Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
File:                     3131392e35392e3230382e302f32322d3234203d3e203139323131.roa (raw, json)
Hash identifier:          sm6MRxd6mrqDmo3tRHzhJxzCpzY+gSTEPyFNJutvHNg=
Subject key identifier:   7F:41:64:27:13:FE:B2:02:EC:75:9E:1A:26:29:A4:81:02:7B:C1:D9
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       4BB8D3676EA2DDFBADDEA851F130590D76A63BCB
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa
Signing time:             Mon 13 Jul 2026 03:46:35 +0000
ROA not before:           Mon 13 Jul 2026 03:41:35 +0000
ROA not after:            Mon 12 Jul 2027 03:46:35 +0000
asID:                     19211
IP address blocks:        119.59.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 14:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b8:d3:67:6e:a2:dd:fb:ad:de:a8:51:f1:30:59:0d:76:a6:3b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:35 2026 GMT
            Not After : Jul 12 03:46:35 2027 GMT
        Subject: CN=7F41642713FEB202EC759E1A2629A481027BC1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:1a:dc:f8:03:8b:0e:d4:06:46:b9:89:0a:
                    19:57:6b:04:93:4a:54:1f:76:1e:92:a7:bd:ea:40:
                    f3:89:1c:6a:d0:44:db:37:a2:1c:2b:9b:14:ce:35:
                    57:86:1c:cb:b6:f5:58:00:07:62:d0:e2:11:d2:ee:
                    c0:14:d2:2f:c8:57:69:73:6a:54:23:96:d7:58:3d:
                    67:19:fa:9e:50:b9:5d:20:ae:8c:58:9f:8e:ed:ff:
                    6d:b2:a8:f2:f3:a6:b9:08:df:c9:ed:79:cf:08:f8:
                    46:25:a6:b0:f0:ef:60:08:0d:e6:a1:b8:00:43:af:
                    d5:7d:ec:e5:8e:25:c8:c4:d1:ca:e0:ca:b2:7f:c8:
                    8a:03:59:10:b9:0d:7d:7a:45:a5:00:fa:6c:b1:36:
                    fa:53:b8:ad:76:9c:d6:60:37:27:38:21:21:6b:ed:
                    c2:90:bf:81:db:47:a2:c7:ec:64:ad:f5:37:9a:f9:
                    ff:c1:1e:45:7a:7e:91:ac:b4:00:d7:47:86:17:1b:
                    fa:b2:d2:84:ba:96:ac:a2:3f:ea:6a:89:df:98:2e:
                    be:6b:d3:b2:2f:f0:ff:af:c6:d5:ad:c1:2b:1d:7a:
                    76:95:a4:78:76:20:05:fb:f1:70:4a:9f:e0:27:93:
                    e0:5f:8a:c9:3a:81:95:12:20:3e:8f:9e:13:91:8f:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:64:27:13:FE:B2:02:EC:75:9E:1A:26:29:A4:81:02:7B:C1:D9
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e203139323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:97:96:bd:06:eb:fe:38:4a:3a:7d:aa:37:fe:59:5b:2c:bd:
         5b:d6:47:cb:2c:66:cd:31:4f:49:6c:b9:14:74:6e:ee:b1:dd:
         e7:7a:c0:05:4c:49:51:e6:db:25:2a:df:2e:17:f5:d2:07:86:
         f6:64:49:bb:5a:07:e3:bf:56:21:8a:59:6f:02:b5:43:5c:8b:
         f4:0f:ae:b2:dd:b2:5e:ff:18:c2:4d:94:b4:3c:b3:5a:de:e9:
         83:13:3a:25:05:ce:56:47:d9:43:7e:32:33:a7:b0:65:b6:3d:
         0c:9d:52:70:af:57:bb:96:5f:8c:bf:0d:17:60:6c:4b:20:df:
         34:31:c1:75:d7:e5:d9:87:b9:87:e8:c1:76:9d:fc:76:a1:08:
         3f:de:58:10:cd:1f:57:c6:2b:c5:12:2a:9a:51:ad:3e:ac:37:
         c7:76:1f:d1:75:87:70:b1:3d:de:fc:fb:0b:ea:37:4f:a3:4f:
         f4:43:59:7d:06:60:54:cf:61:5a:94:f6:2f:42:d5:c8:2d:8e:
         5e:ae:e9:e5:c2:3d:b3:b8:20:25:5f:25:c6:e6:72:a0:79:07:
         fd:98:70:5e:e3:51:59:03:b9:87:1c:82:1f:c6:68:7e:7c:87:
         e6:e7:06:cf:ee:8e:96:fb:84:4d:34:cb:8f:af:20:46:3d:85:
         06:36:8e:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:51 2026 by rpki-client