Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa
File:                     3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier:          jr7jZ0peykfNX1djP7lYR6B63OpsiY99wvS1Gas/a7o=
Subject key identifier:   DE:2B:17:03:57:13:F6:66:7D:6C:FD:BD:45:77:68:98:EE:86:82:99
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       7067D7AF7FAA279BD6E7598155A81924019BB384
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa
Signing time:             Fri 05 Jun 2026 02:40:32 +0000
ROA not before:           Fri 05 Jun 2026 02:35:32 +0000
ROA not after:            Fri 04 Jun 2027 02:40:32 +0000
asID:                     140293
IP address blocks:        219.83.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:d7:af:7f:aa:27:9b:d6:e7:59:81:55:a8:19:24:01:9b:b3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jun  5 02:35:32 2026 GMT
            Not After : Jun  4 02:40:32 2027 GMT
        Subject: CN=DE2B17035713F6667D6CFDBD45776898EE868299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:8a:d5:74:3d:5a:31:24:20:74:2e:16:5c:
                    1a:79:ae:55:b9:e6:b6:e4:36:65:51:e5:b0:b7:1d:
                    e3:95:c7:72:0e:d9:33:3b:bf:b8:0d:ba:e4:60:70:
                    fd:b8:b2:ed:b6:fa:49:b2:96:a1:ee:f1:ac:4c:70:
                    0d:ac:62:12:51:39:87:f8:e2:05:4a:6e:c9:0d:48:
                    32:7a:1d:dd:c6:23:7d:bf:1d:f1:70:f0:b7:4b:ce:
                    1c:99:1b:01:13:c5:56:6e:8b:a0:5c:7f:88:78:c1:
                    fa:b3:f2:3a:08:bc:0a:16:38:ee:69:9f:ad:75:1a:
                    de:a1:9b:34:36:fb:4d:1a:15:ab:44:e7:14:0a:38:
                    b8:29:5e:77:18:a2:a9:14:ae:69:96:98:82:9b:82:
                    63:b6:6b:0b:63:16:fe:87:13:64:1a:48:2e:21:20:
                    01:7d:b9:39:f2:00:11:0a:1a:72:81:7d:d5:b7:06:
                    c5:59:d2:9b:70:18:62:24:e8:91:14:b5:2e:61:8d:
                    f7:fb:2e:10:4d:78:ea:68:88:3d:8b:99:01:52:a1:
                    38:42:cd:16:35:64:06:fd:9d:65:0a:70:9f:97:b9:
                    07:d8:87:1c:1c:cc:ee:0f:64:03:f0:74:71:bf:de:
                    5f:fa:a7:35:02:29:ea:91:bd:1f:12:bd:aa:52:01:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:17:03:57:13:F6:66:7D:6C:FD:BD:45:77:68:98:EE:86:82:99
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136392e302f32342d3234203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:2e:8b:07:f6:3e:a6:9d:1f:4f:a3:a4:77:c4:eb:89:50:56:
         e9:d6:57:b5:e1:5c:9c:aa:16:30:f0:1f:e6:49:db:8f:da:d1:
         1c:23:c7:71:45:bc:11:a9:9e:8f:02:5a:d3:2a:ac:1f:21:5d:
         04:e9:dc:64:7b:f7:04:1f:c2:21:0a:e7:f3:f8:9c:de:08:c3:
         f8:07:a0:c5:cc:cd:e9:d5:9e:da:25:26:55:7e:fd:59:c8:d9:
         32:19:d6:d9:ec:0a:ef:8f:b1:ee:0f:70:27:73:fb:59:49:d3:
         f5:57:25:15:41:ae:c1:69:9d:cf:08:56:0f:83:12:d7:cc:d2:
         07:1e:b4:b9:cb:e5:14:42:35:b6:96:5c:90:db:26:dc:91:25:
         30:82:6c:8b:31:97:9f:5e:20:09:0c:3e:ba:0d:65:62:f7:d5:
         1a:96:54:42:cd:09:56:9e:d6:1b:9a:c5:9e:c8:b5:8f:45:05:
         4b:ac:02:e1:20:09:ae:f8:fe:30:69:5d:3c:e1:2f:56:54:93:
         b8:17:0f:a6:33:e1:66:22:ce:46:de:c2:56:e1:ac:f0:83:a8:
         43:ae:4d:02:d5:10:2c:9a:f6:90:92:a6:3e:2b:69:5b:a1:5b:
         bb:5b:51:f4:ae:ac:7c:ad:81:c9:5d:87:51:92:52:8c:35:5b:
         55:5a:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:27:59 2026 by rpki-client