Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136302e302f32342d3234203d3e2034383038.roa
File:                     3131392e38302e3136302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          qSXxhC20oRpA+UGtk0r2ggGDZENJxwJyROsMvVIHgOU=
Subject key identifier:   98:38:9C:25:53:12:2C:DB:5F:FC:3A:1C:4A:BF:49:99:7B:9D:E4:36
Certificate issuer:       /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial:       7B78C6FE50A78D44A8999243D727219790BB3622
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136302e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 25 May 2026 01:02:19 +0000
ROA not before:           Mon 25 May 2026 00:57:19 +0000
ROA not after:            Mon 24 May 2027 01:02:19 +0000
asID:                     4808
IP address blocks:        119.80.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:78:c6:fe:50:a7:8d:44:a8:99:92:43:d7:27:21:97:90:bb:36:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
        Validity
            Not Before: May 25 00:57:19 2026 GMT
            Not After : May 24 01:02:19 2027 GMT
        Subject: CN=98389C2553122CDB5FFC3A1C4ABF49997B9DE436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:59:71:36:93:5e:e2:53:ff:53:1d:0b:d2:
                    d1:e0:ac:ac:0e:d9:68:f3:70:63:55:b1:d7:4c:b7:
                    34:45:34:49:6f:2d:16:9f:18:2f:8b:0b:17:74:c8:
                    75:d6:7b:95:ba:6a:22:0e:ed:40:29:d8:59:49:b7:
                    12:3f:ed:74:07:91:75:3c:2c:d9:9e:68:b1:ca:ad:
                    c7:09:36:fd:aa:fa:f2:64:7b:b4:ee:ca:9f:a8:a6:
                    98:15:57:8c:09:9b:85:47:9b:82:83:08:12:41:be:
                    55:c4:97:ba:06:ab:53:ff:5f:2a:06:d8:01:e1:03:
                    a0:94:42:c8:e5:cc:05:49:9f:7d:7a:22:a6:50:cf:
                    e2:93:66:ad:18:96:88:80:a6:51:5b:61:db:70:17:
                    04:20:09:65:e4:f5:e5:8a:14:74:f8:ca:b3:6c:78:
                    6d:85:04:cd:eb:e5:67:aa:27:a6:15:07:8e:bf:a6:
                    06:28:8c:5d:52:32:77:d7:bc:fd:f2:c2:a1:19:d1:
                    02:77:1c:c0:3d:78:54:d8:1d:3e:31:8a:3c:65:f4:
                    52:b0:2f:99:35:a7:77:0a:48:6c:99:26:9d:8a:2a:
                    5f:dd:0f:77:35:79:a5:cf:b8:7c:7e:c2:40:41:a1:
                    29:42:5f:1f:2d:f0:6d:67:ea:ef:3e:3c:5d:dd:51:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:9C:25:53:12:2C:DB:5F:FC:3A:1C:4A:BF:49:99:7B:9D:E4:36
            X509v3 Authority Key Identifier:
                keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136302e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.80.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a3:f1:6d:99:6f:49:39:e8:3d:e5:e1:82:a8:cf:9b:77:6f:
         75:5b:b7:a5:09:73:64:c2:90:c5:d5:48:bb:37:89:d4:80:22:
         ef:86:20:db:32:c7:b1:d2:0b:61:2f:9c:dd:28:6b:6a:e9:ea:
         d9:52:07:7e:6f:3c:a1:29:6f:89:1a:fb:ed:99:a8:e4:bd:3c:
         e1:5f:4d:8e:c6:f6:d5:02:9a:e2:82:46:52:26:9a:6b:79:3b:
         f6:21:17:67:83:50:bc:5a:3a:60:5d:64:b5:54:4a:15:aa:5f:
         99:c1:c5:83:2c:5d:d8:0f:92:ae:3a:24:78:fb:92:cf:37:ee:
         7b:c7:ee:b8:cf:20:f7:9c:9a:49:1e:91:bd:b3:ca:d1:3a:41:
         13:9e:8f:af:49:fd:56:1e:06:0a:c1:2a:d1:68:1b:25:e6:e1:
         89:3c:69:4f:32:4a:27:6f:e4:25:1e:93:5d:9f:78:bf:cb:e1:
         d1:8f:63:6c:04:6c:33:68:70:9f:05:e5:31:43:0b:60:1d:a2:
         62:c0:15:3b:52:f4:f7:8b:fe:5c:be:e9:67:54:08:aa:b5:b5:
         89:c2:2c:e1:a5:8e:ac:d1:92:9a:3b:a5:9f:ae:47:fc:c2:c6:
         bb:5a:3d:de:2d:91:46:7b:e4:14:80:f2:f1:ad:e6:54:d4:f2:
         c7:05:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client