Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e362e302f32342d3234203d3e2034383038.roa
File:                     3231392e3233322e362e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          gYbkdjUqDrlQCoj/gDFdBgpPWD+XDAVFdb4c7HphN08=
Subject key identifier:   CF:61:FB:87:2C:CA:3A:F6:20:EA:47:DA:14:16:32:0F:2E:99:55:C6
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       067E156DB88DA52E6760000BA7A5F76418080A6E
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e362e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 08 Jun 2026 10:16:51 +0000
ROA not before:           Mon 08 Jun 2026 10:11:51 +0000
ROA not after:            Mon 07 Jun 2027 10:16:51 +0000
asID:                     4808
IP address blocks:        219.232.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:15:6d:b8:8d:a5:2e:67:60:00:0b:a7:a5:f7:64:18:08:0a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  8 10:11:51 2026 GMT
            Not After : Jun  7 10:16:51 2027 GMT
        Subject: CN=CF61FB872CCA3AF620EA47DA1416320F2E9955C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:21:85:e4:68:6b:c5:37:5a:86:25:3a:4b:
                    ec:ae:98:2d:84:bd:db:7c:1c:88:12:d6:7e:eb:cc:
                    e2:65:8a:99:85:59:77:80:4a:07:4c:d2:4b:ba:ad:
                    be:f7:13:7c:ec:7f:22:43:da:b9:d9:b8:42:3c:85:
                    e5:bb:9d:2b:ad:3e:ed:de:d8:62:88:59:8c:22:6a:
                    a6:f1:87:75:0b:ac:1f:72:6c:d2:e3:30:43:43:d8:
                    3a:59:ed:8f:cc:2b:1d:55:1b:52:91:a1:58:09:bb:
                    e5:da:62:1d:25:41:a5:38:fc:bb:c9:92:e3:f5:ce:
                    4d:f6:5d:43:21:85:95:a8:98:ca:b8:b2:ca:19:0a:
                    a8:e1:b3:a5:6c:9c:17:da:05:2a:0f:d3:ff:4d:dd:
                    c5:15:c0:65:f3:72:a1:fc:2e:2a:fd:98:69:90:4b:
                    7e:6e:4d:69:6e:1d:37:53:3f:6b:b6:ed:cf:89:cc:
                    05:75:43:e4:8c:45:e8:b3:e4:0b:e9:0e:82:6e:17:
                    2d:f9:94:f2:86:f9:c7:6d:fe:e3:01:5a:51:71:b1:
                    30:12:21:be:e4:8b:80:a2:99:c1:05:ea:04:9d:63:
                    03:26:da:32:3c:4b:a3:c1:1d:03:71:ba:85:ad:da:
                    79:22:a0:50:c8:a6:9d:8f:1a:20:cc:31:07:4b:9e:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:61:FB:87:2C:CA:3A:F6:20:EA:47:DA:14:16:32:0F:2E:99:55:C6
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e362e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.232.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e6:e2:6c:57:50:74:e4:1c:09:d0:be:b9:79:36:25:4c:cd:
         5d:d3:c4:98:5b:8e:df:66:95:bc:7b:e3:fb:09:11:1c:6d:15:
         1e:3b:cc:64:b2:1b:4b:15:4e:ba:84:91:93:a2:32:57:21:65:
         c0:0a:f8:39:1a:40:a5:77:35:82:86:92:43:b3:9b:d4:7a:44:
         0a:9e:ec:6d:cc:49:ec:90:ff:f8:38:07:ce:59:8e:b1:3a:76:
         33:95:81:f7:4b:53:1b:ab:02:29:43:1e:68:ff:e4:d1:95:8c:
         8e:90:26:86:32:b3:c2:b8:f7:aa:31:4d:31:8f:ea:8b:3e:9b:
         61:be:49:dc:0b:cf:02:26:04:8f:3f:66:f3:6d:3c:83:ef:92:
         52:7b:22:14:83:34:c9:3d:5f:fd:97:98:38:9b:28:45:4b:25:
         f7:f1:86:3d:3e:55:cd:fb:2b:25:3d:b5:93:55:9a:ca:9f:09:
         69:d6:8a:75:df:99:04:f6:18:08:1d:a2:d7:41:8f:88:f0:48:
         07:45:d9:fb:20:be:90:1e:24:8e:0a:b9:10:c6:b7:02:3e:b8:
         28:9e:cc:01:be:18:ac:ff:7e:2a:4b:bc:d7:6c:3a:86:42:1f:
         46:cd:f4:b1:44:0b:42:ea:cd:f3:7e:e4:01:81:42:c7:03:0c:
         b1:cd:45:42
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUBn4VbbiNpS5nYAALp6X3ZBgICm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MDgxMDExNTFaFw0yNzA2MDcxMDE2NTFaMDMxMTAvBgNV
BAMTKENGNjFGQjg3MkNDQTNBRjYyMEVBNDdEQTE0MTYzMjBGMkU5OTU1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPSGF5GhrxTdahiU6S+yumC2E
vdt8HIgS1n7rzOJlipmFWXeASgdM0ku6rb73E3zsfyJD2rnZuEI8heW7nSutPu3e
2GKIWYwiaqbxh3ULrB9ybNLjMEND2DpZ7Y/MKx1VG1KRoVgJu+XaYh0lQaU4/LvJ
kuP1zk32XUMhhZWomMq4ssoZCqjhs6VsnBfaBSoP0/9N3cUVwGXzcqH8Lir9mGmQ
S35uTWluHTdTP2u27c+JzAV1Q+SMReiz5AvpDoJuFy35lPKG+cdt/uMBWlFxsTAS
Ib7ki4CimcEF6gSdYwMm2jI8S6PBHQNxuoWt2nkioFDIpp2PGiDMMQdLnskpAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUz2H7hyzKOvYg6kfaFBYyDy6ZVcYwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzIzMTM5MmUzMjMz
MzIyZTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADb6AYwDQYJKoZIhvcNAQELBQADggEBADXm4mxXUHTkHAnQvrl5NiVMzV3TxJhb
jt9mlbx74/sJERxtFR47zGSyG0sVTrqEkZOiMlchZcAK+DkaQKV3NYKGkkOzm9R6
RAqe7G3MSeyQ//g4B85ZjrE6djOVgfdLUxurAilDHmj/5NGVjI6QJoYys8K496ox
TTGP6os+m2G+SdwLzwImBI8/ZvNtPIPvklJ7IhSDNMk9X/2XmDibKEVLJffxhj0+
Vc37KyU9tZNVmsqfCWnWinXfmQT2GAgdotdBj4jwSAdF2fsgvpAeJI4KuRDGtwI+
uCiezAG+GKz/fipLvNdsOoZCH0bN9LFEC0LqzfN+5AGBQscDDLHNRUI=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:07 2026 by rpki-client