Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa
File:                     3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier:          distAruWwJV8Z6b4BmZuBNQpPxsHf8vOHF4Agw+jkIQ=
Subject key identifier:   AE:63:66:A1:64:35:8F:57:0A:03:83:42:B3:51:AE:48:84:7F:A6:ED
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       446C1F31E7C0E835C1571FEBF61F58A7FB958D83
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa
Signing time:             Fri 05 Jun 2026 02:40:31 +0000
ROA not before:           Fri 05 Jun 2026 02:35:31 +0000
ROA not after:            Fri 04 Jun 2027 02:40:31 +0000
asID:                     140293
IP address blocks:        219.83.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6c:1f:31:e7:c0:e8:35:c1:57:1f:eb:f6:1f:58:a7:fb:95:8d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jun  5 02:35:31 2026 GMT
            Not After : Jun  4 02:40:31 2027 GMT
        Subject: CN=AE6366A164358F570A038342B351AE48847FA6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:ee:de:76:79:91:85:7c:e0:fc:b9:7b:49:
                    91:79:d5:1e:62:0f:4b:68:08:6f:3a:d8:34:cd:2e:
                    c5:d6:bc:3c:ac:74:d4:5d:ce:20:5c:3a:c8:fa:a8:
                    1f:43:17:98:34:e9:b4:a5:cc:c7:04:ed:3c:fc:a4:
                    31:3c:dd:22:2b:7f:bd:b1:e6:3d:a3:b9:76:23:f3:
                    51:ee:92:4c:06:7a:38:0b:96:2b:f4:2e:9f:64:81:
                    ae:a9:c8:28:a8:3e:3f:89:d9:2a:98:67:ae:a7:82:
                    ac:12:9f:a3:89:3e:ae:71:8a:f9:28:d4:8e:20:a6:
                    c1:fd:39:f7:8d:ae:b0:43:17:c4:b2:c0:7b:0d:82:
                    0f:10:52:23:22:3f:a5:c1:27:d3:f5:9a:4b:f6:65:
                    17:7b:21:20:e8:8b:ec:41:e9:ed:ae:f9:f7:0c:0a:
                    35:a8:fe:e6:56:13:9c:49:83:f6:89:ae:f7:c0:1f:
                    c3:1d:1c:00:e4:2a:d1:0a:34:e1:cd:07:4c:26:2e:
                    18:00:6a:34:5c:ce:dd:b6:f9:b6:be:fb:65:d3:d8:
                    ac:62:bf:7c:45:82:1f:3f:81:52:8a:92:3e:9e:a7:
                    18:c4:7a:d6:63:c9:70:0e:a7:5e:3b:23:cb:bd:1b:
                    ca:4e:fb:ed:13:b8:66:94:68:ec:eb:7d:92:95:18:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:63:66:A1:64:35:8F:57:0A:03:83:42:B3:51:AE:48:84:7F:A6:ED
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137312e302f32342d3234203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:0c:6f:7f:d8:77:ea:f7:48:40:ba:b7:27:87:59:34:ca:02:
         b0:44:05:bd:97:f9:49:1c:1a:b7:f7:ae:ad:cb:07:01:e2:4c:
         8c:ee:ba:7d:21:34:75:06:c8:b4:f5:74:2a:29:a8:4a:83:6c:
         e5:09:30:f2:a6:6e:c7:cf:2f:0a:dc:dd:a5:db:63:c0:35:45:
         f8:f4:28:9c:a2:79:5b:f9:85:9d:56:79:ec:6d:11:6a:7d:25:
         5b:4f:68:e5:ba:20:5b:da:47:39:f7:89:52:82:df:84:20:2f:
         c1:b6:31:98:15:5a:67:cd:c2:b2:91:db:3b:5b:17:a5:aa:e7:
         47:66:57:4b:00:e5:92:6e:ca:43:02:4a:f3:08:4c:a2:ff:fa:
         81:34:4d:3c:b4:4d:9a:bf:fe:e3:04:85:df:1f:6b:8b:c5:28:
         76:fa:e5:f2:c4:08:9c:11:90:4b:43:59:1b:09:2a:05:01:24:
         d6:ef:f7:99:d2:8d:81:a1:50:dd:fa:32:bb:4c:32:35:a4:4a:
         14:2f:78:99:be:cf:4f:0a:8f:71:95:c1:ce:3c:ec:28:99:9e:
         51:93:3d:f6:28:ab:e1:69:03:09:77:32:35:19:66:87:ef:38:
         43:5e:54:2b:d1:3c:68:e5:3b:06:83:09:fb:23:1b:dc:c0:19:
         e0:f9:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:01 2026 by rpki-client