Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e203133333335.roa
File:                     3131392e35392e3133312e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          mNKdELYNaTKMQsi6i8z7B1X4JKsirQ8ydirf8cKiIF0=
Subject key identifier:   D5:E7:41:96:25:CB:52:57:C0:47:EC:57:FA:31:32:35:D7:65:F6:42
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       4126F53E493CF5BBE68A76B57374BFB19C592BCB
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 12 Oct 2026 05:57:55 +0000
ROA not before:           Mon 12 Oct 2026 05:52:55 +0000
ROA not after:            Mon 11 Oct 2027 05:57:55 +0000
asID:                     13335
IP address blocks:        119.59.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 18:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:26:f5:3e:49:3c:f5:bb:e6:8a:76:b5:73:74:bf:b1:9c:59:2b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Oct 12 05:52:55 2026 GMT
            Not After : Oct 11 05:57:55 2027 GMT
        Subject: CN=D5E7419625CB5257C047EC57FA313235D765F642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:81:93:07:e6:43:c9:3a:c8:d1:c1:da:5b:
                    ae:76:3d:c2:0b:04:0c:9a:c2:66:43:89:65:cb:c9:
                    9c:23:55:19:fa:73:fc:f7:d3:d3:a8:81:98:7f:71:
                    90:c8:d8:66:91:29:85:20:c1:be:74:73:17:b8:8d:
                    48:60:e0:69:2d:47:a2:50:8c:cf:98:9d:d3:42:03:
                    49:cf:84:00:04:06:f7:3f:98:78:35:ac:b6:23:8a:
                    26:bb:62:30:52:e4:52:d6:ca:0c:d0:99:a6:e5:41:
                    b7:2f:15:29:82:68:88:11:4f:54:42:45:67:07:7e:
                    c5:23:5f:b5:cc:51:63:85:ad:af:f2:8b:e0:ed:b2:
                    66:7a:83:bd:bc:7e:50:ce:ed:93:ec:70:5d:8c:eb:
                    37:29:c4:24:86:0d:af:4b:9b:de:76:c8:3e:97:17:
                    19:33:f2:01:40:7b:3e:db:86:db:fa:e8:f4:97:92:
                    dd:19:c4:ec:d1:b8:2a:db:b3:9d:7b:27:a0:f0:55:
                    36:85:22:f8:10:7f:d2:d6:e2:03:58:7c:0b:91:7f:
                    a9:97:64:30:30:21:b2:b3:92:11:b5:8a:8c:33:9e:
                    1d:59:84:4a:fb:34:73:74:86:bd:97:b8:ad:f9:d9:
                    2d:9b:2a:b4:fa:b3:e3:41:2b:a7:b3:5b:15:89:e6:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E7:41:96:25:CB:52:57:C0:47:EC:57:FA:31:32:35:D7:65:F6:42
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:80:e0:41:f9:f4:a1:17:26:b8:16:55:b6:ca:d2:4b:56:b1:
         e2:63:05:d4:f5:58:d2:f5:7a:88:cb:fe:2c:20:12:56:13:14:
         f8:56:25:6b:7e:5f:95:54:e8:c4:88:a7:32:54:37:dc:21:04:
         96:fc:58:a8:4a:32:11:be:88:3f:3c:8b:6e:40:fe:a4:0c:4d:
         93:fb:97:d5:7c:74:82:53:bf:e8:8f:62:9d:ed:11:b1:6c:ca:
         01:c3:0e:fb:d2:8d:d7:3c:36:5c:5a:d9:23:b8:34:c2:85:69:
         bd:76:69:4a:36:cd:16:9f:f5:97:37:7a:9d:43:30:af:9c:17:
         9e:ba:8f:c5:21:2c:35:d6:fb:7c:ba:d2:13:67:20:e3:d0:ec:
         51:e5:75:28:0f:f2:72:53:66:a9:75:b3:f7:a4:9c:0d:3c:99:
         06:50:b0:6c:32:d0:7f:8d:5c:cc:c3:d7:fa:ab:10:fd:17:7b:
         5a:fe:55:c6:88:31:f1:86:b5:83:fc:49:3d:4d:ad:93:a5:44:
         e9:32:47:a2:c2:87:0e:77:69:9d:0e:ab:fc:5b:6d:8c:17:ae:
         25:1c:c0:bf:54:d8:d7:0b:ef:53:55:6b:18:77:d5:6c:f2:e1:
         67:ee:91:78:ed:da:6d:52:e8:6c:ff:91:5c:b6:71:b1:ea:c4:
         fd:86:ea:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:00 2026 by rpki-client