Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa
File:                     3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa (raw, json)
Hash identifier:          1YX+Iyv65ITm5/5IT22wrDzCHtuFcomRyNDxfKqdzx4=
Subject key identifier:   EF:40:C6:11:A7:FA:9E:A4:0B:83:DB:1E:B4:3B:72:A1:66:B0:96:0C
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       E4729E0F126924E87DC8913923BE7C3DB95382
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa
Signing time:             Fri 05 Jun 2026 02:40:31 +0000
ROA not before:           Fri 05 Jun 2026 02:35:31 +0000
ROA not after:            Fri 04 Jun 2027 02:40:31 +0000
asID:                     140293
IP address blocks:        219.83.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e4:72:9e:0f:12:69:24:e8:7d:c8:91:39:23:be:7c:3d:b9:53:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Jun  5 02:35:31 2026 GMT
            Not After : Jun  4 02:40:31 2027 GMT
        Subject: CN=EF40C611A7FA9EA40B83DB1EB43B72A166B0960C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:57:c5:0a:ce:11:3a:43:c0:15:1e:c7:6c:
                    8c:e0:27:4e:5f:2e:c1:9a:84:55:0a:3f:d0:fd:10:
                    cb:8e:04:fc:2a:ea:a9:71:44:df:07:46:1d:c8:b2:
                    cf:4f:2c:75:6d:49:49:c7:c7:c1:9f:a5:ff:5c:bf:
                    90:68:ee:07:34:22:c5:f0:28:35:ea:de:2d:ee:bb:
                    24:99:fb:59:49:eb:aa:47:60:fe:88:55:4b:b1:9f:
                    d8:3d:13:af:6c:15:25:a4:40:48:1c:80:2c:09:10:
                    37:8b:13:07:92:a4:2b:88:45:d7:f8:a9:06:21:e3:
                    98:72:ec:bb:30:30:06:54:7b:5a:96:2e:a8:af:0e:
                    54:89:00:0d:c9:eb:e4:29:6a:e7:86:b1:fa:4c:3e:
                    1f:74:23:54:a7:38:68:46:10:eb:3c:09:36:d9:8b:
                    6a:55:aa:fb:42:d9:41:10:a6:a9:20:ec:d8:ff:0d:
                    ee:76:cb:ae:d2:95:a4:ef:9c:2f:0e:d6:b9:f0:2a:
                    2c:c7:36:b9:0d:3d:74:dc:5a:bc:e1:80:5b:fc:33:
                    b9:8c:98:dd:be:77:85:b4:a7:2f:2b:a8:4a:ac:78:
                    4e:a3:b2:d9:c4:43:9e:e8:aa:c9:83:70:97:63:bd:
                    1a:29:10:06:4b:90:52:be:dd:8a:3d:27:02:27:b6:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:C6:11:A7:FA:9E:A4:0B:83:DB:1E:B4:3B:72:A1:66:B0:96:0C
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139312e302f32342d3234203d3e20313430323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:72:a1:d0:0b:b8:c1:fa:00:63:2c:93:c1:95:4b:a0:ae:2a:
         2d:92:74:9c:31:e8:8f:3c:b8:41:9b:ca:49:e6:fe:f1:0f:cb:
         0e:b0:64:54:9c:ca:9a:0e:17:62:01:3f:9c:aa:98:dc:5c:c4:
         c2:f5:a6:c4:0c:58:df:88:62:49:53:30:1e:9a:bd:c2:01:fe:
         9f:1a:bb:08:86:53:3f:a8:d7:a0:b5:e0:67:00:a0:b5:63:af:
         3f:9e:6c:34:e8:20:2c:e9:10:dd:a7:d7:46:dc:c7:9c:19:81:
         e8:f5:12:c2:df:06:ff:af:25:9e:d6:32:f0:37:27:d3:4c:dd:
         b0:3c:42:54:60:0a:0f:c2:ce:8b:0d:a6:03:48:8d:92:7e:bd:
         32:2e:ac:40:03:de:bf:03:83:8c:22:0d:0b:7d:94:55:93:76:
         b7:fe:cf:ed:62:6b:0e:d4:98:d7:34:ee:ae:1a:11:29:f5:2f:
         02:a9:89:62:92:81:34:d8:ee:88:f1:31:40:52:e9:a1:26:4f:
         79:45:b7:1f:29:5b:4a:d7:db:51:75:ee:a1:57:1d:ca:d3:b7:
         55:c4:39:b7:1e:16:6a:03:f9:e4:c3:f3:71:3e:d9:67:0e:ed:
         ac:8f:be:33:e6:72:e6:63:1b:46:fc:0d:59:db:98:23:83:8b:
         e9:35:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:00 2026 by rpki-client