Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233352e33322e302f31392d3139203d3e2034383038.roa
File:                     3231392e3233352e33322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier:          rfObVsLXIKbAjaNM08K2PAM8dE6Us3POh+EGokHsxo0=
Subject key identifier:   77:65:D5:39:61:BE:7A:16:BA:D1:8B:58:1E:4C:90:49:91:78:52:0E
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       2B767DE89710874905D5AA246C6F99C63533BA9C
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233352e33322e302f31392d3139203d3e2034383038.roa
Signing time:             Thu 04 Jun 2026 05:44:08 +0000
ROA not before:           Thu 04 Jun 2026 05:39:08 +0000
ROA not after:            Thu 03 Jun 2027 05:44:08 +0000
asID:                     4808
IP address blocks:        219.235.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:76:7d:e8:97:10:87:49:05:d5:aa:24:6c:6f:99:c6:35:33:ba:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  4 05:39:08 2026 GMT
            Not After : Jun  3 05:44:08 2027 GMT
        Subject: CN=7765D53961BE7A16BAD18B581E4C90499178520E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:91:e4:e7:72:a8:98:30:b9:31:64:65:17:
                    f6:34:6a:71:d4:9d:ba:b2:27:00:14:fc:75:e4:69:
                    80:23:0a:c5:c9:ba:30:08:18:92:a9:73:b5:da:47:
                    4a:24:2b:02:0e:25:c0:86:4c:9f:3e:f1:c9:17:4f:
                    76:e3:6b:c2:0a:48:ba:b9:45:c0:b8:3f:41:f7:53:
                    fa:32:5c:89:28:48:3c:fe:f1:ad:6d:ef:06:8f:77:
                    66:6b:83:bc:d7:8a:e9:41:c5:d6:00:5a:68:a6:37:
                    76:0e:81:34:8d:0b:2b:53:8d:d6:02:bd:ee:a1:c9:
                    e5:3e:d4:d0:d8:de:7a:e8:ee:c5:89:e0:6c:86:aa:
                    71:da:2a:46:35:98:32:b9:56:40:be:53:ac:50:56:
                    13:98:ea:d7:bb:47:27:6f:50:a1:d6:48:b5:99:7e:
                    f9:53:85:49:e7:3c:d7:d1:27:9b:5c:e8:28:1a:18:
                    d9:05:30:30:91:49:04:b3:22:1d:cc:92:38:f0:8f:
                    30:0f:10:74:cc:1a:58:ce:44:e3:df:c6:bf:09:58:
                    4d:6e:8e:c2:42:1f:22:aa:36:0b:84:14:04:dc:6a:
                    98:74:0a:47:14:94:0b:c0:37:cb:be:5a:59:c0:9b:
                    57:c4:ca:13:5b:03:2e:1d:04:95:68:74:25:6d:d3:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:65:D5:39:61:BE:7A:16:BA:D1:8B:58:1E:4C:90:49:91:78:52:0E
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233352e33322e302f31392d3139203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.235.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:07:80:2b:90:97:31:a0:9a:27:3c:62:3a:17:d9:45:f9:97:
         d1:de:cb:91:3f:f0:13:52:1f:3a:33:e5:18:2a:dc:09:e8:44:
         f9:96:f5:9a:98:d1:04:2c:2c:69:83:12:56:b3:18:98:32:dd:
         ef:3f:57:26:3b:96:41:c1:f6:ec:4e:bd:d2:5f:22:db:59:c3:
         3e:de:82:75:80:62:a2:4b:3f:58:88:14:04:e1:42:ff:f4:9c:
         a9:1d:e5:59:8a:7d:be:9d:5c:11:cd:51:14:14:bf:e9:8d:ce:
         aa:ef:2b:d0:c9:8e:ba:b2:8e:b6:da:ae:22:a2:8e:c9:cc:d6:
         1d:47:2f:bb:f6:8c:aa:d7:51:76:dc:8f:fd:f7:c5:d3:27:c8:
         96:23:ed:8a:81:e0:61:0c:5f:80:29:00:f8:51:c5:b9:eb:a5:
         64:2d:67:14:46:b0:78:a4:4d:b7:40:97:eb:87:d6:37:d9:45:
         2c:20:24:3f:40:d3:5f:c5:12:66:fd:8e:97:ed:a3:05:7d:41:
         6f:e2:0f:b2:2b:ed:f6:90:31:19:24:88:f3:7c:52:11:17:cd:
         fa:42:30:fb:79:ad:71:0a:c6:23:a6:87:2c:93:44:5d:83:d1:
         c2:44:d0:cc:a2:5e:08:9a:62:ca:7d:b3:11:21:74:6d:76:9e:
         be:2f:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client