Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa
File:                     3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa (raw, json)
Hash identifier:          Igedmkrmmt6w/coBrWoPE5I/S4pHWuUb36wo85gMF2M=
Subject key identifier:   39:7F:0E:0A:E3:B2:B3:42:FE:14:7C:77:EF:60:9C:26:BB:81:52:0B
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       2963DFA7E358C54CCF4DDF18932C2EAEFBC9D7E0
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa
Signing time:             Mon 31 Aug 2026 09:55:56 +0000
ROA not before:           Mon 31 Aug 2026 09:50:56 +0000
ROA not after:            Mon 30 Aug 2027 09:55:56 +0000
asID:                     198969
IP address blocks:        119.59.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 22:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:63:df:a7:e3:58:c5:4c:cf:4d:df:18:93:2c:2e:ae:fb:c9:d7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Aug 31 09:50:56 2026 GMT
            Not After : Aug 30 09:55:56 2027 GMT
        Subject: CN=397F0E0AE3B2B342FE147C77EF609C26BB81520B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:44:fe:89:23:98:dc:01:71:16:47:5c:2c:
                    d1:0a:00:9f:30:0f:16:55:81:a0:cc:f2:cf:05:31:
                    f4:99:41:91:74:d5:3e:4c:38:50:ef:e4:a0:a5:d2:
                    39:a8:a7:68:00:7b:20:1d:c9:19:ad:d3:7e:0c:2f:
                    d2:23:fe:24:96:c7:19:b5:c9:11:3e:b0:d3:62:91:
                    a1:6a:63:f9:9a:f2:d2:ac:c8:5e:e7:ae:86:a6:c7:
                    b5:6a:2a:36:0c:de:a4:8a:86:f1:ce:d6:58:15:8b:
                    c7:1b:85:48:6e:be:55:32:8c:e3:2e:22:29:55:cf:
                    8b:18:2b:a3:58:1a:1c:7f:c3:d8:a9:25:44:c4:d2:
                    d0:47:91:d2:6b:e9:fb:7e:c2:23:21:ba:90:4e:3a:
                    db:6a:36:a4:93:f0:2e:00:d2:b5:bf:29:8e:db:7c:
                    8f:ba:aa:89:6a:5e:02:4e:bc:da:5d:32:9a:8c:58:
                    33:e5:c6:43:e4:7e:26:59:66:64:70:0c:10:ae:9d:
                    1b:d6:04:29:50:24:2d:b4:f9:b6:24:b3:7c:8f:dc:
                    ab:32:f3:ba:90:a5:ae:6d:f4:23:2e:ce:f4:e0:5a:
                    22:6d:3b:7d:b3:81:d2:b9:00:7b:45:a1:45:60:e3:
                    c7:72:cf:30:14:ba:e0:76:0f:40:3c:18:2a:26:f0:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7F:0E:0A:E3:B2:B3:42:FE:14:7C:77:EF:60:9C:26:BB:81:52:0B
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:32:9d:d0:c0:68:ea:ce:b4:32:b8:a1:2f:2e:47:71:e5:a4:
         8d:b8:53:28:3a:82:96:5d:61:e8:35:97:89:01:6e:ec:54:40:
         83:2c:06:75:43:33:e5:f1:31:e2:0c:23:fc:de:6a:a2:20:0f:
         bb:7d:75:c5:27:17:e1:5f:76:0d:10:12:fb:45:07:52:27:22:
         a9:00:0f:fb:91:32:ff:4e:b2:6a:58:64:20:dd:32:cc:7e:7a:
         96:05:13:a1:f5:96:c6:2f:f7:48:1c:74:76:a4:85:d2:a3:7f:
         c5:ed:53:f1:8a:fb:55:58:eb:bf:0e:4f:7c:2d:f6:0f:71:13:
         be:79:f5:f4:1f:6e:77:66:dc:de:6e:91:73:8c:82:ee:ee:f8:
         33:dd:52:3c:71:a0:0f:56:04:79:b7:a4:87:07:99:31:55:34:
         ad:ea:47:9c:38:ee:52:55:34:6e:60:98:1f:e7:44:89:f1:c0:
         ac:2e:cc:00:c9:b0:d3:12:05:77:0d:16:6d:7d:10:fc:b3:81:
         4e:53:d5:a1:06:72:4d:17:af:d5:c4:96:69:79:b9:1e:53:c3:
         f4:b1:a5:84:26:51:95:6a:74:5c:f5:19:7a:ce:1a:74:f7:88:
         b6:4f:6d:a5:ba:88:b8:36:74:13:10:a6:5f:f8:05:92:19:15:
         35:fd:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 21:27:12 2026 by rpki-client