Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136312e302f32342d3234203d3e2034383038.roa
File:                     3131392e38302e3136312e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          5sGFVAkwsSFCfdJmEgFc8dvUZwQjRQL81uXxcgJGHj4=
Subject key identifier:   1A:09:02:CF:9C:E4:04:B6:88:1C:E0:48:9C:09:66:1D:7D:7F:0A:DA
Certificate issuer:       /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial:       493D06DC55F310C10049E107789C89629E962CAA
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136312e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 25 May 2026 01:02:19 +0000
ROA not before:           Mon 25 May 2026 00:57:19 +0000
ROA not after:            Mon 24 May 2027 01:02:19 +0000
asID:                     4808
IP address blocks:        119.80.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:06:dc:55:f3:10:c1:00:49:e1:07:78:9c:89:62:9e:96:2c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
        Validity
            Not Before: May 25 00:57:19 2026 GMT
            Not After : May 24 01:02:19 2027 GMT
        Subject: CN=1A0902CF9CE404B6881CE0489C09661D7D7F0ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:11:d7:cb:3b:c6:42:d4:d7:85:15:37:04:
                    7c:b0:ea:5c:4c:87:64:48:80:d1:f7:e3:e6:3d:f2:
                    18:bb:f6:76:3d:f5:2a:2f:94:3b:77:71:0c:fd:e3:
                    25:ae:7e:51:34:5a:14:57:67:0e:94:2b:41:b7:10:
                    c4:b4:8e:4a:99:00:b2:7d:4e:41:d1:27:c7:49:27:
                    5a:5b:8c:4e:36:d3:d1:63:bc:8f:cb:2f:ad:dc:ef:
                    e6:3d:f4:4c:b5:59:a9:7d:9e:62:b4:4e:8f:8c:8a:
                    6a:5a:d1:51:3d:92:fe:22:c5:79:01:b6:32:1b:74:
                    47:cd:1f:8b:13:69:92:e1:96:da:c3:ff:c3:ba:b2:
                    a3:95:7d:c2:80:ea:26:eb:a8:6c:ad:3c:52:93:4f:
                    cc:e5:40:26:5d:57:4b:c8:7d:c1:f1:01:2e:13:85:
                    5d:b3:84:a9:67:83:d9:71:c0:9b:9c:22:a0:7c:6d:
                    31:48:97:ae:53:5f:b8:ab:0e:b7:34:63:fb:4c:75:
                    ba:12:6e:63:a1:90:76:6b:f3:d2:fe:92:a6:27:52:
                    75:b7:14:0a:56:64:c1:2c:4e:82:ef:0e:2e:d1:df:
                    97:1f:c3:31:d7:28:be:e3:b0:9d:c9:29:e3:0e:f9:
                    d1:a0:bf:ba:e3:b0:6a:14:f5:60:15:c7:e9:e4:f5:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:09:02:CF:9C:E4:04:B6:88:1C:E0:48:9C:09:66:1D:7D:7F:0A:DA
            X509v3 Authority Key Identifier:
                keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136312e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.80.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:14:03:bb:41:fb:32:f0:3a:c0:67:9a:e1:d1:e4:2e:60:be:
         e7:5a:fa:06:2d:e3:a1:c2:a7:d9:56:2e:de:08:c0:27:a5:3b:
         54:24:38:4d:be:ca:6b:f4:18:3b:a0:a9:e0:8f:d1:e2:27:b6:
         7b:46:82:3f:1f:38:89:72:b8:98:ff:62:17:49:05:b3:17:81:
         d2:1f:b3:d9:fa:96:d0:16:a4:64:d6:21:eb:e2:ae:11:46:e5:
         68:b0:6d:95:6d:c7:10:a1:2f:09:dc:f0:2d:38:a6:b4:95:32:
         c2:e6:50:0b:b7:24:b4:77:b1:3e:d9:9d:a9:ff:ec:0b:04:5c:
         68:ee:25:c6:40:24:f3:f0:6e:7f:f3:ad:44:d5:25:e2:b1:2d:
         30:5b:f3:82:63:67:ad:06:d0:cd:a7:fc:81:48:80:de:60:46:
         17:29:f6:7f:cf:3c:00:f6:8e:ba:b9:3c:61:0f:88:9a:bc:17:
         41:e2:cf:66:3c:a3:13:01:b7:76:1e:56:66:95:56:92:28:7b:
         a4:ee:f3:21:27:a8:66:7b:b9:c2:e0:bd:47:79:b0:c5:74:7c:
         0e:9e:b5:88:43:59:4b:d2:8f:d9:bd:42:02:b6:0a:54:50:1c:
         4f:2d:91:c3:4d:e6:c8:84:76:6b:1b:bd:fd:15:db:e1:ce:35:
         aa:2b:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:05 2026 by rpki-client