Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS19793.roa
File:                     AS19793.roa (raw, json)
Hash identifier:          5a+pRqtUcC9RGzjMYOy4HF5Qp8Y+/69hPgqKLqDq3XE=
Subject key identifier:   50:68:7B:CA:2D:E1:77:5B:2A:2C:E4:54:BE:35:A5:52:10:DB:1B:8A
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       1FB8A2A9129CF48FC5EB4D8615AA07950484DB92
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS19793.roa
Signing time:             Tue 02 Jun 2026 08:07:59 +0000
ROA not before:           Tue 02 Jun 2026 08:02:59 +0000
ROA not after:            Tue 01 Jun 2027 08:07:59 +0000
asID:                     19793
IP address blocks:        124.42.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 05:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b8:a2:a9:12:9c:f4:8f:c5:eb:4d:86:15:aa:07:95:04:84:db:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jun  2 08:02:59 2026 GMT
            Not After : Jun  1 08:07:59 2027 GMT
        Subject: CN=50687BCA2DE1775B2A2CE454BE35A55210DB1B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:cb:07:37:92:31:be:4f:6d:69:be:86:0b:
                    5d:89:ce:82:2c:c3:9a:29:dd:d4:18:f6:06:af:8d:
                    19:7a:ec:d7:8d:39:c3:8e:0b:4b:0b:af:f1:d6:2a:
                    51:c8:9b:12:25:72:47:83:b2:36:1d:2b:b5:83:a5:
                    00:83:a7:56:ea:b4:82:ce:d9:93:46:43:fa:d5:24:
                    7b:4f:2f:4c:30:82:ce:26:73:4c:5a:05:27:02:07:
                    f8:9e:53:f6:25:c6:a3:a8:a9:7b:4d:51:68:c0:f1:
                    c2:cf:a9:6a:f2:25:9c:fb:56:e2:6e:9a:ee:01:01:
                    71:b8:f7:6e:b9:20:6e:b4:aa:42:8c:01:6f:38:e5:
                    ed:e7:0e:4b:7f:9d:74:ca:ad:09:ec:0c:ce:e2:b3:
                    a2:ff:19:eb:19:89:50:6b:02:e4:04:97:8b:cc:09:
                    02:de:bd:70:ff:73:b9:bd:12:a4:dc:cd:d5:03:af:
                    c7:66:38:a7:a2:a7:5d:43:97:25:2d:ee:8f:09:9e:
                    ed:1b:5d:2d:13:52:8c:64:f2:02:5a:45:86:d6:bb:
                    05:c1:29:fa:f2:9b:96:94:22:01:c3:cd:23:2b:ee:
                    ce:45:c6:ad:75:71:ac:6e:27:79:86:5d:ac:d1:bd:
                    3d:7f:ae:2e:fe:53:ff:02:02:bf:8f:81:b0:2c:30:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:68:7B:CA:2D:E1:77:5B:2A:2C:E4:54:BE:35:A5:52:10:DB:1B:8A
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS19793.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.42.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:6f:ba:23:fa:27:8f:49:51:12:6d:9d:f9:25:4b:3a:2d:
         0b:86:52:c8:5c:3d:e6:7e:56:20:e5:e9:3c:d5:e1:d0:7b:8d:
         ac:1f:fc:10:e7:2d:fe:d2:e8:6f:2e:39:84:f9:12:43:83:2f:
         53:1b:7f:aa:1d:8e:bb:a3:22:58:4e:c5:f2:3f:e9:14:f0:e4:
         f5:41:0a:16:b6:31:78:a6:07:40:9d:2d:e3:65:62:58:37:3b:
         d4:3a:87:33:e1:c7:df:e0:b1:c1:ac:ca:f2:3f:d5:e6:97:44:
         7c:a1:9d:d5:2d:69:67:79:1e:7d:1b:31:84:c9:f8:1a:b7:bf:
         7c:f9:4a:90:c7:c0:25:6d:9c:da:55:9c:28:05:48:4a:b9:50:
         86:9f:4e:55:61:bf:5c:30:9a:eb:97:a0:e8:21:57:59:0d:79:
         e9:88:f1:ba:04:4e:be:75:05:f0:ba:c0:50:36:38:46:ed:14:
         e1:74:a4:26:57:c4:ae:2c:26:fc:a0:7d:1e:08:e0:60:51:34:
         f9:56:a2:31:bc:c8:71:2f:1e:70:09:aa:0a:03:75:5d:60:ca:
         a6:5f:3f:6d:81:40:e8:5b:c1:a5:4f:4b:d3:b7:a3:2e:4e:f3:
         42:66:06:06:66:4e:c2:13:c9:01:af:cf:03:6a:d1:24:ef:2e:
         7b:7f:ba:af
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUH7iiqRKc9I/F602GFaoHlQSE25IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA2MDIwODAyNTlaFw0yNzA2MDEwODA3NTlaMDMxMTAvBgNV
BAMTKDUwNjg3QkNBMkRFMTc3NUIyQTJDRTQ1NEJFMzVBNTUyMTBEQjFCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8MsHN5Ixvk9tab6GC12JzoIs
w5op3dQY9gavjRl67NeNOcOOC0sLr/HWKlHImxIlckeDsjYdK7WDpQCDp1bqtILO
2ZNGQ/rVJHtPL0wwgs4mc0xaBScCB/ieU/YlxqOoqXtNUWjA8cLPqWryJZz7VuJu
mu4BAXG49265IG60qkKMAW845e3nDkt/nXTKrQnsDM7is6L/GesZiVBrAuQEl4vM
CQLevXD/c7m9EqTczdUDr8dmOKeip11DlyUt7o8Jnu0bXS0TUoxk8gJaRYbWuwXB
Kfrym5aUIgHDzSMr7s5Fxq11caxuJ3mGXazRvT1/ri7+U/8CAr+PgbAsMC43AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUUGh7yi3hd1sqLORUvjWlUhDbG4owHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9BUzE5NzkzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCfCqkMA0GCSqGSIb3DQEBCwUAA4IBAQAY5W+6I/onj0lREm2d+SVLOi0L
hlLIXD3mflYg5ek81eHQe42sH/wQ5y3+0uhvLjmE+RJDgy9TG3+qHY67oyJYTsXy
P+kU8OT1QQoWtjF4pgdAnS3jZWJYNzvUOocz4cff4LHBrMryP9Xml0R8oZ3VLWln
eR59GzGEyfgat798+UqQx8AlbZzaVZwoBUhKuVCGn05VYb9cMJrrl6DoIVdZDXnp
iPG6BE6+dQXwusBQNjhG7RThdKQmV8SuLCb8oH0eCOBgUTT5VqIxvMhxLx5wCaoK
A3VdYMqmXz9tgUDoW8GlT0vTt6MuTvNCZgYGZk7CE8kBr88DatEk7y57f7qv
-----END CERTIFICATE-----
Generated at Thu Jun 4 15:02:18 2026 by rpki-client