Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
File:                     3131392e35392e3230382e302f32322d3234203d3e203139323131.roa (raw, json)
Hash identifier:          W/n7XKLdnIOv9Uo8AUx50mOCSux9ge6DUqwt/XvxYGU=
Subject key identifier:   F2:73:6B:68:7B:A1:00:4B:7B:C4:C8:25:3D:5D:F6:8D:4A:B6:E0:B0
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       421612419891521BA31CDD20C39A6307E5209995
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
Signing time:             Thu 14 May 2026 06:33:36 +0000
ROA not before:           Thu 14 May 2026 06:28:36 +0000
ROA not after:            Thu 13 May 2027 06:33:36 +0000
asID:                     19211
IP address blocks:        119.59.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 May 2026 08:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:12:41:98:91:52:1b:a3:1c:dd:20:c3:9a:63:07:e5:20:99:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May 14 06:28:36 2026 GMT
            Not After : May 13 06:33:36 2027 GMT
        Subject: CN=F2736B687BA1004B7BC4C8253D5DF68D4AB6E0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:b8:79:81:df:8b:a8:c4:51:dd:de:95:4d:
                    70:fe:ce:1f:78:78:33:4a:98:eb:4d:f7:16:43:b3:
                    54:66:be:fc:11:ed:1d:ac:7d:d6:f9:09:b9:d2:61:
                    41:d8:ce:c2:18:4f:8e:c1:ec:65:46:8c:af:f3:f4:
                    09:17:5e:bc:0f:07:f6:61:cf:52:27:fe:af:f7:44:
                    66:e4:fc:07:19:cf:d4:43:a7:49:fb:5e:51:dc:aa:
                    5a:29:1b:1d:e2:04:85:84:d8:06:b0:78:c7:87:bc:
                    ae:5a:1e:3d:04:f4:04:e1:f3:cf:99:e1:44:36:1d:
                    fc:f7:73:72:58:ed:bd:34:b2:2c:07:d0:03:5f:2e:
                    3e:ba:c0:f7:9f:ef:fd:81:12:e0:2d:47:55:e5:9a:
                    37:1c:a6:c6:9c:30:e8:54:fb:be:77:63:47:39:af:
                    1d:f3:70:66:fd:21:10:28:04:6f:3c:80:0c:7b:f6:
                    38:2a:bd:c2:19:e2:59:6f:e2:d1:54:2b:bd:10:88:
                    91:eb:2a:a0:bb:a5:06:1f:73:c2:1c:4e:21:c4:79:
                    70:b5:cc:24:cd:80:26:24:12:75:bb:1f:34:fd:67:
                    26:7f:56:f5:73:69:dd:19:39:0e:39:df:be:ff:3b:
                    97:80:c7:6e:66:3f:2a:df:f7:32:95:e0:7b:34:98:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:6B:68:7B:A1:00:4B:7B:C4:C8:25:3D:5D:F6:8D:4A:B6:E0:B0
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:72:6b:3c:d3:c2:3a:2f:e7:2b:72:a7:c1:85:f8:60:48:30:
         ff:86:d3:03:28:47:0d:87:8b:9a:b6:58:ba:b8:21:a2:da:ce:
         dd:80:40:16:51:21:8d:5b:1e:f4:4c:74:49:1b:2b:c7:7d:cc:
         af:44:c7:8c:9d:94:e8:7c:0d:8f:1e:68:c6:bb:28:82:11:05:
         98:a4:fc:26:e7:e0:b7:3a:73:9f:54:d0:57:75:04:cb:64:36:
         6b:a9:96:6b:06:97:25:1a:b6:f5:02:e4:da:56:c2:01:24:ce:
         40:48:8b:f6:12:83:48:5a:5e:1a:0b:7a:98:03:78:4e:df:d6:
         b0:46:53:77:c5:34:c5:02:3d:d0:7e:11:e0:31:30:62:f4:2b:
         2c:f4:19:be:04:09:19:b3:2b:e1:df:aa:57:51:d3:bc:98:76:
         3b:d0:47:36:35:f2:8a:a5:9d:96:5d:d0:7a:f2:89:66:d1:15:
         0e:49:0f:b4:34:fb:89:a4:d5:c5:f5:89:a0:26:6a:58:8e:b8:
         c6:34:e2:1a:f0:e0:ca:b7:17:d6:e6:56:33:26:d3:f2:4f:a9:
         91:5e:b1:4c:d4:43:49:b3:06:76:e4:70:d9:5c:b7:7e:58:0e:
         22:db:94:44:7c:eb:88:2f:23:13:50:78:11:a6:f4:0c:08:e6:
         9a:af:d9:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 13:47:09 2026 by rpki-client