Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa
File:                     3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (raw, json)
Hash identifier:          VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=
Subject key identifier:   B2:1C:EC:25:AD:04:B3:44:ED:18:F1:3B:57:E5:D8:00:31:C6:6B:00
Certificate issuer:       /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A
Certificate serial:       64BB3669F2D0FD17D9D1E878B1C9643207160A88
Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa
Signing time:             Mon 13 Jul 2026 11:56:12 +0000
ROA not before:           Mon 13 Jul 2026 11:51:12 +0000
ROA not after:            Mon 12 Jul 2027 11:56:12 +0000
asID:                     134765
IP address blocks:        116.58.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bb:36:69:f2:d0:fd:17:d9:d1:e8:78:b1:c9:64:32:07:16:0a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A
        Validity
            Not Before: Jul 13 11:51:12 2026 GMT
            Not After : Jul 12 11:56:12 2027 GMT
        Subject: CN=B21CEC25AD04B344ED18F13B57E5D80031C66B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:07:87:17:05:ad:27:1a:d6:36:05:9e:a6:
                    ca:a5:04:e0:97:bc:1b:5d:67:6d:be:c8:6d:ee:9f:
                    25:09:b8:c6:8b:a8:a7:9c:75:16:e8:a2:3c:84:52:
                    0c:59:f7:ac:77:97:2b:6b:12:1d:66:93:de:32:fe:
                    5d:70:4c:ed:98:7a:39:a3:ca:95:6b:d4:d9:16:c1:
                    32:12:8b:6f:d5:4a:4c:ce:73:72:19:4d:84:c7:82:
                    f0:78:fc:e4:47:90:03:4b:3e:f2:3f:b5:d9:54:ed:
                    9a:49:d9:6f:65:85:83:76:9e:fa:7f:a0:5c:97:d2:
                    22:fe:cf:bc:28:80:ce:72:93:ca:ce:c1:de:6e:2c:
                    05:54:87:df:01:89:c4:ea:cf:0a:1b:19:f3:89:4b:
                    94:b1:60:38:9f:72:b2:a2:6f:85:cd:cd:b3:c1:14:
                    45:8e:26:49:02:84:78:c5:4b:c5:8e:2a:30:35:e6:
                    bf:2c:e0:b5:f1:46:e9:fc:f8:e7:a3:a8:c3:2f:42:
                    e3:e7:44:86:a4:ec:72:9a:3f:6a:7e:d4:47:ff:b8:
                    4c:71:dd:88:b3:49:b9:a6:0a:aa:08:7f:b1:6c:11:
                    e1:99:14:4b:a4:6c:b8:77:03:f7:fb:9f:ed:c3:b0:
                    e5:89:d5:35:f7:6f:e8:24:50:eb:8a:fc:6f:2d:e1:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:EC:25:AD:04:B3:44:ED:18:F1:3B:57:E5:D8:00:31:C6:6B:00
            X509v3 Authority Key Identifier:
                keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:ae:ea:ee:9a:f7:67:77:0c:53:65:ab:eb:80:6d:c4:05:
         2d:c0:be:2a:13:0e:35:55:b1:4a:45:6d:89:8c:91:29:1b:42:
         3a:a1:54:86:9f:bd:94:c9:38:9e:a3:4c:78:e2:f4:0d:85:35:
         cb:d1:33:be:0d:4e:37:2f:fa:79:81:fd:2c:79:ca:de:b2:dd:
         6f:e1:3d:e9:8b:da:c0:f5:76:fd:67:5c:20:66:13:65:ad:97:
         35:ff:6a:0c:ab:22:7a:50:3c:77:e9:3a:8a:be:89:e2:db:14:
         fa:1a:bf:7b:51:23:46:4b:88:4a:71:17:53:36:4f:57:3d:03:
         31:cc:f8:66:70:57:e3:00:c4:93:03:14:27:15:a1:aa:1f:d0:
         dd:d9:c2:82:a5:3b:d9:53:11:fc:15:ff:f0:68:a0:29:2d:32:
         fc:39:ab:20:1e:00:ec:e8:c3:81:a8:b2:ff:11:27:40:da:07:
         97:58:0c:43:e0:2d:49:bd:73:2a:a2:d9:67:54:cf:06:2c:33:
         c1:e6:9e:ad:05:fd:cf:95:38:68:8f:49:21:b7:2c:60:c8:eb:
         27:03:33:3b:30:9c:83:47:a6:64:09:43:86:3a:06:02:51:9a:
         37:f7:a4:b8:cf:e9:88:db:97:42:fd:b4:a5:a6:7f:eb:61:08:
         fe:0e:c8:4a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUZLs2afLQ/RfZ0eh4sclkMgcWCogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4
NEFGQUEyQTAeFw0yNjA3MTMxMTUxMTJaFw0yNzA3MTIxMTU2MTJaMDMxMTAvBgNV
BAMTKEIyMUNFQzI1QUQwNEIzNDRFRDE4RjEzQjU3RTVEODAwMzFDNjZCMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwgeHFwWtJxrWNgWepsqlBOCX
vBtdZ22+yG3unyUJuMaLqKecdRboojyEUgxZ96x3lytrEh1mk94y/l1wTO2Yejmj
ypVr1NkWwTISi2/VSkzOc3IZTYTHgvB4/ORHkANLPvI/tdlU7ZpJ2W9lhYN2nvp/
oFyX0iL+z7wogM5yk8rOwd5uLAVUh98BicTqzwobGfOJS5SxYDifcrKib4XNzbPB
FEWOJkkChHjFS8WOKjA15r8s4LXxRun8+OejqMMvQuPnRIak7HKaP2p+1Ef/uExx
3YizSbmmCqoIf7FsEeGZFEukbLh3A/f7n+3DsOWJ1TX3b+gkUOuK/G8t4YmRAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUshzsJa0Es0TtGPE7V+XYADHGawAwHwYDVR0j
BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC
RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC8zMTMxMzYyZTM1
MzgyZTMyMzAzODJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNDM3MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBHQ60DANBgkqhkiG9w0BAQsFAAOCAQEABhqu6u6a92d3DFNlq+uA
bcQFLcC+KhMONVWxSkVtiYyRKRtCOqFUhp+9lMk4nqNMeOL0DYU1y9Ezvg1ONy/6
eYH9LHnK3rLdb+E96YvawPV2/WdcIGYTZa2XNf9qDKsielA8d+k6ir6J4tsU+hq/
e1EjRkuISnEXUzZPVz0DMcz4ZnBX4wDEkwMUJxWhqh/Q3dnCgqU72VMR/BX/8Gig
KS0y/DmrIB4A7OjDgaiy/xEnQNoHl1gMQ+AtSb1zKqLZZ1TPBiwzweaerQX9z5U4
aI9JIbcsYMjrJwMzOzCcg0emZAlDhjoGAlGaN/ekuM/piNuXQv20paZ/62EI/g7I
Sg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:18 2026 by rpki-client