Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3233362e302f32322d3234203d3e203139323131.roa
File:                     3131392e35392e3233362e302f32322d3234203d3e203139323131.roa (raw, json)
Hash identifier:          wMllbvKhU4Tzwpo6JCUg7HtQoAEfCPUl9b5H2GI7M4Q=
Subject key identifier:   9F:BA:3B:D8:31:99:D6:CF:70:C5:A0:23:09:2F:03:6E:59:E6:43:66
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       6A3138C471F50EC922BA388C1F42D0BEA8B7D16F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3233362e302f32322d3234203d3e203139323131.roa
Signing time:             Thu 14 May 2026 06:33:56 +0000
ROA not before:           Thu 14 May 2026 06:28:56 +0000
ROA not after:            Thu 13 May 2027 06:33:56 +0000
asID:                     19211
IP address blocks:        119.59.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 May 2026 08:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:31:38:c4:71:f5:0e:c9:22:ba:38:8c:1f:42:d0:be:a8:b7:d1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May 14 06:28:56 2026 GMT
            Not After : May 13 06:33:56 2027 GMT
        Subject: CN=9FBA3BD83199D6CF70C5A023092F036E59E64366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:0d:f1:d1:13:db:50:72:78:b2:13:a9:cc:
                    df:00:be:a5:84:16:bc:91:b0:3c:46:9c:d4:9f:31:
                    75:48:f9:56:05:96:89:ae:ca:79:d6:dc:3b:b1:e2:
                    49:43:cc:5b:fb:39:86:bb:5c:e1:88:49:6e:25:bf:
                    aa:7a:a2:4d:a9:ec:ee:03:a1:27:f8:ea:1d:c5:73:
                    23:37:75:9a:9c:14:b5:ae:cc:3d:0c:d3:be:06:d5:
                    1d:77:0a:6c:76:8a:1c:b4:9b:bc:2e:78:9d:12:02:
                    42:cf:34:90:8b:20:f5:5f:68:58:a1:09:97:38:06:
                    69:c0:9d:ab:d5:17:ca:d0:d7:35:aa:d5:ce:b2:05:
                    f8:fe:f6:ac:9c:c5:6a:ba:56:c8:c5:64:20:56:f8:
                    06:30:24:4e:dc:cc:1b:3f:8d:cb:3d:c0:5f:3c:e4:
                    ea:a6:38:28:54:94:da:ae:b4:00:86:8d:d0:9b:3f:
                    85:94:16:74:9a:39:6d:b2:cc:19:16:30:a6:23:d2:
                    f9:e6:80:b5:b4:f4:b2:af:1c:a0:8c:c2:34:4a:79:
                    95:2f:dc:e1:ea:1d:59:9c:96:10:52:98:29:8f:13:
                    36:43:d9:9a:d2:7e:87:1e:18:a1:ba:bf:8e:d7:10:
                    61:61:46:1f:26:e1:55:5b:17:b3:db:5b:b7:1f:fd:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:3B:D8:31:99:D6:CF:70:C5:A0:23:09:2F:03:6E:59:E6:43:66
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3233362e302f32322d3234203d3e203139323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:07:a5:67:23:63:b8:cb:cd:60:d1:c0:0a:43:59:c6:f6:
         fa:93:ce:e8:8f:98:ca:0c:a2:66:97:fb:7e:81:fe:fa:e9:6d:
         56:fa:29:34:a0:2e:3c:a8:b9:aa:16:d0:6c:74:a3:c0:32:bf:
         b4:f5:4d:98:40:61:2c:45:b2:e0:20:73:af:fd:31:7d:3b:29:
         9f:22:18:69:67:c0:1c:28:27:d3:67:e7:f1:af:c3:71:ef:a0:
         09:af:96:9b:87:09:75:ec:da:31:e5:dc:ee:9a:3d:2c:3d:38:
         11:0b:27:5c:bb:9c:83:65:8e:b9:57:a6:2e:af:91:7c:81:a8:
         c0:3a:ed:48:46:2e:08:23:35:f0:27:fa:58:7d:70:07:19:e7:
         2b:a2:19:94:af:17:4e:d4:d7:c2:75:d1:43:60:50:89:db:60:
         0a:0b:4a:0e:a5:73:cd:cd:b7:b9:7f:7f:67:fe:61:7d:21:4f:
         30:5c:fe:2c:ff:96:ca:f0:44:b0:97:62:cf:fc:eb:1a:99:c2:
         3d:58:ab:cb:4b:d8:de:8e:fc:23:6f:40:89:61:7c:4b:b1:bb:
         62:2a:2d:0c:23:80:6d:c8:ac:4f:43:e6:a7:04:1e:fb:ab:5c:
         18:00:37:69:20:5d:f4:6c:9c:5e:1f:25:1f:3b:20:ca:28:5a:
         f1:21:c0:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 13:47:08 2026 by rpki-client