Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e302e302f31372d3137203d3e203137363232.roa
File:                     3131392e33342e302e302f31372d3137203d3e203137363232.roa (raw, json)
Hash identifier:          6a0kCpqvmTcCHAk70cOiVXkH5lnydlHCESpUC0C3wXA=
Subject key identifier:   C2:E4:10:3D:06:7C:6C:1D:35:A5:46:75:3A:33:5D:2C:54:D0:27:8B
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       48DBC8605E278AC5E2282AA3C491F1067A104273
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e302e302f31372d3137203d3e203137363232.roa
Signing time:             Fri 29 May 2026 08:08:27 +0000
ROA not before:           Fri 29 May 2026 08:03:27 +0000
ROA not after:            Fri 28 May 2027 08:08:27 +0000
asID:                     17622
IP address blocks:        119.34.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:db:c8:60:5e:27:8a:c5:e2:28:2a:a3:c4:91:f1:06:7a:10:42:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:27 2026 GMT
            Not After : May 28 08:08:27 2027 GMT
        Subject: CN=C2E4103D067C6C1D35A546753A335D2C54D0278B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:ab:d2:e2:b1:69:71:a5:fe:9e:e3:a2:dd:
                    59:b5:27:2d:c7:ec:7c:c8:bc:57:65:3b:fc:dd:2d:
                    11:77:92:60:16:30:cb:a5:c9:77:13:1c:fe:62:45:
                    e5:43:a4:01:3b:d8:48:60:4b:f3:69:20:2c:ee:3a:
                    85:b4:c0:c5:b7:11:e6:d9:eb:9f:6c:ef:ed:ff:55:
                    67:c1:8e:37:15:8a:df:8d:09:39:8e:5c:70:66:76:
                    32:2e:20:82:b0:2f:9d:87:c4:02:61:5e:9d:47:61:
                    30:d6:ae:d9:e9:50:e7:21:71:81:c4:59:0c:9f:4a:
                    ee:eb:ca:9b:9b:32:ca:71:6a:66:56:9a:5c:c5:35:
                    36:91:55:35:f8:35:a8:7e:4d:ae:04:d4:88:72:bc:
                    bc:76:07:e3:c0:eb:df:32:7d:dc:22:f1:40:01:ae:
                    3e:7d:f3:98:2e:52:3c:8e:9b:54:06:13:e4:07:3e:
                    22:46:02:1b:d7:be:4f:09:99:8f:c3:ee:77:b4:5b:
                    77:a8:e1:8a:4d:df:fb:23:b3:40:8d:a9:0d:36:d0:
                    fd:46:d5:d9:20:92:b1:3f:96:54:10:7e:13:97:56:
                    04:1a:01:b8:5f:c4:64:a2:9a:f0:76:61:f2:bf:2c:
                    2f:22:0e:73:e4:46:bc:3b:e5:2c:04:72:b6:f3:ba:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:10:3D:06:7C:6C:1D:35:A5:46:75:3A:33:5D:2C:54:D0:27:8B
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e302e302f31372d3137203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.34.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         49:52:5b:a5:a9:73:16:c4:03:91:49:ab:0d:9f:8c:6e:86:cc:
         c7:c5:3f:56:db:98:e8:bb:95:3a:0d:af:21:77:88:3d:44:2a:
         9f:43:c4:1e:65:e0:7c:d9:c3:ed:fa:07:3b:81:a9:02:e5:4b:
         03:c1:78:86:2d:c2:27:15:1f:e5:43:39:12:2f:1d:28:75:cc:
         4c:90:2f:90:29:d0:1b:52:db:6e:c5:c5:8a:2b:72:12:35:9a:
         96:f8:4a:0f:f7:61:10:d0:ff:91:5a:15:6c:44:2e:bb:b3:90:
         b7:cc:34:a8:2e:7f:c4:ef:60:66:68:eb:52:63:2f:77:87:b3:
         b8:1e:a6:af:41:cf:6b:d0:bd:5a:a9:df:fb:d9:7d:b8:b7:db:
         30:1b:b2:cb:50:d7:2b:bf:6b:79:8a:d1:0e:b1:1e:c4:98:a8:
         82:01:fc:97:dd:78:76:fe:c3:3b:f0:72:f2:3d:70:96:d3:92:
         43:c9:59:4e:05:f3:c1:67:f5:32:fb:31:8b:3e:e1:c4:bb:ec:
         20:79:7f:f5:18:38:b2:e0:66:f8:d0:ad:be:bb:ef:b7:b5:67:
         fa:36:e1:da:ab:aa:65:0e:d1:09:ea:bd:96:e8:f1:6c:36:e0:
         61:0a:d2:53:e6:ef:76:21:a6:a6:c5:5c:14:36:62:8e:8d:c9:
         7b:e3:8c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:33 2026 by rpki-client