Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137322e302f32342d3234203d3e203233363530.roa
File:                     3231392e38332e3137322e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          d8x5vr3+orwxBWwgq6nL/21hqmW+OlELLGJgSN5MG3U=
Subject key identifier:   C5:D4:32:80:2E:69:94:20:F0:CD:EB:77:39:6A:40:90:36:FD:65:DB
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       27204B5EC76A3D924E4A8CEB8254948DF1F262A6
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137322e302f32342d3234203d3e203233363530.roa
Signing time:             Fri 14 Aug 2026 08:07:50 +0000
ROA not before:           Fri 14 Aug 2026 08:02:50 +0000
ROA not after:            Fri 13 Aug 2027 08:07:50 +0000
asID:                     23650
IP address blocks:        219.83.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:20:4b:5e:c7:6a:3d:92:4e:4a:8c:eb:82:54:94:8d:f1:f2:62:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Aug 14 08:02:50 2026 GMT
            Not After : Aug 13 08:07:50 2027 GMT
        Subject: CN=C5D432802E699420F0CDEB77396A409036FD65DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:c0:6b:98:10:4b:68:1d:99:54:7b:b5:22:
                    19:88:40:20:10:a1:c2:53:ac:25:75:48:a7:3d:d9:
                    75:6a:57:94:bd:42:bd:fa:a7:d2:33:c4:e6:30:58:
                    ba:22:c8:5a:b6:54:b2:9f:e0:6e:5b:32:00:1f:1f:
                    8d:8c:27:00:2f:68:d9:72:e6:38:8c:e9:6e:6d:7e:
                    d7:9e:d7:7f:97:54:93:5c:6b:06:25:2d:91:51:06:
                    ee:df:21:e5:f9:4f:47:75:40:92:28:a7:54:38:dd:
                    59:8f:a5:2b:a1:82:67:fa:1f:79:87:c0:56:1e:74:
                    e0:e3:fe:00:89:e1:31:6d:e2:f8:fc:9e:65:db:12:
                    e9:59:d8:2a:0c:33:da:e1:53:15:b6:8b:93:0f:8d:
                    bf:a1:0d:92:e0:42:4c:68:fb:20:b8:61:ed:02:19:
                    2a:c2:b1:f3:2b:c9:a5:53:a6:8e:b1:87:34:6b:9c:
                    8b:01:1e:dd:0b:47:05:a3:c7:cd:e7:d9:2f:69:62:
                    12:a7:2d:45:a1:03:9f:13:b7:5a:a0:2d:b0:92:75:
                    a7:05:8e:bb:84:6f:72:54:52:9c:c6:a8:c0:60:ca:
                    4b:c4:5c:3a:a1:0c:1f:f4:fd:de:c0:65:26:69:aa:
                    0f:1a:84:94:90:8d:ce:c9:55:21:e2:8a:e9:40:9e:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D4:32:80:2E:69:94:20:F0:CD:EB:77:39:6A:40:90:36:FD:65:DB
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3137322e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a1:25:2f:f0:40:a0:37:4f:06:90:dd:cb:09:88:0e:cd:2f:
         b2:1d:28:00:20:79:fc:47:4c:87:24:61:21:9e:bc:bb:60:ae:
         21:10:46:20:1f:89:9a:78:56:6d:5f:f2:4a:0b:68:28:6a:10:
         c5:8f:16:cb:49:08:85:27:f4:6c:dc:78:5d:7c:e4:e9:74:54:
         3b:0d:b7:c3:63:9c:c2:97:55:99:df:a0:f3:b5:93:00:7c:45:
         b7:fe:75:df:cc:c5:b9:85:66:48:88:c4:8d:b8:5f:9f:be:48:
         db:5c:d3:26:e1:50:02:25:0f:57:4d:01:a4:64:34:5a:82:6f:
         28:e7:d2:84:40:24:f0:63:29:6d:88:90:19:b7:e5:63:01:b8:
         b2:5f:3c:e4:2d:bc:2d:78:3e:96:90:d3:66:67:37:86:cd:7c:
         b3:92:47:a2:1d:76:85:de:2d:5c:e2:47:08:90:5d:f2:2a:eb:
         7a:bc:eb:10:1d:22:e6:0e:af:d8:e7:c7:5c:9b:8f:e3:39:f3:
         79:91:6d:58:e3:2c:7b:a2:9b:c6:63:d9:13:70:8c:10:fa:af:
         e0:0e:4c:92:3d:f5:85:d4:de:38:e6:91:7c:ce:42:d1:7b:b7:
         cf:f2:2f:24:62:3e:7f:8b:37:29:27:90:72:95:bd:e3:ac:d4:
         36:84:d8:6c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJyBLXsdqPZJOSozrglSUjfHyYqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBF
NDJDQzJFQzAeFw0yNjA4MTQwODAyNTBaFw0yNzA4MTMwODA3NTBaMDMxMTAvBgNV
BAMTKEM1RDQzMjgwMkU2OTk0MjBGMENERUI3NzM5NkE0MDkwMzZGRDY1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3cBrmBBLaB2ZVHu1IhmIQCAQ
ocJTrCV1SKc92XVqV5S9Qr36p9IzxOYwWLoiyFq2VLKf4G5bMgAfH42MJwAvaNly
5jiM6W5tftee13+XVJNcawYlLZFRBu7fIeX5T0d1QJIop1Q43VmPpSuhgmf6H3mH
wFYedODj/gCJ4TFt4vj8nmXbEulZ2CoMM9rhUxW2i5MPjb+hDZLgQkxo+yC4Ye0C
GSrCsfMryaVTpo6xhzRrnIsBHt0LRwWjx83n2S9pYhKnLUWhA58Tt1qgLbCSdacF
jruEb3JUUpzGqMBgykvEXDqhDB/0/d7AZSZpqg8ahJSQjc7JVSHiiulAnr5RAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUxdQygC5plCDwzet3OWpAkDb9ZdswHwYDVR0j
BBgwFoAUcYtr0x1A42IcfVI/DpzFEOQswuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY0MTg0NDQyMTkxODc0MS8wLzcxOEI2QkQzMUQ0MEUzNjIxQzdENTIzRjBFOUND
NTEwRTQyQ0MyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBFNDJDQzJFQy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMjY0MTg0NDQyMTkxODc0MS8wLzMyMzEzOTJlMzgz
MzJlMzEzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANtTrDANBgkqhkiG9w0BAQsFAAOCAQEAqaElL/BAoDdPBpDdywmIDs0v
sh0oACB5/EdMhyRhIZ68u2CuIRBGIB+JmnhWbV/ySgtoKGoQxY8Wy0kIhSf0bNx4
XXzk6XRUOw23w2OcwpdVmd+g87WTAHxFt/5138zFuYVmSIjEjbhfn75I21zTJuFQ
AiUPV00BpGQ0WoJvKOfShEAk8GMpbYiQGbflYwG4sl885C28LXg+lpDTZmc3hs18
s5JHoh12hd4tXOJHCJBd8irrerzrEB0i5g6v2OfHXJuP4znzeZFtWOMse6KbxmPZ
E3CMEPqv4A5Mkj31hdTeOOaRfM5C0Xu3z/IvJGI+f4s3KSeQcpW946zUNoTYbA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:31 2026 by rpki-client