxnADr
U/WWmrtJHmFRgXvRJE0oGou5nDkCtD3oYamhRIxh1buNd0oub+dbVQQtQUmSt2JA
A4wDy8l1FJrzLKbS3R2rq0e8iFuYeR+6koixo9yj+Xw4thzcNfWlFsG+v7GyIZbu
m6S7yHZFPSaeZgX7c2/GC8+LUF7xpPqLnaJEuMMN6Cb3WBZ3BB5CSBiTfXY+Ztsb
ZNFvvNEWqFpMs/2eHEMoJBLlOKmGvM+DnmfT90U8f9CM1DJ+Kbbistsz2RfmB5wL
Ofo8JryvzyzzPsm0HRMJnp41/qkC6tk1nxWbLl87XL7e34cdCfBYORYtieCfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUbyVN7mX9yoDchCBbbxbEzaG8pocwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzMxMzEzOTJlMzUz
OTJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMzMzMzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHc7gTANBgkqhkiG9w0BAQsFAAOCAQEAQ/9fzIJisq4SFzDQ1iN8UqCp
1IKGLVyeMleH07iF/vagu8O2+8l0SHg9Wk6vFydWRY38pAi4xTbhgCCSIYTS0UYJ
dMVLqYVSTelYBcQB4f35fN6rsea6NKeLb/u5qsnbN2QFrI7JWiDRJnHwLSUb6PP7
q4VDmU57EOKVjddISEzTorToE2CvlZ8ziGj00QIBtT2JeTl4b8/LOo4e6McgCLLi
0ueqU6kfl8fOOXPL9QQR9oFDwvNZJsWLDyW1mjaEWyWQuJjky6T4Edn5iSWYdkOb
a5fEi7CuH8zZGx0eVQhxQzzZpuf9RrT09ZyIEWCKUVvhWkzpcDAMRGIBpEGUmA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:56:07 2026 by rpki-client