Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e372e302f32342d3234203d3e2034383038.roa
File:                     3231392e3233322e372e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          odcOPtfnQkR4YyNzc2EpdGkAzpjczruRXL9VamtIb68=
Subject key identifier:   CD:67:CE:3C:E6:25:CF:70:F0:3F:02:96:0D:6A:3F:AE:53:3B:20:F0
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       B66CBC28CED36E6A45A222C188BB49F770FEFD
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e372e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 08 Jun 2026 10:18:05 +0000
ROA not before:           Mon 08 Jun 2026 10:13:05 +0000
ROA not after:            Mon 07 Jun 2027 10:18:05 +0000
asID:                     4808
IP address blocks:        219.232.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b6:6c:bc:28:ce:d3:6e:6a:45:a2:22:c1:88:bb:49:f7:70:fe:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  8 10:13:05 2026 GMT
            Not After : Jun  7 10:18:05 2027 GMT
        Subject: CN=CD67CE3CE625CF70F03F02960D6A3FAE533B20F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:17:82:c6:e6:63:5c:1c:cf:8e:a1:8c:48:
                    48:e8:54:97:76:19:87:e8:a1:34:89:d7:6c:30:4e:
                    57:30:60:05:f5:73:97:78:3f:c2:c4:4b:42:5c:d2:
                    8e:61:41:a6:bb:aa:94:b1:e8:3b:1d:cb:60:c9:71:
                    c2:ad:2e:5a:74:0e:6b:2a:ef:0c:35:82:a5:73:54:
                    16:15:b4:49:79:eb:59:bb:46:ce:88:38:a2:7a:04:
                    b6:5b:93:d6:e6:69:52:20:b9:33:6e:1e:c0:59:2b:
                    bc:b9:42:a4:a0:43:89:27:5a:36:34:0c:c5:0c:07:
                    28:73:98:12:e0:e3:2b:e9:e7:80:ff:52:99:bc:ff:
                    02:93:3e:ad:4f:23:d7:46:01:ba:d5:b0:e9:c0:ce:
                    46:e8:e8:81:4d:ac:2a:7e:73:b4:c6:ee:b1:46:96:
                    0c:06:0f:c9:68:ce:2b:60:98:91:6d:1a:2d:ae:91:
                    65:98:2a:50:0d:24:e2:53:b8:39:1a:18:73:2a:47:
                    8c:94:c6:25:64:d9:22:4d:87:34:11:f2:ce:48:98:
                    e1:69:42:ce:d0:6e:ce:b6:f9:06:c0:7f:48:54:63:
                    ad:de:10:82:91:61:6e:95:48:e0:28:32:1a:b5:4b:
                    06:64:65:1f:22:2d:c7:e0:3b:a6:3f:21:75:ce:42:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:CE:3C:E6:25:CF:70:F0:3F:02:96:0D:6A:3F:AE:53:3B:20:F0
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e372e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.232.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:72:f3:0e:33:6b:60:a0:9d:8b:14:06:e8:4f:6c:10:bd:ed:
         49:c6:20:c5:e6:0f:bb:d5:09:69:b6:8d:7a:56:d0:a5:fb:0d:
         bc:e8:0f:66:7e:88:54:73:54:2b:91:63:a0:2c:32:4b:07:1f:
         ba:27:9d:6e:25:e6:35:bc:46:7f:d3:85:fb:c9:aa:e4:bb:81:
         62:f8:90:22:cd:7e:84:42:82:33:20:39:b2:13:24:3c:d8:86:
         09:88:62:f4:8a:6b:19:77:9e:c0:a8:04:56:3d:4d:6f:64:23:
         48:e0:59:e7:39:4f:db:ad:dd:ac:af:2b:b8:d4:52:46:61:25:
         06:f6:53:6e:f9:d1:9b:15:68:6d:80:bb:72:84:49:ef:85:e8:
         22:e2:2d:1b:08:de:0b:af:ea:37:f7:4d:10:c9:e7:20:e4:bd:
         9a:08:71:91:fe:95:9d:14:97:f5:85:fe:b7:10:ea:ac:3a:42:
         6b:39:3e:01:a1:a0:0e:85:62:da:b1:02:a8:a2:4b:83:eb:ea:
         3f:0a:eb:b6:b7:28:a5:f8:98:4a:02:36:61:88:3f:93:44:3a:
         8d:2e:e4:6a:08:24:17:a6:c4:be:93:0a:e9:90:f7:bb:c5:7f:
         cb:49:9e:6f:c1:ff:03:a5:70:9e:72:44:2b:20:f0:85:6d:f6:
         84:0c:eb:a9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUALZsvCjO025qRaIiwYi7Sfdw/v0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MDgxMDEzMDVaFw0yNzA2MDcxMDE4MDVaMDMxMTAvBgNV
BAMTKENENjdDRTNDRTYyNUNGNzBGMDNGMDI5NjBENkEzRkFFNTMzQjIwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfzheCxuZjXBzPjqGMSEjoVJd2
GYfooTSJ12wwTlcwYAX1c5d4P8LES0Jc0o5hQaa7qpSx6Dsdy2DJccKtLlp0Dmsq
7ww1gqVzVBYVtEl561m7Rs6IOKJ6BLZbk9bmaVIguTNuHsBZK7y5QqSgQ4knWjY0
DMUMByhzmBLg4yvp54D/Upm8/wKTPq1PI9dGAbrVsOnAzkbo6IFNrCp+c7TG7rFG
lgwGD8lozitgmJFtGi2ukWWYKlANJOJTuDkaGHMqR4yUxiVk2SJNhzQR8s5ImOFp
Qs7Qbs62+QbAf0hUY63eEIKRYW6VSOAoMhq1SwZkZR8iLcfgO6Y/IXXOQk5rAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUzWfOPOYlz3DwPwKWDWo/rlM7IPAwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzIzMTM5MmUzMjMz
MzIyZTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADb6AcwDQYJKoZIhvcNAQELBQADggEBAGNy8w4za2CgnYsUBuhPbBC97UnGIMXm
D7vVCWm2jXpW0KX7DbzoD2Z+iFRzVCuRY6AsMksHH7onnW4l5jW8Rn/ThfvJquS7
gWL4kCLNfoRCgjMgObITJDzYhgmIYvSKaxl3nsCoBFY9TW9kI0jgWec5T9ut3ayv
K7jUUkZhJQb2U2750ZsVaG2Au3KESe+F6CLiLRsI3guv6jf3TRDJ5yDkvZoIcZH+
lZ0Ul/WF/rcQ6qw6Qms5PgGhoA6FYtqxAqiiS4Pr6j8K67a3KKX4mEoCNmGIP5NE
Oo0u5GoIJBemxL6TCumQ97vFf8tJnm/B/wOlcJ5yRCsg8IVt9oQM66k=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:09 2026 by rpki-client