Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137312e302f32342d3234203d3e203233363530.roa
File:                     3231392e38332e3137312e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          8u4lP2VFXs147x2QCMaGTl7bYIxEqCKz6arROb3jQl8=
Subject key identifier:   EF:3A:1F:80:26:9D:DB:4C:03:1E:9B:4D:D9:CE:E9:6A:6D:4D:48:A8
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       60F4E0F02DAB2094AB336FDEFDE32FF4792C5971
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137312e302f32342d3234203d3e203233363530.roa
Signing time:             Fri 14 Aug 2026 08:07:49 +0000
ROA not before:           Fri 14 Aug 2026 08:02:49 +0000
ROA not after:            Fri 13 Aug 2027 08:07:49 +0000
asID:                     23650
IP address blocks:        219.83.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f4:e0:f0:2d:ab:20:94:ab:33:6f:de:fd:e3:2f:f4:79:2c:59:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Aug 14 08:02:49 2026 GMT
            Not After : Aug 13 08:07:49 2027 GMT
        Subject: CN=EF3A1F80269DDB4C031E9B4DD9CEE96A6D4D48A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:c0:bd:c2:ef:1d:e7:4b:bd:0d:8e:15:7b:
                    79:23:d8:1a:e0:c3:1b:d2:8c:ef:33:bf:21:f4:b2:
                    40:8f:2f:f8:f3:37:c5:54:1d:2c:89:2c:52:c1:cb:
                    5e:28:11:bb:60:0b:79:cf:7d:60:16:5a:f3:c2:28:
                    12:6e:78:60:e5:dc:4c:08:a0:aa:bd:c7:86:8d:fe:
                    72:a4:af:b8:f6:da:a2:fe:ed:d9:68:cb:73:c7:69:
                    aa:d6:35:24:dc:1a:a2:9c:9f:5a:12:b4:0c:6d:ec:
                    40:c4:6d:c3:78:03:7a:0e:8e:db:6a:a4:22:06:09:
                    43:3d:13:06:b1:98:52:0b:85:55:b9:1e:83:b1:d6:
                    9c:62:9e:26:05:ee:10:b8:4b:17:b3:68:0f:25:a1:
                    6f:6e:8e:5f:fa:7e:b6:83:c0:22:b7:5f:87:c4:83:
                    ea:81:9b:50:b8:36:ad:73:23:f7:4a:70:d8:d5:4a:
                    66:2a:0e:23:c2:39:ee:16:b7:73:20:05:e9:71:55:
                    4f:84:6c:ac:57:71:bb:0b:bd:20:76:72:cf:81:01:
                    74:74:30:18:b9:3a:dc:32:6a:6f:f0:2f:d9:f0:b1:
                    94:c2:5e:d8:4e:8c:56:00:65:88:49:8b:0a:50:7d:
                    0c:ac:d7:af:3a:0c:6e:b4:65:f9:ef:8d:00:88:e4:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3A:1F:80:26:9D:DB:4C:03:1E:9B:4D:D9:CE:E9:6A:6D:4D:48:A8
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137312e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f9:44:c9:0f:9c:53:1b:ce:0d:2a:49:73:93:76:da:39:f7:
         fe:04:d9:8f:3f:fc:0f:a5:2f:1e:62:a6:d0:f7:1e:68:9f:56:
         55:3a:7c:2c:ac:72:74:0d:7a:be:35:f0:0a:38:6f:df:85:51:
         b1:7d:ad:d4:03:c0:04:ea:3f:e1:88:36:ba:00:1d:1a:1f:7a:
         05:69:3c:cc:56:da:f3:ce:16:17:27:7d:13:d8:ce:35:41:8e:
         ad:f4:a2:82:d6:de:3a:15:8c:86:be:4c:f4:5a:92:90:63:3a:
         ef:e2:fa:4f:16:7a:82:fb:75:18:e7:26:c0:56:e9:89:a9:29:
         38:da:47:bf:17:76:11:b7:43:c5:56:f9:55:a4:93:d5:2a:7b:
         25:f1:7a:dc:93:a6:6c:a3:1d:a4:1f:99:e8:c7:01:16:1a:e1:
         9e:e6:aa:63:b0:0f:24:85:b3:b4:39:3f:b0:0b:2c:62:9f:0b:
         bb:65:36:c0:f5:ca:60:f9:6f:ef:00:1c:08:b0:0e:9c:58:5b:
         26:bb:29:d0:a9:df:4b:76:90:80:6a:fa:64:a1:7d:9a:58:09:
         10:73:d1:53:3d:04:e9:09:ee:36:8e:71:84:05:24:8f:37:c8:
         3b:ce:d8:31:84:05:96:38:76:ef:67:3c:f2:dc:7d:23:77:35:
         8e:72:8d:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:27 2026 by rpki-client