Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33322e3132382e302f31372d3137203d3e203137363232.roa
File:                     3131392e33322e3132382e302f31372d3137203d3e203137363232.roa (raw, json)
Hash identifier:          AdBUZj+Vfol3oxbptI2SvuNijPyuuwsIW2Ru1GDdd/Y=
Subject key identifier:   97:D9:83:59:0C:09:87:18:AB:6E:33:E8:40:91:8F:54:D5:7D:7A:25
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       5B86D8A0E6D08ABF5731A3DB59D078697F3BC619
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33322e3132382e302f31372d3137203d3e203137363232.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     17622
IP address blocks:        119.32.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:86:d8:a0:e6:d0:8a:bf:57:31:a3:db:59:d0:78:69:7f:3b:c6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=97D983590C098718AB6E33E840918F54D57D7A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:aa:fc:47:d9:f2:30:07:6c:a8:07:44:39:
                    4c:cb:84:8b:45:5e:47:65:44:b3:1a:d5:38:7e:1d:
                    cf:6d:24:4d:bb:84:78:34:3b:21:eb:0c:66:0b:a0:
                    91:4c:a2:75:dc:55:6e:f0:3a:ca:ee:a5:0e:b6:5c:
                    7a:e0:ad:14:42:c4:60:d3:fd:ed:81:fe:19:30:f0:
                    77:52:2a:42:23:9f:a9:a6:ae:1c:87:3b:46:54:19:
                    09:23:9e:52:66:ac:8f:ab:4b:e8:37:98:c9:fe:b2:
                    d0:2b:11:3a:68:be:d3:1c:2b:32:74:e1:7b:7f:04:
                    f9:0a:a2:ea:94:e1:0d:5b:83:01:66:c5:05:45:dc:
                    7d:e8:f1:a3:7b:11:7e:36:2c:da:93:b5:56:ef:96:
                    72:44:c6:3c:5a:c8:c3:03:f9:aa:7d:db:25:87:4e:
                    69:18:bb:98:42:f9:6f:06:7c:72:08:4a:a9:58:d0:
                    c9:13:cc:10:01:ee:d8:b5:7f:8f:93:9a:9b:a7:73:
                    3a:c1:8b:c6:88:92:fc:0e:69:68:d4:f6:77:0c:b8:
                    b9:d7:6e:5d:54:8e:b2:e4:5a:52:10:8a:f0:7b:d7:
                    b7:99:44:65:6f:4b:b4:24:31:cb:15:72:83:f5:6e:
                    5c:05:86:6b:c7:2d:36:c7:7b:85:18:53:6e:36:18:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D9:83:59:0C:09:87:18:AB:6E:33:E8:40:91:8F:54:D5:7D:7A:25
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33322e3132382e302f31372d3137203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.32.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:94:0f:9c:05:25:cf:94:16:b4:bf:f7:80:a2:a8:8e:95:
         10:f0:e7:b0:70:13:d2:ae:64:26:c8:a6:c1:2d:8e:c2:76:88:
         bd:06:3f:fd:4f:8f:45:cd:ae:ad:8e:c3:eb:44:cb:15:02:da:
         ae:93:18:01:96:0e:b0:54:f5:51:94:12:e0:53:43:3d:d4:38:
         e4:04:10:58:bb:c0:69:99:44:68:08:45:3e:a5:86:05:c5:b9:
         c6:1a:db:22:c8:d1:46:5d:d7:28:6f:9a:6f:7b:63:e2:bf:f3:
         39:3f:be:82:57:e2:c9:d6:cf:62:eb:cd:3c:52:25:a2:77:c4:
         eb:29:4a:5f:2f:8c:a6:62:32:71:97:0e:3e:df:7b:4f:fa:89:
         12:a6:73:b3:35:6c:63:39:2f:0d:c3:a2:de:a7:05:0b:ea:28:
         1f:51:18:cf:eb:69:70:a3:52:63:4c:43:5f:8d:bd:76:0f:32:
         81:1e:07:9d:46:15:fc:6b:38:53:26:03:09:9e:d3:89:1c:29:
         dd:f4:0a:b9:a3:7c:a2:2d:f7:ca:9d:d9:43:94:c6:c6:41:89:
         30:c5:8d:ef:f2:be:32:18:49:af:c4:30:49:78:9e:53:42:e2:
         3d:cd:e1:a6:62:91:fb:ce:9d:f9:66:91:54:1e:30:ca:bc:8f:
         84:cc:f2:1c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUW4bYoObQir9XMaPbWdB4aX87xhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBB
NDlEQTI5RTAeFw0yNjA1MjkwODAzMjhaFw0yNzA1MjgwODA4MjhaMDMxMTAvBgNV
BAMTKDk3RDk4MzU5MEMwOTg3MThBQjZFMzNFODQwOTE4RjU0RDU3RDdBMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvqr8R9nyMAdsqAdEOUzLhItF
XkdlRLMa1Th+Hc9tJE27hHg0OyHrDGYLoJFMonXcVW7wOsrupQ62XHrgrRRCxGDT
/e2B/hkw8HdSKkIjn6mmrhyHO0ZUGQkjnlJmrI+rS+g3mMn+stArETpovtMcKzJ0
4Xt/BPkKouqU4Q1bgwFmxQVF3H3o8aN7EX42LNqTtVbvlnJExjxayMMD+ap92yWH
TmkYu5hC+W8GfHIISqlY0MkTzBAB7ti1f4+TmpunczrBi8aIkvwOaWjU9ncMuLnX
bl1UjrLkWlIQivB717eZRGVvS7QkMcsVcoP1blwFhmvHLTbHe4UYU242GDwHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUl9mDWQwJhxirbjPoQJGPVNV9eiUwHwYDVR0j
BBgwFoAU+mJYjDtNPN9Uch0CQduYMKSdop4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjU3NzEwNjU0NzU3Mjc1NS8wL0ZBNjI1ODhDM0I0RDNDREY1NDcyMUQwMjQxREI5
ODMwQTQ5REEyOUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBBNDlEQTI5RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMjU3NzEwNjU0NzU3Mjc1NS8wLzMxMzEzOTJlMzMz
MjJlMzEzMjM4MmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzEzNzM2MzIzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEB3cggDANBgkqhkiG9w0BAQsFAAOCAQEAUceUD5wFJc+UFrS/94CiqI6V
EPDnsHAT0q5kJsimwS2OwnaIvQY//U+PRc2urY7D60TLFQLarpMYAZYOsFT1UZQS
4FNDPdQ45AQQWLvAaZlEaAhFPqWGBcW5xhrbIsjRRl3XKG+ab3tj4r/zOT++glfi
ydbPYuvNPFIlonfE6ylKXy+MpmIycZcOPt97T/qJEqZzszVsYzkvDcOi3qcFC+oo
H1EYz+tpcKNSY0xDX429dg8ygR4HnUYV/Gs4UyYDCZ7TiRwp3fQKuaN8oi33yp3Z
Q5TGxkGJMMWN7/K+MhhJr8QwSXieU0LiPc3hpmKR+86d+WaRVB4wyryPhMzyHA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:06 2026 by rpki-client