Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3131392e38382e3132382e302f31382d3138203d3e2034383337.roa
File:                     3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (raw, json)
Hash identifier:          s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=
Subject key identifier:   E4:AA:C5:4A:98:E6:5A:09:4B:8D:EA:E5:A2:E9:D9:45:1F:9B:D1:CE
Certificate issuer:       /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
Certificate serial:       42F48905415CB27D7F1CEC896EDB4ADFEF494B07
Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3131392e38382e3132382e302f31382d3138203d3e2034383337.roa
Signing time:             Sun 31 May 2026 23:27:56 +0000
ROA not before:           Sun 31 May 2026 23:22:56 +0000
ROA not after:            Sun 30 May 2027 23:27:56 +0000
asID:                     4837
IP address blocks:        119.88.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f4:89:05:41:5c:b2:7d:7f:1c:ec:89:6e:db:4a:df:ef:49:4b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
        Validity
            Not Before: May 31 23:22:56 2026 GMT
            Not After : May 30 23:27:56 2027 GMT
        Subject: CN=E4AAC54A98E65A094B8DEAE5A2E9D9451F9BD1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:77:c3:0d:cf:61:d9:d7:dd:ca:77:8e:95:
                    d6:a3:0d:50:ae:e2:43:ea:d1:c5:31:48:47:35:b4:
                    2e:49:77:36:cb:18:29:88:7c:9d:9f:43:bb:73:b6:
                    a9:e0:49:66:6b:6e:26:39:4c:47:0b:b7:da:7e:66:
                    f7:aa:c2:54:98:d8:dc:7b:b5:4c:fd:7e:96:ed:ee:
                    1a:50:3e:01:fd:bf:48:da:ab:53:2e:ca:03:e2:1a:
                    c5:52:74:79:e6:ad:79:52:66:5b:41:ce:3e:d9:5f:
                    e8:95:70:30:af:96:e7:95:52:47:6e:c8:14:20:9c:
                    c3:84:5c:7e:94:6a:c7:fa:f4:d2:7e:85:f6:1e:af:
                    75:b9:b2:e1:e8:81:0f:6a:5f:2f:0b:89:8b:29:7b:
                    dc:02:7d:23:c6:c4:88:88:78:05:59:b4:ce:b1:8e:
                    18:40:0c:ad:bb:27:9f:26:f1:63:bd:80:52:cb:15:
                    d8:c9:2c:e0:54:3b:77:a0:56:01:d9:f4:07:04:8f:
                    43:23:ac:af:bf:a4:28:62:4b:ba:b4:55:49:93:f8:
                    54:93:a0:58:3c:fb:31:4e:13:7f:5c:46:34:42:dd:
                    f1:f9:a5:6c:1d:ce:4c:2a:63:df:db:fd:25:5d:c5:
                    b2:8a:db:06:b5:54:18:fb:1f:8c:45:fa:74:e8:7e:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AA:C5:4A:98:E6:5A:09:4B:8D:EA:E5:A2:E9:D9:45:1F:9B:D1:CE
            X509v3 Authority Key Identifier:
                keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3131392e38382e3132382e302f31382d3138203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.88.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:5e:d8:a3:e7:29:6f:cb:36:0d:2a:14:3a:8b:67:c7:6d:60:
         68:2f:a4:53:59:2e:a4:41:72:1c:91:a4:91:83:e9:3a:fd:bb:
         c6:de:ad:c6:fd:ae:59:8d:d9:dd:66:35:94:5e:b1:c2:d7:e0:
         4c:ea:3c:3e:b9:f5:1e:d5:cf:95:22:9d:8c:a6:3d:5e:1b:e9:
         1e:38:31:73:07:65:6f:34:58:85:dd:f2:38:b9:ec:e4:03:5a:
         27:35:80:d0:6a:47:68:7c:f3:fd:ec:33:50:59:ae:29:06:04:
         37:ec:0a:a6:a1:0d:96:7e:f5:47:2a:06:01:fd:a4:86:62:b0:
         3d:c9:bc:cc:f2:b6:51:31:3c:41:35:10:89:b9:7e:c9:94:80:
         98:01:92:39:e2:9d:a5:fc:fa:e0:ce:22:63:0e:6a:db:38:f7:
         81:42:a8:9b:33:d6:2d:40:d8:c6:9e:8b:b0:32:79:11:37:cc:
         9e:8c:69:b1:80:0f:cd:39:4e:64:23:4a:29:81:65:98:bd:cd:
         ed:30:f4:8a:e6:98:b1:d9:6a:c1:2e:6c:97:da:54:60:79:63:
         03:b0:b5:dd:49:83:90:e0:41:42:ee:87:92:dd:7f:81:ac:13:
         31:4c:c7:ce:d4:1e:77:c9:e7:ee:b7:25:6b:e1:62:db:65:7d:
         d7:c0:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client