Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3132382e302f31382d3138203d3e203137363232.roa
File:                     3131392e33332e3132382e302f31382d3138203d3e203137363232.roa (raw, json)
Hash identifier:          adXscUguLI+RUh2Uk6+/iSfavYg0ENBnOnXH/TRiflE=
Subject key identifier:   C5:7E:BD:E0:72:B4:5F:CF:16:BF:BB:EF:BD:12:1D:9B:9B:C9:0F:B5
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       2A811B8732C05FA21122DA96F20BD8BF95C9FC7F
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3132382e302f31382d3138203d3e203137363232.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     17622
IP address blocks:        119.33.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:81:1b:87:32:c0:5f:a2:11:22:da:96:f2:0b:d8:bf:95:c9:fc:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=C57EBDE072B45FCF16BFBBEFBD121D9B9BC90FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:c5:91:c4:70:5b:3f:5d:81:b5:70:62:60:
                    98:b8:e6:a1:e2:3e:fb:e0:17:24:bb:d9:fb:d7:8e:
                    a2:81:43:26:31:36:56:12:9c:42:18:85:ce:41:85:
                    7e:3c:3d:7e:36:ac:19:55:1b:88:d7:ae:e1:a9:e1:
                    7f:47:db:14:fb:9d:40:87:34:2f:8b:4c:e0:cf:28:
                    ce:38:04:94:ba:1e:a5:6c:eb:4a:7e:09:25:10:05:
                    2e:4a:2f:53:44:a1:46:59:66:0f:c7:4a:ce:ae:4c:
                    e7:e6:91:64:c8:7d:cc:14:cf:11:d9:80:c3:6b:ae:
                    17:70:03:26:9c:73:c8:0c:01:73:1d:c9:7b:b8:3a:
                    41:40:97:b6:de:b0:dd:bf:b0:14:d0:d2:93:7a:7d:
                    90:82:40:d4:0d:bc:14:f2:c6:75:1a:c3:20:3a:7e:
                    65:b4:78:0d:b5:14:e4:be:5f:07:dc:6f:f7:5a:55:
                    5b:4a:04:12:0f:91:45:ae:ae:cb:db:fa:51:7f:4a:
                    4e:c3:6c:e9:8b:42:a4:ca:9c:19:99:3a:61:e8:9b:
                    41:08:5f:47:4c:68:95:08:00:eb:46:8f:60:8d:4a:
                    2a:5f:4a:82:30:15:d9:35:21:66:7d:92:4d:be:57:
                    92:5e:96:a0:a5:69:88:d8:07:df:50:5f:b1:8d:09:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:BD:E0:72:B4:5F:CF:16:BF:BB:EF:BD:12:1D:9B:9B:C9:0F:B5
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3132382e302f31382d3138203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.33.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:07:ab:64:56:a2:ab:72:b2:61:c6:2b:f9:2e:1f:e1:fb:d0:
         f7:ee:56:5d:62:26:d4:36:29:54:70:60:2c:c2:65:27:9e:9c:
         3d:96:ba:91:d6:8f:84:5d:2b:9d:06:ca:85:df:63:ec:5a:a5:
         12:7a:9c:91:e3:76:68:46:4f:fd:f2:48:75:20:36:4f:be:33:
         cf:26:16:b1:0b:b8:85:ce:98:87:36:69:5d:6c:c6:e1:70:81:
         f0:1c:26:5d:79:14:8e:84:3e:f8:14:e4:0f:65:d8:e1:a8:0f:
         2f:6b:1b:35:84:10:0c:e4:88:c2:78:7b:eb:c5:23:6d:0e:dc:
         35:a9:e6:68:d6:35:9c:a4:d9:be:5a:20:1b:da:12:fd:c2:0c:
         7b:6f:15:1d:c8:2d:0d:0d:42:9a:32:c8:f4:f0:d1:5c:64:8f:
         32:db:86:7d:ef:03:85:fb:a0:28:05:09:a8:c3:8b:8d:73:d1:
         10:ab:9e:f8:a1:c1:a5:14:e0:f2:84:6e:1f:b6:59:95:ec:5c:
         4d:ce:e5:28:a6:76:60:27:c8:c0:24:b0:fb:0b:d3:ce:47:43:
         49:48:07:28:2a:e5:9a:8d:56:e5:5b:01:d3:e5:c0:64:60:f0:
         e2:07:27:d0:fb:fd:28:49:cc:0c:77:12:3b:32:e7:3d:29:7d:
         eb:96:b4:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:23 2026 by rpki-client