Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa
File:                     3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier:          K+/yFwMvpUQXTRJBHOyhdN+YxG9U4N0OdNDEOURyx8U=
Subject key identifier:   B5:AD:41:25:5D:01:8A:5B:1F:EC:05:ED:FE:48:69:38:BD:98:24:6E
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       22A464776A8D7FFB1204555CF2319240C50174D7
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa
Signing time:             Fri 05 Jun 2026 02:40:31 +0000
ROA not before:           Fri 05 Jun 2026 02:35:31 +0000
ROA not after:            Fri 04 Jun 2027 02:40:31 +0000
asID:                     140293
IP address blocks:        219.83.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a4:64:77:6a:8d:7f:fb:12:04:55:5c:f2:31:92:40:c5:01:74:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jun  5 02:35:31 2026 GMT
            Not After : Jun  4 02:40:31 2027 GMT
        Subject: CN=B5AD41255D018A5B1FEC05EDFE486938BD98246E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:ec:67:f9:a4:35:f8:a1:c8:a7:b7:14:75:
                    04:3e:81:94:98:a8:24:96:40:36:a5:df:d1:cd:4e:
                    77:74:7b:a3:a1:75:cb:32:54:17:08:5e:23:46:93:
                    c8:f4:9c:49:c1:b6:2e:ef:6a:fe:c1:9d:c0:3c:03:
                    64:56:b1:5c:41:70:e0:7a:69:33:06:72:8f:7c:6b:
                    e1:1f:9a:99:c0:e9:86:2c:ea:31:f5:bd:b7:a8:af:
                    d5:38:ae:2c:90:bc:8d:11:4a:56:2d:97:f0:37:5f:
                    c9:19:66:90:60:3d:e7:5a:2d:ab:e3:25:dd:2c:51:
                    20:23:3a:b7:dc:53:aa:6d:1d:70:e3:9b:61:ae:19:
                    03:3a:23:e1:35:a9:b0:7c:96:f4:b6:1c:43:0b:73:
                    86:0a:36:09:96:db:81:27:11:d7:3b:2e:3f:e5:92:
                    d9:96:17:c5:00:8f:2a:e1:09:6f:2a:0a:17:e8:b6:
                    43:ca:f2:3b:fc:05:92:1e:38:a5:3e:c4:93:50:26:
                    2f:12:42:5f:f0:df:76:ec:cd:bc:7f:62:88:cc:44:
                    80:b8:db:10:f9:ed:c1:f9:d4:f4:ad:fb:75:db:53:
                    c7:a0:70:b5:8c:f2:78:76:74:44:23:e8:c1:2b:7b:
                    16:40:11:a9:85:ce:f0:0d:f1:60:9d:49:44:fd:bf:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AD:41:25:5D:01:8A:5B:1F:EC:05:ED:FE:48:69:38:BD:98:24:6E
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137302e302f32342d3234203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:f0:89:4a:20:f0:77:aa:aa:6f:81:c1:b1:92:72:a9:ab:70:
         cb:98:6f:6d:43:6f:cf:39:ef:8a:57:51:9b:e5:5a:67:d2:14:
         b9:4b:34:37:76:98:20:35:c6:aa:0e:12:81:1f:6c:ce:6b:6e:
         7d:5a:40:4d:93:47:95:1a:e3:a2:99:41:20:d1:ba:7d:d4:3f:
         76:eb:22:b2:f9:52:95:01:73:2f:b0:f4:63:52:06:61:05:2c:
         d0:49:9d:14:3d:d9:ce:d9:10:76:b3:37:70:36:46:09:b1:cb:
         38:56:43:0e:a1:8f:a5:af:91:54:5c:d9:64:53:ca:4f:77:7a:
         0d:30:a9:8c:c7:0a:9c:a9:1d:9f:80:02:4c:51:0a:aa:d1:8e:
         b6:46:63:92:b6:01:92:e5:c2:1a:21:ad:7b:9d:79:a3:56:5e:
         9b:09:91:29:c4:35:09:03:25:bd:16:69:59:85:cf:cc:0b:91:
         bc:a7:33:a6:aa:a6:1f:25:4e:2a:67:41:fb:9a:dc:3c:32:de:
         7d:31:af:7a:af:88:fe:9f:88:07:ca:40:ce:2e:31:03:ed:bf:
         74:9b:8c:9f:48:ad:f4:79:9a:0e:ea:1d:8f:ea:fb:3a:21:e2:
         f5:7d:e0:59:29:08:90:80:1c:16:d4:64:55:a5:6e:67:47:4d:
         a7:3a:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:00 2026 by rpki-client