Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136392e302f32342d3234203d3e203233363530.roa
File:                     3231392e38332e3136392e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          OWpD/Mi61F9nYcHnHv9UgSa+CD12LWJf/zOivbmv9bk=
Subject key identifier:   50:CA:DC:CF:B5:50:03:F6:7A:9F:B8:CA:DB:8E:E4:74:C1:36:D5:D8
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       2922962ECA374338781C1AC969EA0350D17499AA
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136392e302f32342d3234203d3e203233363530.roa
Signing time:             Fri 14 Aug 2026 08:07:49 +0000
ROA not before:           Fri 14 Aug 2026 08:02:49 +0000
ROA not after:            Fri 13 Aug 2027 08:07:49 +0000
asID:                     23650
IP address blocks:        219.83.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:22:96:2e:ca:37:43:38:78:1c:1a:c9:69:ea:03:50:d1:74:99:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Aug 14 08:02:49 2026 GMT
            Not After : Aug 13 08:07:49 2027 GMT
        Subject: CN=50CADCCFB55003F67A9FB8CADB8EE474C136D5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:ae:ac:c3:00:06:f4:c2:11:51:5e:f5:8a:
                    15:26:ea:7d:d5:01:00:89:7f:9e:85:58:80:4f:54:
                    39:0b:99:58:e8:43:49:a7:c9:d3:17:30:99:77:1e:
                    4d:13:a6:da:92:ae:e7:52:1b:28:33:38:32:62:b1:
                    ed:30:2b:2f:f1:6c:25:65:8d:5a:d5:94:b3:b6:65:
                    a7:1e:1b:3c:fd:2b:42:38:a5:51:19:16:32:61:65:
                    70:24:ad:d6:f4:24:e4:84:19:52:b3:0b:da:6d:6c:
                    ca:b5:73:c4:cc:b8:f7:fc:98:ea:25:0d:30:83:1a:
                    a3:55:62:c9:c6:2c:4a:23:2b:c0:44:0b:44:5e:8f:
                    c8:29:9d:38:94:6e:b4:f6:56:00:11:32:11:35:5c:
                    fd:e2:ce:40:3b:c8:f1:6d:52:d3:c8:de:34:cd:2a:
                    03:5b:70:a6:47:35:01:4d:af:39:ea:ce:93:5a:65:
                    99:78:34:bc:c2:4f:7e:94:3e:a5:b7:9f:59:dd:2b:
                    6a:03:cc:68:41:46:48:e4:f2:cb:4b:a7:70:4f:3b:
                    b6:d7:80:b8:8d:e7:a9:16:12:98:06:4b:08:be:bb:
                    f6:18:6d:0d:41:1b:ef:9d:d4:e5:37:82:42:d4:6c:
                    c3:41:2f:cc:7e:50:cc:30:5d:25:7f:c3:00:4b:05:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CA:DC:CF:B5:50:03:F6:7A:9F:B8:CA:DB:8E:E4:74:C1:36:D5:D8
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3136392e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:07:9b:63:eb:bf:58:07:bd:08:ae:eb:12:45:c5:4e:0d:
         a0:7d:ff:90:fe:21:36:83:40:c2:95:b5:fd:e0:81:84:08:da:
         f3:ca:8a:b0:dc:c5:93:8b:4c:10:91:5a:69:e9:7b:65:4a:a2:
         79:74:2c:01:25:0d:df:62:19:67:f8:de:47:fc:b5:20:e0:da:
         4c:26:5d:1e:03:4c:52:aa:94:ae:19:b5:62:45:fb:ee:af:37:
         90:fd:3c:15:15:67:b3:82:62:33:ee:c5:2b:ff:96:d4:0c:20:
         e0:ba:ff:f8:44:78:60:b1:8d:a8:d1:4d:73:58:0a:0b:d7:27:
         2f:b3:fb:b1:c9:2a:c9:5f:e2:33:2b:09:9a:1d:1c:e6:af:b1:
         c0:d6:ca:8e:05:2b:95:c1:f1:93:dd:bf:30:82:b8:2d:54:f2:
         c3:c8:ed:a4:c1:a9:6d:52:fa:7c:29:c2:8b:c3:d9:bb:2f:1d:
         f3:53:74:8e:01:6f:57:15:07:aa:39:77:6a:80:61:90:f0:c0:
         ac:5b:28:67:ce:ee:84:37:93:58:ad:bb:c2:68:80:4c:e0:11:
         78:ab:df:39:ed:12:73:51:a3:56:4c:94:5c:c2:de:b0:04:8f:
         b5:86:70:40:11:8d:16:d4:31:a5:c7:77:31:0d:43:7f:bc:ee:
         d9:3a:99:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:33 2026 by rpki-client