Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33372e3139322e302f32312d3231203d3e2034313334.roa
File:                     3131392e33372e3139322e302f32312d3231203d3e2034313334.roa (raw, json)
Hash identifier:          gBxlUjgY/51Y/F/tZl5uKKjyZi8xCCeFB073k6/hjoo=
Subject key identifier:   7B:23:DF:BC:63:FC:80:64:CE:1E:F3:AC:23:1E:4A:9B:D0:FB:DD:FD
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       539A58D1C1E972188A45BFD4DBD2BBE1D1930CFE
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33372e3139322e302f32312d3231203d3e2034313334.roa
Signing time:             Thu 28 May 2026 05:21:37 +0000
ROA not before:           Thu 28 May 2026 05:16:37 +0000
ROA not after:            Thu 27 May 2027 05:21:37 +0000
asID:                     4134
IP address blocks:        119.37.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:58:d1:c1:e9:72:18:8a:45:bf:d4:db:d2:bb:e1:d1:93:0c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: May 28 05:16:37 2026 GMT
            Not After : May 27 05:21:37 2027 GMT
        Subject: CN=7B23DFBC63FC8064CE1EF3AC231E4A9BD0FBDDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:a3:28:2d:69:03:d7:2a:3e:66:9f:1e:6b:
                    5f:71:db:e8:d4:f1:42:13:ee:6d:ed:46:d7:f8:d9:
                    a9:36:3e:4c:8c:0a:be:05:bf:1d:4e:b7:a9:75:22:
                    45:e8:95:c3:69:2b:3c:04:c4:74:56:f1:c0:ba:0c:
                    87:ac:73:a5:fd:62:c6:d5:b3:b0:15:ea:cb:af:24:
                    8a:01:5c:c6:46:ee:81:19:59:5b:52:98:81:2d:82:
                    e5:bc:8a:37:65:ec:9f:3b:a6:1a:94:37:39:35:20:
                    68:36:cf:37:68:33:ca:cd:56:a6:a9:6f:0d:5c:cc:
                    2d:0e:7a:9b:57:97:17:1a:19:f4:d7:84:60:25:6e:
                    bc:95:4c:79:36:5f:29:ad:c2:ff:dc:94:d7:32:1b:
                    3f:1c:1e:89:47:d7:04:54:5e:d9:62:bb:27:86:c6:
                    02:9c:99:ae:5c:03:50:2f:48:d2:c9:00:d3:5b:bd:
                    5c:b3:6d:40:59:f7:f0:1c:65:8b:e4:5e:e4:86:6a:
                    19:24:77:50:d4:de:63:c9:4e:22:b2:7b:d9:bd:48:
                    ed:cc:75:3e:09:4d:44:8d:f3:6f:c1:bd:23:13:c4:
                    fe:55:54:c3:e9:60:f6:a8:ad:79:f4:71:2d:38:42:
                    57:c5:98:ec:5f:a6:09:75:5c:61:9c:89:6c:b8:b8:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:DF:BC:63:FC:80:64:CE:1E:F3:AC:23:1E:4A:9B:D0:FB:DD:FD
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3131392e33372e3139322e302f32312d3231203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.37.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:01:0b:f0:9c:77:10:48:19:1e:9f:28:99:ba:df:30:f4:09:
         a5:06:e9:7c:be:cc:1e:ce:3e:c4:c7:e2:55:c1:9a:f5:c6:86:
         d6:ab:4f:e5:69:8b:92:84:f0:7f:d1:28:3d:ae:b6:7c:d7:6c:
         b6:92:ba:2d:3e:1f:08:2c:e8:9d:92:28:87:1c:3c:a4:b9:52:
         ad:bd:1f:7b:49:51:c6:c7:72:fa:4e:ac:07:7c:78:7e:e6:94:
         cc:8c:ba:ee:6b:89:14:66:39:c0:08:c7:a1:72:6f:1d:02:68:
         96:bb:b5:a3:f6:41:d3:d8:de:65:4f:3a:ca:84:4d:5d:47:59:
         c7:6c:df:d7:18:fd:5d:e0:57:10:f6:4e:b3:99:e5:08:b4:c3:
         d2:f6:b6:cd:a1:a6:5f:b4:e0:d3:58:31:35:b5:91:28:c1:ed:
         65:0e:23:6f:6b:d1:30:da:a6:85:1c:b5:86:5b:dc:36:ef:ef:
         4a:c7:d8:12:1e:3c:0f:3c:dd:11:d8:46:a9:51:50:23:67:fb:
         ca:81:ad:de:85:38:df:4d:fe:4d:06:de:ca:ca:6f:ad:79:4d:
         1c:84:21:81:a9:76:00:42:ef:21:e2:4e:5f:10:d5:8f:b0:b8:
         cd:59:a7:97:2f:56:57:0e:7c:98:4f:61:32:12:0e:c8:a7:fd:
         49:61:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:24 2026 by rpki-client