Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33322e36342e302f31382d3138203d3e203137363232.roa
File:                     3131392e33322e36342e302f31382d3138203d3e203137363232.roa (raw, json)
Hash identifier:          jKfxVhNNT6q0cpEYF93zmLiMbOSKh0oXiNm82GT3K3U=
Subject key identifier:   15:C4:80:25:81:48:85:9A:E7:B8:A5:4E:DE:DE:85:10:24:D6:F2:EA
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       62A8A0587910824068ABA91C7B1EB3E448E6AD07
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33322e36342e302f31382d3138203d3e203137363232.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     17622
IP address blocks:        119.32.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:a0:58:79:10:82:40:68:ab:a9:1c:7b:1e:b3:e4:48:e6:ad:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=15C480258148859AE7B8A54EDEDE851024D6F2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:b6:4c:4e:ff:d9:c7:96:46:68:66:a8:5e:
                    31:f9:da:d9:63:9c:a4:6d:37:7b:f5:5c:d1:32:8c:
                    16:a1:87:a9:09:19:c7:11:81:af:28:4b:69:ca:76:
                    67:df:f9:b1:fa:8b:99:8e:5d:10:a7:26:20:9b:85:
                    d5:a7:1e:a7:b5:6e:f0:b2:de:72:b5:4f:60:45:bb:
                    59:ee:a5:25:59:42:ef:17:15:f7:cb:b8:46:fe:c8:
                    3d:6e:12:35:31:6a:39:66:3a:d8:bf:83:56:7d:0d:
                    c5:55:5b:8d:9d:d5:53:76:7e:20:ef:17:2e:50:c5:
                    9f:aa:13:5f:a3:07:ce:ed:9c:b1:6d:6b:8e:8d:6e:
                    fe:7c:52:d7:26:1a:e0:7a:2c:9f:1b:29:17:e4:55:
                    0e:32:e9:25:06:dd:aa:58:cb:cd:b5:51:5d:22:12:
                    2c:c3:4d:e5:56:cf:90:15:ff:27:99:72:c8:48:d8:
                    be:e8:0d:ab:b4:0b:28:be:49:11:d6:28:37:81:65:
                    df:cb:3d:d2:4c:4f:b6:ae:92:cb:bf:21:8f:ee:c5:
                    29:2b:57:59:c9:2f:d8:aa:7b:b5:53:1c:b1:5c:30:
                    c0:1a:76:08:ff:4e:9c:5d:00:5e:da:6d:14:d6:7e:
                    ba:07:57:3d:99:a1:97:f1:fc:f8:5e:f1:d0:3d:78:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:80:25:81:48:85:9A:E7:B8:A5:4E:DE:DE:85:10:24:D6:F2:EA
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33322e36342e302f31382d3138203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.32.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:a1:cb:07:1f:52:9f:7b:7b:86:3e:90:6a:c0:ab:48:d4:5e:
         04:12:1a:bd:38:33:da:96:16:13:3d:bc:16:e5:cb:7d:58:ce:
         a1:cc:3b:38:30:12:51:53:22:ee:f8:7c:af:c7:2b:f1:0c:0a:
         15:a8:f9:58:c3:d1:06:f3:df:d6:ce:82:1e:e9:93:17:56:c0:
         c3:be:b3:05:4e:5d:c6:1f:4d:34:fa:5f:7d:80:d3:86:5a:7f:
         c7:ad:27:a7:a8:37:73:8a:af:7d:4d:05:45:b9:76:22:79:e5:
         8b:ec:07:bd:e4:36:91:e5:62:14:11:81:3a:7a:36:00:f8:24:
         3d:9d:75:1c:25:b9:ea:91:b6:a4:b1:cd:e1:1b:23:03:0f:66:
         e1:88:eb:af:f1:9f:c6:d6:34:7f:49:b0:34:49:55:ac:93:96:
         5d:82:3e:35:55:d1:01:1e:ef:33:75:95:4f:e0:ef:15:aa:7c:
         5c:00:1d:72:7d:4a:57:b6:a0:5c:ae:af:aa:ef:a6:8c:41:f5:
         7e:c2:30:0f:f8:a8:ae:ee:c5:18:80:da:5b:fe:57:58:52:95:
         8e:e3:78:49:27:53:10:66:41:52:31:dd:a3:dd:67:83:49:99:
         9e:b9:c6:00:bb:74:c6:69:42:55:6d:21:62:5b:4d:3d:48:07:
         b3:24:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:52 2026 by rpki-client