Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e31322e302f32342d3234203d3e2034383131.roa
File:                     3131392e33372e31322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          8JZ/XP7yPunhI6jS5vvmirW5AoCWLbsfVu44YmmjGQs=
Subject key identifier:   4D:CC:CA:DE:B2:EE:86:83:BB:96:81:7F:E0:63:B8:7C:19:2E:0A:CA
Certificate issuer:       /CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E
Certificate serial:       578533E51E0D07B35E378DF499D49EB90C2B518F
Authority key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e31322e302f32342d3234203d3e2034383131.roa
Signing time:             Fri 05 Jun 2026 08:06:05 +0000
ROA not before:           Fri 05 Jun 2026 08:01:05 +0000
ROA not after:            Fri 04 Jun 2027 08:06:05 +0000
asID:                     4811
IP address blocks:        119.37.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:33:e5:1e:0d:07:b3:5e:37:8d:f4:99:d4:9e:b9:0c:2b:51:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E
        Validity
            Not Before: Jun  5 08:01:05 2026 GMT
            Not After : Jun  4 08:06:05 2027 GMT
        Subject: CN=4DCCCADEB2EE8683BB96817FE063B87C192E0ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:a9:5c:0b:c3:73:68:bb:a0:0a:d3:3c:55:
                    ee:b1:61:b6:b6:25:d4:5c:72:ea:5f:50:f2:9f:55:
                    b1:85:1b:45:ae:2e:d3:3e:80:e4:b2:21:e4:0c:18:
                    97:b4:60:73:e1:f8:0f:7a:27:e1:08:ce:11:50:c8:
                    57:e7:74:8e:b9:82:b0:63:73:17:b0:ca:20:07:f5:
                    d6:57:cc:94:b1:a5:58:71:6a:92:6d:03:ea:3d:81:
                    45:f3:12:29:f1:7e:fe:cc:72:28:ea:ff:38:54:a1:
                    8a:6e:b5:3d:f2:e8:df:d1:3a:67:aa:87:ee:b1:a7:
                    d6:76:e9:d3:7c:ce:c9:a3:a6:2b:61:03:78:13:ea:
                    53:fb:43:be:57:de:80:e1:80:70:6d:d3:d4:24:a7:
                    f5:a2:bf:d9:a4:8e:47:5f:0b:0a:a4:61:70:28:ed:
                    e9:b1:ba:83:7e:fe:6e:fb:1e:36:36:b1:74:bb:31:
                    77:06:93:b5:e8:90:53:47:8b:9d:ba:6b:78:27:46:
                    43:d4:38:56:b1:e0:68:a9:66:40:dc:65:36:cf:1f:
                    04:3e:d3:6c:93:76:81:0e:0b:83:93:dc:14:4c:9d:
                    03:31:ad:d2:e2:24:39:c5:fa:03:ac:5e:e4:39:4e:
                    48:a7:85:d2:d1:73:7e:f8:be:16:65:12:67:95:08:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CC:CA:DE:B2:EE:86:83:BB:96:81:7F:E0:63:B8:7C:19:2E:0A:CA
            X509v3 Authority Key Identifier:
                keyid:9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/3131392e33372e31322e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.37.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:85:8d:08:11:bd:53:63:c0:30:11:76:f8:7e:bb:56:de:36:
         f4:c6:4b:b2:72:af:98:4d:14:0c:09:a8:5b:88:03:ab:ff:a5:
         6c:8f:37:f2:59:84:0d:bf:c3:e7:a1:97:36:2c:1d:75:91:43:
         92:8a:b0:e5:25:39:43:49:cb:16:fe:86:02:2d:79:ef:4f:46:
         9d:6a:2f:d2:a3:9a:35:65:c5:93:12:22:98:d5:44:37:be:24:
         39:07:ac:69:0b:93:40:f7:c6:9d:e0:76:e0:18:06:3a:39:48:
         ca:36:56:a8:c8:05:11:05:fe:85:8b:81:6c:2b:a6:80:bc:6e:
         7d:40:c1:a7:ea:ee:97:99:dc:22:a6:5e:d3:a6:37:33:f2:46:
         87:78:0c:97:a2:06:5b:ac:06:14:fd:bf:54:71:f1:9f:d4:d2:
         f8:bd:21:54:23:c2:b6:c5:e2:0e:9d:16:f6:d6:ac:6a:75:0b:
         d1:93:90:8a:8d:7d:6f:aa:5d:ef:0d:37:fc:3e:d7:c1:77:57:
         ee:d6:4b:38:c7:0e:fc:2e:d8:2f:18:c6:f1:8e:8f:c0:8b:48:
         47:8f:fd:54:f9:95:a2:29:f8:98:16:64:8f:d3:87:39:a7:28:
         dc:36:dc:25:27:c0:21:02:01:82:a7:47:fd:5c:82:b6:9f:4a:
         82:66:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:19 2026 by rpki-client