Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa
File:                     3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa (raw, json)
Hash identifier:          dNjRVPUi8SeJi6wfWA5kpGRV6M0Yhi+9BNbX7d5K6RM=
Subject key identifier:   56:D2:C5:3A:84:52:7B:5C:87:CA:BA:6F:A5:DC:73:AE:A7:F5:73:D9
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       59C35566785DADFC02B129DB0E45DE30E0C6F011
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa
Signing time:             Mon 31 Aug 2026 09:55:05 +0000
ROA not before:           Mon 31 Aug 2026 09:50:05 +0000
ROA not after:            Mon 30 Aug 2027 09:55:05 +0000
asID:                     198969
IP address blocks:        119.59.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 22:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c3:55:66:78:5d:ad:fc:02:b1:29:db:0e:45:de:30:e0:c6:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Aug 31 09:50:05 2026 GMT
            Not After : Aug 30 09:55:05 2027 GMT
        Subject: CN=56D2C53A84527B5C87CABA6FA5DC73AEA7F573D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:89:06:1c:ac:b6:44:7c:48:95:9b:8b:27:
                    cf:23:e7:a9:64:94:af:e3:2c:a5:96:0b:a3:4a:c4:
                    23:74:a9:e8:e0:f3:70:ce:c4:10:ab:be:ea:a4:63:
                    3e:f8:d1:a2:d8:cb:2a:61:50:fc:73:f1:72:75:e3:
                    a6:90:62:f8:e5:7a:c4:2d:fb:b9:0c:82:7a:ee:d8:
                    2e:c2:a1:8d:08:ce:8a:26:ea:e9:40:6b:0c:1a:cf:
                    5b:71:68:af:16:ed:15:04:dc:61:0f:cf:17:b4:da:
                    f8:70:5d:d8:85:cb:aa:09:8d:a5:e8:1d:9f:16:b0:
                    31:8a:ad:d8:5f:92:2f:28:86:0c:ea:bb:0d:b5:75:
                    4f:d5:d2:80:40:a5:c8:00:a2:f6:cc:17:6c:31:18:
                    0f:ff:b2:8d:cb:77:46:06:9f:6a:67:1e:62:78:d4:
                    02:b1:ec:de:f5:72:67:52:3f:dd:18:e9:d0:5f:13:
                    21:64:b3:44:2f:0c:15:d1:35:1c:73:b4:e7:d3:bb:
                    81:10:87:0e:78:42:1a:61:4f:d5:0c:cd:11:42:f1:
                    b7:23:67:0e:20:c0:68:5c:d3:a7:5c:8e:a7:de:cd:
                    d5:31:e1:81:8e:bf:95:cd:b5:38:72:20:03:cd:c2:
                    4a:3f:46:19:6a:ee:b3:18:76:85:35:49:50:46:c3:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:C5:3A:84:52:7B:5C:87:CA:BA:6F:A5:DC:73:AE:A7:F5:73:D9
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:78:25:0e:10:17:1e:b9:86:b1:fd:e2:89:c6:13:aa:6a:5a:
         9a:e0:22:51:f9:d0:23:f8:0f:85:c0:28:5b:18:6a:40:d2:20:
         fe:8d:47:0e:1b:1c:06:21:24:0d:d9:56:d9:43:fe:02:6a:10:
         3b:31:d4:a9:88:00:e0:32:4e:47:81:b2:4c:29:3f:e6:27:2f:
         65:ca:42:a3:bc:50:2d:bd:7f:82:2a:ea:0d:9e:27:ed:a1:a7:
         67:64:b7:b8:9a:49:33:6f:c5:cd:99:e9:b4:c5:89:80:72:ab:
         64:32:13:a4:32:38:8b:2c:4a:15:55:40:1f:d8:52:20:f2:2f:
         49:df:ff:71:ed:85:73:00:a1:9f:4a:4c:4c:60:2b:e7:1b:c6:
         13:ac:09:44:9e:87:b8:b1:3c:67:9f:4a:4d:91:b6:19:2e:2c:
         18:3d:b9:22:7d:60:1d:6f:86:4b:64:67:6e:19:3f:e3:35:75:
         8f:fb:7c:4d:62:38:10:8f:16:5c:da:e2:56:76:63:13:6d:61:
         4c:60:24:59:b7:34:18:37:f1:d6:20:05:2b:4e:c3:d0:6d:ad:
         22:e6:8c:ab:8e:f4:22:b5:7e:3d:b5:09:8e:9c:a7:6f:1c:5e:
         3d:58:22:74:d7:e7:8a:3f:af:04:55:8d:fe:25:65:cc:99:71:
         77:b5:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 21:27:16 2026 by rpki-client