Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136322e302f32342d3234203d3e2034383038.roa
File:                     3131392e38302e3136322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          YEkfNK8LOZ1JFLzbHDckq08/tISjndMpA7MJC4C3dAk=
Subject key identifier:   F2:FA:4E:D4:5D:67:B5:86:9A:FF:6C:A5:EB:9F:2C:13:FF:BA:0D:8A
Certificate issuer:       /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial:       4189F2BA2413F6D9197836F95EAC074FAA29881C
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136322e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 25 May 2026 01:02:19 +0000
ROA not before:           Mon 25 May 2026 00:57:19 +0000
ROA not after:            Mon 24 May 2027 01:02:19 +0000
asID:                     4808
IP address blocks:        119.80.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:89:f2:ba:24:13:f6:d9:19:78:36:f9:5e:ac:07:4f:aa:29:88:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
        Validity
            Not Before: May 25 00:57:19 2026 GMT
            Not After : May 24 01:02:19 2027 GMT
        Subject: CN=F2FA4ED45D67B5869AFF6CA5EB9F2C13FFBA0D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:5f:ed:59:be:58:64:2f:3a:5e:70:19:4f:
                    a0:70:ff:bf:e7:61:e3:f5:5b:b6:74:09:5f:a6:ed:
                    4b:31:05:0b:cc:7b:0f:ef:5f:13:28:d0:01:72:f9:
                    a9:d4:c6:41:60:4b:f3:a1:c8:07:81:c7:0c:a1:be:
                    5f:86:4b:b6:9f:e6:8f:81:05:98:0e:00:05:16:89:
                    76:0c:a7:79:bb:fb:84:95:c1:4b:da:af:73:b9:bb:
                    c5:92:95:11:22:ca:ea:c6:32:f1:75:f7:fc:df:28:
                    07:db:b9:dc:c2:86:89:86:f6:81:06:2e:ee:b8:cd:
                    be:db:3d:fa:62:a5:be:15:35:64:0c:82:10:23:9b:
                    7f:3c:6d:d3:22:7a:a7:51:2b:19:8e:c9:6d:91:00:
                    66:be:4d:7f:a1:72:54:84:4b:25:4d:35:1e:ef:7f:
                    57:1d:78:68:65:78:a8:bc:6e:7e:48:da:de:77:84:
                    df:4f:f8:ff:9b:5e:21:bc:58:bf:b1:74:41:d7:a6:
                    94:03:5a:7a:15:67:b3:86:7a:ef:7c:75:78:b5:60:
                    ad:2f:8c:9d:bf:39:03:4d:73:f8:51:22:62:2d:71:
                    e8:6e:2d:9c:4f:30:4f:8d:d2:08:88:e4:53:87:d3:
                    db:4f:ac:49:a0:75:04:42:e7:ee:af:ac:70:6c:1c:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FA:4E:D4:5D:67:B5:86:9A:FF:6C:A5:EB:9F:2C:13:FF:BA:0D:8A
            X509v3 Authority Key Identifier:
                keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e3136322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.80.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d0:32:2c:fd:1d:a6:85:9e:64:ea:d3:e4:b5:b1:bd:43:7b:
         a6:4d:c6:3f:9d:99:42:7d:ab:45:de:09:9e:a9:2c:65:19:5c:
         3e:cd:15:74:e9:2b:a1:09:86:88:3b:37:01:65:77:8c:0f:18:
         be:84:42:36:c8:b1:95:c5:0f:34:78:da:40:f3:56:82:f8:f9:
         7a:33:dc:f8:f4:79:ae:b6:e7:f4:9f:1f:2b:7d:86:94:1b:82:
         e7:cf:6a:1a:12:2a:a8:13:00:1a:2c:3c:5d:44:ac:81:04:a2:
         7f:60:fb:f4:e7:9f:b2:7c:e2:a2:5e:41:b4:ee:8f:57:af:86:
         e2:00:59:32:df:d7:d4:74:96:83:0e:68:f9:31:43:39:8d:6b:
         48:71:1f:24:b2:66:44:9b:10:81:3e:a8:4a:1e:17:7d:d0:14:
         57:d2:4c:eb:15:dc:1c:db:74:22:2c:7b:09:02:38:71:43:0e:
         0a:00:d2:f3:1a:b3:94:c1:44:fa:3a:bb:6f:5e:b9:67:35:0c:
         1e:39:de:cf:77:bb:99:2e:2d:32:5d:28:22:8b:ef:b1:24:af:
         02:5f:79:dd:c7:b7:1d:0a:bc:7c:53:ae:56:ef:d4:e6:f5:91:
         10:81:b5:27:79:2e:af:51:24:08:b5:f2:54:dd:af:c8:63:a1:
         f6:1e:da:ec
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQYnyuiQT9tkZeDb5XqwHT6opiBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdC
NTFBN0M0OTAeFw0yNjA1MjUwMDU3MTlaFw0yNzA1MjQwMTAyMTlaMDMxMTAvBgNV
BAMTKEYyRkE0RUQ0NUQ2N0I1ODY5QUZGNkNBNUVCOUYyQzEzRkZCQTBEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWNl/tWb5YZC86XnAZT6Bw/7/n
YeP1W7Z0CV+m7UsxBQvMew/vXxMo0AFy+anUxkFgS/OhyAeBxwyhvl+GS7af5o+B
BZgOAAUWiXYMp3m7+4SVwUvar3O5u8WSlREiyurGMvF19/zfKAfbudzChomG9oEG
Lu64zb7bPfpipb4VNWQMghAjm388bdMieqdRKxmOyW2RAGa+TX+hclSESyVNNR7v
f1cdeGhleKi8bn5I2t53hN9P+P+bXiG8WL+xdEHXppQDWnoVZ7OGeu98dXi1YK0v
jJ2/OQNNc/hRImItcehuLZxPME+N0giI5FOH09tPrEmgdQRC5+6vrHBsHHrnAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU8vpO1F1ntYaa/2yl658sE/+6DYowHwYDVR0j
BBgwFoAUyJmWe5XjLjfM6qEc8Ub7V7UafEkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTMxNDA3Mzk2ODkwMjE2My8wL0M4OTk5NjdCOTVFMzJFMzdDQ0VBQTExQ0YxNDZG
QjU3QjUxQTdDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYzLzAvMzEzMTM5MmUzODMw
MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHdQojANBgkqhkiG9w0BAQsFAAOCAQEAJNAyLP0dpoWeZOrT5LWxvUN7pk3G
P52ZQn2rRd4JnqksZRlcPs0VdOkroQmGiDs3AWV3jA8YvoRCNsixlcUPNHjaQPNW
gvj5ejPc+PR5rrbn9J8fK32GlBuC589qGhIqqBMAGiw8XUSsgQSif2D79Oefsnzi
ol5BtO6PV6+G4gBZMt/X1HSWgw5o+TFDOY1rSHEfJLJmRJsQgT6oSh4XfdAUV9JM
6xXcHNt0Iix7CQI4cUMOCgDS8xqzlMFE+jq7b165ZzUMHjnez3e7mS4tMl0oIovv
sSSvAl953ce3HQq8fFOuVu/U5vWREIG1J3kur1EkCLXyVN2vyGOh9h7a7A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:51 2026 by rpki-client