Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3132382e302f31392d3139203d3e2030.roa
File:                     3131392e38302e3132382e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier:          Ct0o7TSSCq4PzJ93SEgUx5TYDYHAXXbcTgI0iDVnxPI=
Subject key identifier:   22:2A:42:25:F4:13:22:8E:B9:E1:46:D3:10:0A:BA:02:64:74:60:7B
Certificate issuer:       /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial:       67BD89B78A26F356ADF7C915F53AA8E5D0B76FDE
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3132382e302f31392d3139203d3e2030.roa
Signing time:             Wed 20 May 2026 04:19:18 +0000
ROA not before:           Wed 20 May 2026 04:14:18 +0000
ROA not after:            Wed 19 May 2027 04:19:18 +0000
asID:                     0
IP address blocks:        119.80.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 02:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:89:b7:8a:26:f3:56:ad:f7:c9:15:f5:3a:a8:e5:d0:b7:6f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
        Validity
            Not Before: May 20 04:14:18 2026 GMT
            Not After : May 19 04:19:18 2027 GMT
        Subject: CN=222A4225F413228EB9E146D3100ABA026474607B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:60:22:02:a7:d8:0b:2b:0e:94:6a:8a:78:
                    a8:bc:47:e5:52:2d:ae:e7:63:9a:1e:42:c4:a3:bb:
                    83:81:ce:08:62:d1:87:e3:14:d1:8a:57:12:2a:45:
                    58:05:c9:06:28:5a:77:bb:7f:9d:33:63:ea:f6:8d:
                    a3:d0:25:64:34:17:f4:a8:25:fb:ea:a8:08:14:4d:
                    21:6b:22:e5:f3:31:5b:35:bd:8f:cb:12:93:8c:84:
                    63:e7:93:1c:d5:95:cc:cd:be:30:2d:20:0e:60:14:
                    32:b4:3b:8d:57:2d:43:29:86:44:36:35:6b:09:a9:
                    ca:28:ae:73:3c:28:9c:d6:13:72:a3:44:1e:9c:aa:
                    2d:55:22:8e:b1:77:cb:7a:e7:9e:af:73:cc:46:59:
                    aa:fa:60:30:ed:4e:3e:cd:2a:35:27:81:26:8a:5e:
                    44:c2:d7:ae:02:f7:a5:4a:d0:e3:4f:37:17:03:e9:
                    62:39:99:43:cc:ef:bd:34:dc:3f:60:27:cf:aa:e0:
                    39:68:f5:1e:1c:67:79:1a:79:48:c5:41:1a:61:30:
                    c6:06:52:45:4d:71:a2:97:9f:4b:ee:b8:19:01:40:
                    fd:6e:cc:b7:07:d2:fb:02:ec:1c:bc:12:ec:fe:fe:
                    05:d2:e4:5e:c7:53:e9:5f:c1:6e:2a:8a:15:f9:6c:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:42:25:F4:13:22:8E:B9:E1:46:D3:10:0A:BA:02:64:74:60:7B
            X509v3 Authority Key Identifier:
                keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3132382e302f31392d3139203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.80.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:89:0e:8d:8b:8c:b7:b0:77:34:63:f1:32:01:f7:0c:b2:46:
         46:ad:f3:bc:6e:f5:f7:3d:81:d0:8d:90:b8:52:72:20:09:40:
         4b:46:6c:90:04:a1:38:f4:b4:29:48:59:53:1e:31:63:76:f9:
         c9:9e:87:8e:74:98:20:64:2d:02:75:eb:17:01:62:bf:79:b3:
         48:0f:a0:6a:68:a5:95:96:c9:91:5c:94:93:c2:81:fb:29:d5:
         e0:db:bd:b1:28:a9:cb:69:10:dd:ae:cb:18:8d:8b:cb:67:70:
         f2:c8:2e:b2:ac:61:b1:1c:86:e7:9d:60:84:51:16:ec:10:ce:
         09:3f:8d:cd:0c:01:ed:24:78:a5:e4:cd:0d:1f:c1:d3:75:80:
         c9:a7:e6:5a:ea:84:cb:e8:72:30:43:72:90:cd:07:d7:55:5d:
         95:2c:93:ba:84:b9:01:67:79:64:5b:e7:39:94:8e:ac:61:ad:
         2f:24:39:0b:0c:5e:34:bf:2d:a6:08:85:3c:a6:6e:ae:b0:8f:
         99:e5:71:0e:bd:67:25:c7:cd:fa:16:2b:f0:64:2b:92:94:eb:
         1d:06:07:61:a2:61:37:ab:22:3e:7e:fe:8b:b0:9b:28:2f:aa:
         fd:2c:22:09:f5:bb:1b:ac:7c:1f:55:5b:4b:08:bd:0d:d6:65:
         87:3d:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:04:19 2026 by rpki-client