Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139312e302f32342d3234203d3e203233363530.roa
File:                     3231392e38332e3139312e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          8NuZXi0EHIN+qnZaEpg9A31HfLk6hLVl7bfya1vCfAs=
Subject key identifier:   6A:F9:C1:37:87:F5:60:5C:5C:07:02:59:87:92:C2:0D:A2:1B:2E:27
Certificate issuer:       /CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
Certificate serial:       07B41CA50E1992078C0A0E97181784A37B015B6D
Authority key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139312e302f32342d3234203d3e203233363530.roa
Signing time:             Fri 14 Aug 2026 08:07:50 +0000
ROA not before:           Fri 14 Aug 2026 08:02:50 +0000
ROA not after:            Fri 13 Aug 2027 08:07:50 +0000
asID:                     23650
IP address blocks:        219.83.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 13:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b4:1c:a5:0e:19:92:07:8c:0a:0e:97:18:17:84:a3:7b:01:5b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC
        Validity
            Not Before: Aug 14 08:02:50 2026 GMT
            Not After : Aug 13 08:07:50 2027 GMT
        Subject: CN=6AF9C13787F5605C5C0702598792C20DA21B2E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:09:55:b7:6d:ed:8e:85:62:50:9d:8e:cb:
                    4e:05:b7:3e:6c:af:fe:ed:8e:79:5e:ba:40:1f:9e:
                    9d:61:15:7b:7e:e0:b7:12:03:74:d9:e1:17:ca:2e:
                    f8:3a:ea:c9:d2:3d:9b:60:23:6e:b2:c8:3e:10:c1:
                    e2:1a:69:19:df:02:e2:ce:64:07:5b:8e:fb:8d:e5:
                    85:80:ad:93:a1:e4:d3:0d:b0:41:32:61:3d:a8:4d:
                    af:94:e0:b3:e9:e4:91:fa:89:6b:45:b7:26:c7:cd:
                    fa:e8:c5:67:78:46:c9:98:79:75:1a:69:87:ee:80:
                    f8:a7:6a:29:15:45:bc:b9:1a:06:f3:69:38:ba:a7:
                    eb:96:c5:3b:b9:f2:4c:b5:3d:4b:cf:75:51:59:03:
                    fa:0b:7f:51:ca:3a:c0:6b:5c:44:b9:b6:eb:cd:c2:
                    d2:88:c0:fc:10:23:e0:f9:92:8e:d8:97:32:bf:42:
                    de:62:fa:78:20:a7:43:bc:8e:81:d0:a0:a0:f8:96:
                    3e:f2:3f:53:f9:31:80:d0:3f:6c:5f:22:4c:c0:75:
                    1c:3f:9f:bb:64:3d:28:a0:81:a7:db:58:b3:af:c7:
                    ef:a3:7c:e6:7d:c5:47:dd:a5:37:e9:12:f9:d0:59:
                    a7:3d:12:0b:ee:82:f2:eb:2f:d9:6b:09:23:46:6e:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:C1:37:87:F5:60:5C:5C:07:02:59:87:92:C2:0D:A2:1B:2E:27
            X509v3 Authority Key Identifier:
                keyid:71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/3231392e38332e3139312e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.83.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:f3:b8:b4:87:54:93:57:98:3e:c1:00:ad:dd:9f:65:ae:
         7e:ef:02:c1:81:67:23:20:d0:fa:0e:d3:aa:48:bf:38:97:4c:
         28:d5:3b:b2:ea:56:f3:34:b3:c1:88:d0:c1:e1:bb:8d:b0:38:
         22:6c:55:8c:1e:b0:1a:07:03:9c:af:8c:08:e0:14:51:72:8c:
         a3:8e:da:21:4d:9f:2f:81:b2:4d:4c:6c:bd:b8:ba:d2:e8:53:
         0e:20:d3:ca:1c:3f:e4:02:d6:eb:20:8f:5f:82:55:68:36:2c:
         14:98:29:d8:95:7c:b0:53:fd:15:b6:75:8e:4e:e0:5b:8f:3d:
         9d:75:14:17:f8:8d:b7:c7:6c:22:25:15:f8:37:6c:f4:e0:ed:
         07:d3:de:50:5b:8f:08:a3:8a:d5:16:a2:65:b8:49:5a:e5:62:
         ef:dc:ee:17:a7:7a:01:6f:e1:47:f3:4b:5b:33:c1:d6:94:6f:
         23:c2:e3:d8:33:78:2b:5f:bb:95:77:df:1c:fa:c0:0d:6e:5b:
         2b:37:59:ed:0c:38:cc:df:2b:8e:04:cd:3d:f5:44:10:a9:d3:
         83:90:11:f2:f4:76:4a:eb:eb:f3:fb:61:4f:9a:48:6b:55:68:
         3f:18:66:0c:5a:66:d8:e6:31:1d:89:4f:9f:7f:e8:da:d3:fd:
         15:31:9d:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:29 2026 by rpki-client