Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3131392e38382e3139322e302f31382d3138203d3e2034383337.roa
File:                     3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (raw, json)
Hash identifier:          c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=
Subject key identifier:   CB:13:4B:12:10:D2:13:A5:CD:71:68:BD:74:D4:DB:D5:45:1B:EF:D6
Certificate issuer:       /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
Certificate serial:       702C4D7DD22CFE46644DE4DDEA29F94EA23A3151
Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3131392e38382e3139322e302f31382d3138203d3e2034383337.roa
Signing time:             Sun 31 May 2026 23:27:29 +0000
ROA not before:           Sun 31 May 2026 23:22:29 +0000
ROA not after:            Sun 30 May 2027 23:27:29 +0000
asID:                     4837
IP address blocks:        119.88.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2c:4d:7d:d2:2c:fe:46:64:4d:e4:dd:ea:29:f9:4e:a2:3a:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6
        Validity
            Not Before: May 31 23:22:29 2026 GMT
            Not After : May 30 23:27:29 2027 GMT
        Subject: CN=CB134B1210D213A5CD7168BD74D4DBD5451BEFD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:71:38:ea:4b:4e:04:2c:1c:8d:7a:59:06:
                    19:73:c8:45:ab:39:d9:e3:8a:ad:0f:c9:72:c8:70:
                    9e:28:85:80:3c:fb:5d:35:b4:ff:84:d8:1b:22:ef:
                    b1:16:02:f6:63:0f:ca:62:d4:f7:98:0f:94:ff:c7:
                    bc:5b:47:b6:aa:23:47:0e:27:28:69:41:58:d4:99:
                    b9:cc:cb:ea:e4:de:ba:6b:e1:56:b4:c0:4c:cc:72:
                    91:42:85:01:cb:d1:c0:0a:02:a2:b7:bb:0b:05:2f:
                    39:3b:e0:64:35:ee:da:22:49:56:af:f5:af:fd:72:
                    72:47:2e:99:a8:81:29:60:4e:76:2e:2a:47:56:65:
                    a1:97:4d:50:f6:df:42:bb:40:b1:18:c9:68:cc:b8:
                    4c:1e:b0:19:7a:cc:0d:41:67:54:6e:f6:3d:67:99:
                    fb:64:63:99:a0:bc:fb:e2:fc:64:b5:b8:e7:15:32:
                    e6:16:dd:0b:45:8f:1d:04:02:45:ad:72:21:17:49:
                    9f:41:f4:ff:da:33:23:c2:17:e4:9e:1d:ce:55:9c:
                    e6:63:dc:70:07:7b:0f:85:64:f1:62:70:2b:63:93:
                    85:05:e2:49:ad:17:7c:45:79:67:1a:2f:07:67:62:
                    da:f8:0e:95:72:6d:d7:67:4a:7b:e4:3f:d5:f6:03:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:4B:12:10:D2:13:A5:CD:71:68:BD:74:D4:DB:D5:45:1B:EF:D6
            X509v3 Authority Key Identifier:
                keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/3131392e38382e3139322e302f31382d3138203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.88.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:64:97:d2:de:f6:8e:ac:13:e4:73:46:a3:58:4a:dd:83:19:
         3d:99:75:99:1b:0c:61:9b:fa:29:cb:31:62:8b:1e:8e:a8:68:
         e2:d8:48:21:d6:6d:78:fe:8a:73:11:fa:76:d3:58:ff:61:98:
         1f:e9:97:7c:64:0b:1e:65:0b:1a:e0:60:11:ac:e7:28:10:a8:
         6a:e9:57:92:1e:1f:c8:da:bd:e3:44:4f:66:cd:8b:8b:f6:2d:
         50:27:78:3e:c1:69:d6:d9:88:d3:0c:8d:81:75:1f:b5:53:7d:
         38:8d:1f:d5:fb:aa:55:6c:00:91:ea:be:f9:4f:63:03:e1:83:
         e7:be:1b:68:ab:e4:39:39:a0:c0:d1:08:e9:d8:7f:c7:04:a3:
         80:d8:12:90:a4:8b:c1:85:94:e1:bf:2b:7d:4a:9b:8f:6a:a0:
         0d:07:4f:83:a0:42:fe:46:ad:3e:e0:75:03:10:42:ef:37:e3:
         67:e8:52:d6:78:f1:ac:6a:59:13:52:d1:68:05:2c:8d:0f:75:
         57:f2:2a:41:60:d9:1e:ff:7a:af:53:90:a6:3a:19:83:40:1b:
         75:a0:0e:30:6b:fa:f6:25:9d:b8:a3:87:60:10:94:69:c6:26:
         21:7c:3e:91:47:83:5d:e1:07:8a:19:88:99:8f:e9:9c:60:3a:
         2b:19:59:fd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUcCxNfdIs/kZkTeTd6in5TqI6MVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC
NDFBRTNCNjAeFw0yNjA1MzEyMzIyMjlaFw0yNzA1MzAyMzI3MjlaMDMxMTAvBgNV
BAMTKENCMTM0QjEyMTBEMjEzQTVDRDcxNjhCRDc0RDREQkQ1NDUxQkVGRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxnE46ktOBCwcjXpZBhlzyEWr
Odnjiq0PyXLIcJ4ohYA8+101tP+E2Bsi77EWAvZjD8pi1PeYD5T/x7xbR7aqI0cO
JyhpQVjUmbnMy+rk3rpr4Va0wEzMcpFChQHL0cAKAqK3uwsFLzk74GQ17toiSVav
9a/9cnJHLpmogSlgTnYuKkdWZaGXTVD230K7QLEYyWjMuEwesBl6zA1BZ1Ru9j1n
mftkY5mgvPvi/GS1uOcVMuYW3QtFjx0EAkWtciEXSZ9B9P/aMyPCF+SeHc5VnOZj
3HAHew+FZPFicCtjk4UF4kmtF3xFeWcaLwdnYtr4DpVybddnSnvkP9X2AxflAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUyxNLEhDSE6XNcWi9dNTb1UUb79YwHwYDVR0j
BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3
MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEzNjA2MDM2MDU0MzQzNjk5LzAvMzEzMTM5MmUzODM4
MmUzMTM5MzIyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBndYwDANBgkqhkiG9w0BAQsFAAOCAQEAPWSX0t72jqwT5HNGo1hK3YMZPZl1
mRsMYZv6KcsxYosejqho4thIIdZteP6KcxH6dtNY/2GYH+mXfGQLHmULGuBgEazn
KBCoaulXkh4fyNq940RPZs2Li/YtUCd4PsFp1tmI0wyNgXUftVN9OI0f1fuqVWwA
keq++U9jA+GD574baKvkOTmgwNEI6dh/xwSjgNgSkKSLwYWU4b8rfUqbj2qgDQdP
g6BC/katPuB1AxBC7zfjZ+hS1njxrGpZE1LRaAUsjQ91V/IqQWDZHv96r1OQpjoZ
g0AbdaAOMGv69iWduKOHYBCUacYmIXw+kUeDXeEHihmImY/pnGA6KxlZ/Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client