Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa
File:                     3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier:          sGrrcIk3afJ9E7DLvszkTbNTabO8r22Dvgg+QO5PoTY=
Subject key identifier:   0E:85:0C:F9:40:23:4D:53:91:BF:D2:09:BD:D4:9A:CA:2A:EF:0E:38
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       2FFEE389EE887755B728318D487D4BFF6ED33879
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa
Signing time:             Fri 05 Jun 2026 02:40:31 +0000
ROA not before:           Fri 05 Jun 2026 02:35:31 +0000
ROA not after:            Fri 04 Jun 2027 02:40:31 +0000
asID:                     140293
IP address blocks:        219.83.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fe:e3:89:ee:88:77:55:b7:28:31:8d:48:7d:4b:ff:6e:d3:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jun  5 02:35:31 2026 GMT
            Not After : Jun  4 02:40:31 2027 GMT
        Subject: CN=0E850CF940234D5391BFD209BDD49ACA2AEF0E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:1e:4f:69:06:9f:5d:78:9c:0c:6e:05:f8:
                    95:82:66:3d:53:20:2b:bd:d6:86:27:11:45:68:4d:
                    62:56:ce:71:5f:3d:b1:1c:3b:08:4a:1f:70:57:2c:
                    fd:0b:66:64:52:22:d2:29:a5:70:27:74:6a:41:03:
                    12:35:8f:26:cb:04:f9:b8:39:9e:04:4a:c5:55:8c:
                    d3:3d:26:e7:82:1b:08:c6:28:6a:17:8e:16:7f:ea:
                    50:9d:9e:85:f7:a9:ba:1e:b4:ae:9b:d3:11:d0:ed:
                    1d:e1:1d:d9:fd:1b:de:fa:25:8f:df:b1:27:31:7c:
                    3b:27:7e:4e:af:5d:ff:69:84:b7:04:22:56:0b:2f:
                    11:83:78:1f:bc:aa:d3:d4:b0:a2:12:95:85:6a:7d:
                    44:e6:44:4c:f4:ed:ea:8f:95:6f:4b:3a:c5:2a:8e:
                    a6:c4:3b:97:bc:c5:b0:7d:53:50:62:c1:4d:51:7e:
                    c4:3f:5b:7f:5c:1d:b9:29:c0:dc:ee:e9:05:8d:84:
                    95:bf:5b:f0:1e:a8:95:bb:df:b0:a4:3c:20:a2:21:
                    1e:71:84:e9:5e:b6:55:2c:8b:ab:f6:6f:50:f6:30:
                    95:2c:09:46:6e:ed:52:31:ad:17:cc:0a:69:1c:31:
                    95:9a:95:4d:b3:31:4d:f3:64:b6:ef:ec:08:ec:7f:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:85:0C:F9:40:23:4D:53:91:BF:D2:09:BD:D4:9A:CA:2A:EF:0E:38
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139302e302f32342d3234203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:91:70:42:25:59:38:9e:ec:ae:eb:9f:70:41:1a:45:32:75:
         48:e8:ad:36:58:c7:e6:84:6c:e0:93:13:83:95:3e:f6:fc:73:
         a0:60:b1:e5:60:aa:56:cc:20:a6:c0:3b:f1:78:fe:a6:f7:03:
         d7:6a:26:94:3d:a4:c9:bf:3e:85:80:33:b6:c2:f9:c2:54:c6:
         ae:ac:c2:e2:07:e4:66:e4:78:6f:e7:96:4a:02:7c:16:ff:7d:
         41:8b:33:0f:fc:e2:29:c8:9a:61:54:0d:7d:06:6d:07:e3:e5:
         8a:82:f1:ad:91:1b:0d:6c:4a:7c:70:10:23:f7:fd:52:a8:e6:
         21:7f:68:30:8c:36:3a:6a:25:8f:59:5b:b1:74:c3:4b:55:02:
         c8:f8:4d:a2:55:e3:98:15:2f:01:65:82:41:80:34:63:b8:f6:
         60:8e:12:ec:f1:fb:7d:cc:46:c8:4a:02:48:63:aa:94:5e:3a:
         1c:fc:67:65:7a:e5:e2:85:3c:c4:23:b5:d7:25:1c:77:76:0f:
         87:70:a0:76:a8:6c:2e:df:78:35:14:99:ff:bf:f3:57:b0:79:
         ba:8c:06:27:07:65:04:a8:29:e2:04:e9:07:5d:f1:0b:ac:c1:
         f8:8b:a4:9e:f3:10:22:83:ae:a5:c1:a6:2a:d5:df:8c:59:24:
         55:2b:b1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:00 2026 by rpki-client