Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3139322e302f31392d3139203d3e203137363232.roa
File:                     3131392e33332e3139322e302f31392d3139203d3e203137363232.roa (raw, json)
Hash identifier:          xsfAN/00Qyu6OIIcw8N6b0JL7DfI8F45S6/i1EVsVEw=
Subject key identifier:   39:3D:F1:C0:69:38:83:6F:9C:CF:84:80:1F:98:AC:21:EE:25:0A:C9
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       292F002ED76C655B93A8D454C36D35D19C6813D0
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3139322e302f31392d3139203d3e203137363232.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     17622
IP address blocks:        119.33.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:00:2e:d7:6c:65:5b:93:a8:d4:54:c3:6d:35:d1:9c:68:13:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=393DF1C06938836F9CCF84801F98AC21EE250AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:e8:1c:57:de:bf:d0:ac:7d:a7:42:72:a4:
                    f2:29:d6:09:84:f4:3e:a6:6c:89:ac:17:69:7a:7a:
                    23:35:4c:fd:53:00:3b:df:d4:fa:26:68:7d:38:fe:
                    7e:9e:01:7d:ef:3a:54:74:f3:32:8c:98:28:51:d3:
                    22:ff:3c:89:62:72:b2:44:d3:c8:68:a0:93:ee:01:
                    83:e4:cb:5a:14:91:51:30:24:79:7b:d7:c4:79:08:
                    d7:22:8c:6e:b7:46:05:35:78:02:a7:ea:ec:1a:29:
                    c8:ea:ff:6a:e6:16:6f:f3:1d:4f:cd:67:0f:b8:a1:
                    d2:e8:cb:45:7d:23:30:72:d1:a1:06:c6:5c:c3:d0:
                    69:77:fd:ce:27:0e:ec:f6:44:77:17:67:6f:53:85:
                    92:a9:a6:8a:4c:2a:6a:b3:0e:de:2e:d7:ed:ec:b7:
                    e0:7b:a2:e3:8c:ae:a5:b7:29:50:06:1a:6b:f7:6a:
                    99:d8:43:39:a8:d1:43:c3:73:22:a3:99:0a:83:85:
                    98:1b:ef:19:7d:53:98:d5:7b:e5:8f:3e:ff:73:e6:
                    d7:6c:cb:67:32:a0:bb:a3:78:f2:e4:f3:fa:9b:61:
                    77:40:cb:52:f7:77:9a:2b:ff:95:3a:c7:8b:f9:69:
                    8c:31:e8:6b:b5:05:3d:77:95:c6:22:15:2d:cf:f0:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:F1:C0:69:38:83:6F:9C:CF:84:80:1F:98:AC:21:EE:25:0A:C9
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e3139322e302f31392d3139203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.33.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:08:87:4c:ad:5f:90:11:88:2a:d7:47:26:ad:9c:c4:f3:30:
         6f:37:fe:e6:52:a5:eb:0d:15:91:c0:c8:05:e3:4a:3c:0c:18:
         25:fe:d5:5b:c5:35:11:63:78:cf:d2:ba:88:73:6f:7c:46:53:
         3b:ac:ab:5d:9c:14:8b:fc:15:47:06:85:de:c9:89:5e:eb:87:
         02:e6:68:56:0d:fb:0f:8a:91:c5:75:a0:af:5f:3a:2e:19:47:
         c6:c7:6a:df:60:a3:d2:c1:a7:72:7d:89:2b:e1:f0:5c:bd:8c:
         a7:3b:54:ba:07:14:2d:56:59:ae:ef:8b:d3:5c:15:0c:d2:db:
         57:95:59:eb:23:8e:bb:b7:21:fe:a4:af:7c:cd:42:4f:e2:ed:
         10:b4:10:ba:7e:f7:b8:86:ac:95:c8:bf:58:b8:2b:47:1c:97:
         29:25:cc:63:8c:0f:18:4c:0d:a3:9f:a3:e1:5e:a9:83:53:26:
         d1:0e:c4:2e:91:8e:07:b6:d3:b5:eb:3b:e0:a6:bb:f5:b6:1d:
         b3:b3:cc:86:e1:bf:4a:d0:67:fe:d4:5d:73:e7:c1:54:c2:ea:
         19:bf:18:32:f6:20:03:ce:64:93:e5:18:60:6a:eb:ba:ad:d1:
         de:eb:ec:35:aa:b4:6c:2a:bc:ad:b2:65:fc:4b:e1:a6:9a:73:
         56:ec:23:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:32 2026 by rpki-client