Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e36342e302f31382d3138203d3e203137363232.roa
File:                     3131392e33332e36342e302f31382d3138203d3e203137363232.roa (raw, json)
Hash identifier:          RrxRT5J0eKHrEdN99FDnLqAMDg9M8PUwkDNUJPdWfJw=
Subject key identifier:   B8:0F:FD:15:2C:1A:DF:86:D6:3A:63:DE:A2:E9:EF:E9:50:A9:5E:39
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       1D658D3EE3FF97F21D64116928C9D578CDD40E33
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e36342e302f31382d3138203d3e203137363232.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     17622
IP address blocks:        119.33.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:65:8d:3e:e3:ff:97:f2:1d:64:11:69:28:c9:d5:78:cd:d4:0e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=B80FFD152C1ADF86D63A63DEA2E9EFE950A95E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:22:59:38:22:43:99:23:42:b2:e2:34:22:
                    14:98:b7:4b:30:49:9f:27:48:c9:18:f4:06:5e:c1:
                    fa:d3:13:16:63:b0:38:b3:9a:8a:09:97:81:1b:06:
                    e9:b1:8f:cd:98:9b:b9:85:1d:64:7a:cf:b8:ec:a2:
                    f0:00:af:c0:17:0b:d6:32:98:81:a8:b3:75:d3:3b:
                    24:d2:f9:20:26:a9:29:42:57:14:c6:e4:df:3a:e0:
                    b5:47:41:94:45:fb:b8:62:39:f1:81:37:a9:e2:d7:
                    df:2b:61:39:e7:f8:25:99:a3:c7:c1:d7:5e:e3:eb:
                    7b:5c:51:c7:a2:07:18:e6:43:03:24:a1:a9:64:1e:
                    e2:b4:a7:de:c5:59:52:f3:f0:89:e4:33:69:a2:60:
                    7a:ef:49:ab:8c:41:29:ed:db:2e:51:0b:a7:c0:18:
                    f7:d0:c3:a0:47:71:61:6d:28:e1:7a:01:f5:da:42:
                    d5:93:5c:53:a0:99:85:f0:1a:0e:0f:1a:6b:b3:ab:
                    eb:ef:94:0d:cb:b1:e0:8c:a2:a9:29:11:fb:95:e0:
                    d6:cf:21:04:56:4f:f1:95:26:d9:7c:5a:be:1f:46:
                    fa:72:ce:e7:4a:5c:6a:1b:68:90:29:94:7a:cb:61:
                    a4:57:71:ec:41:81:0d:7d:74:59:df:a4:66:28:17:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:FD:15:2C:1A:DF:86:D6:3A:63:DE:A2:E9:EF:E9:50:A9:5E:39
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33332e36342e302f31382d3138203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.33.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:af:8d:2c:58:ea:39:78:1b:3d:89:c8:30:d9:7d:0b:10:38:
         c2:02:d5:ff:05:1d:db:00:ae:c4:02:f1:64:45:df:a6:62:b1:
         ff:f3:90:d8:9f:c6:ac:42:07:e6:89:3c:52:b2:3d:34:bc:1e:
         b8:33:51:36:bf:2f:43:a2:ce:96:bb:a4:aa:d0:99:ad:6e:d5:
         12:a0:3f:08:99:98:a1:40:d3:14:76:a4:10:64:2c:a6:5e:69:
         ea:b3:68:88:34:41:31:ba:e8:0b:36:8b:39:40:27:c8:be:f6:
         aa:da:bb:51:2e:17:b9:3c:95:01:38:39:0e:26:ba:4c:b2:21:
         79:f5:70:35:9a:71:39:91:88:09:44:69:ab:fe:05:04:51:05:
         62:60:8d:c5:f4:7b:35:41:4d:ab:4b:52:51:0a:c3:00:c4:9c:
         10:3f:30:a8:2d:3f:dc:e7:98:4c:45:86:82:9a:3e:8e:65:c3:
         b5:f7:08:b4:86:4b:7c:d5:09:4e:6f:35:f5:80:ad:ae:96:a9:
         dd:33:5e:7a:75:0d:8e:7b:24:04:16:97:31:03:2d:57:33:92:
         bd:05:2d:2c:26:c8:6a:6b:8a:f0:4e:5f:de:3a:e8:5c:e4:6f:
         0a:16:32:e0:2c:54:4c:ac:3e:a1:15:39:00:6e:45:89:b4:2d:
         ec:bd:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:15 2026 by rpki-client