Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa
File:                     3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa (raw, json)
Hash identifier:          2g5Xdw9KQvYArzBtOyilCKmilMxYKl2a14GkgGu9LbI=
Subject key identifier:   D2:65:2E:BA:FF:57:8D:A8:43:95:D0:4D:C2:19:1D:85:25:B5:01:5E
Certificate issuer:       /CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
Certificate serial:       61A3FE8B09C955E0F49FECF2FF81A7E7459CD3E3
Authority key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa
Signing time:             Fri 29 May 2026 08:08:28 +0000
ROA not before:           Fri 29 May 2026 08:03:28 +0000
ROA not after:            Fri 28 May 2027 08:08:28 +0000
asID:                     134773
IP address blocks:        119.34.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:53:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a3:fe:8b:09:c9:55:e0:f4:9f:ec:f2:ff:81:a7:e7:45:9c:d3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E
        Validity
            Not Before: May 29 08:03:28 2026 GMT
            Not After : May 28 08:08:28 2027 GMT
        Subject: CN=D2652EBAFF578DA84395D04DC2191D8525B5015E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:06:56:69:1f:e3:8b:c8:0d:6c:13:44:00:
                    6c:ef:36:d7:c2:fc:c8:be:84:5b:71:61:43:26:b2:
                    6c:f9:a7:05:5d:fc:7c:d9:37:68:92:aa:d9:7c:86:
                    15:30:ed:d9:59:01:93:f6:74:6c:9f:33:ba:45:8a:
                    9a:ab:a3:97:cb:1b:b6:22:09:3b:3b:be:01:d3:f1:
                    a4:a8:55:c7:0e:35:af:b0:d0:7a:45:fc:a5:48:51:
                    0c:3c:6a:ed:6d:24:f7:5e:12:c7:6c:98:25:6a:79:
                    4b:46:4f:06:70:3d:1a:a2:4e:dc:ef:98:4c:9d:4a:
                    9e:46:1c:40:ef:a7:b0:c5:e2:42:c4:d7:5a:ae:63:
                    df:81:f2:83:af:f0:ec:9d:27:54:db:b2:be:49:39:
                    b5:f5:44:5a:c2:a5:95:3b:2d:1b:85:a0:c2:85:4c:
                    c1:c5:8a:11:9f:31:15:17:60:03:ff:e7:a5:8e:2b:
                    89:4a:df:78:cb:52:e3:e0:a5:2c:b0:03:37:9e:9f:
                    05:43:b0:30:4c:32:fe:ce:2f:8c:08:6e:64:b3:e6:
                    6e:c2:5e:db:a2:c8:cb:c1:52:4b:d3:e7:64:ad:8f:
                    33:93:64:92:c3:f0:cf:8d:ac:04:ca:7e:e1:4f:1c:
                    b0:c2:30:50:ca:62:97:4d:be:7b:e4:ae:65:78:e0:
                    db:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:65:2E:BA:FF:57:8D:A8:43:95:D0:4D:C2:19:1D:85:25:B5:01:5E
            X509v3 Authority Key Identifier:
                keyid:FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/3131392e33342e3132382e302f31372d3137203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.34.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:7e:38:63:b0:76:fa:0c:4e:3c:9c:7b:05:4b:cf:c7:07:
         4c:48:8a:d4:02:e7:2a:1d:a9:e4:57:ee:64:af:a5:86:3e:2a:
         26:ee:e5:35:2b:9f:08:2b:6f:e5:51:2e:85:49:49:e6:35:1a:
         7a:bc:d6:0d:30:1d:40:7d:2c:e4:df:80:2d:02:04:66:ed:7d:
         f1:dd:dc:19:dd:87:24:32:3f:5a:b7:bf:e6:42:e4:ec:cc:7d:
         59:9b:0e:18:e2:f9:30:d6:46:28:9c:d6:ff:a2:b4:63:25:0e:
         b6:21:c4:9a:c0:6e:11:73:ff:54:6c:3f:8c:43:5c:42:8c:19:
         65:12:cb:13:e5:df:2d:ab:8e:6f:ff:bf:43:86:8e:12:a5:ef:
         43:f3:51:b0:8d:19:f4:bd:35:e3:30:9a:20:f8:fe:15:9e:6f:
         8e:92:37:ad:34:89:12:94:23:0a:be:86:71:5e:8e:a7:bd:de:
         c4:bb:2e:9f:43:23:e4:b4:8e:f9:51:a5:91:48:69:e3:7a:50:
         ac:9d:12:18:f3:2e:1d:47:c5:fa:dc:d4:1a:9d:ca:0f:a4:b2:
         ed:e4:c4:e7:aa:4d:e0:8b:09:c0:a8:5a:21:9b:a1:ec:b3:3f:
         99:bd:b5:83:31:a3:1e:b5:b6:54:1e:7e:a0:d5:5e:54:4b:bb:
         49:5a:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:46 2026 by rpki-client