Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33322e302f31392d3139203d3e2034383337.roa
File:                     3132302e37322e33322e302f31392d3139203d3e2034383337.roa (raw, json)
Hash identifier:          O/WqF3AX5XHtA76Tb7+4w39E4AkA70CeFifGB7TlHbU=
Subject key identifier:   F7:05:AA:B2:4C:A1:2F:ED:FF:84:B4:54:07:6E:BF:E0:DC:55:AE:A1
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       46FCAF937D919A6049ABDEDDE74C1382AE5F56B0
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33322e302f31392d3139203d3e2034383337.roa
Signing time:             Thu 04 Jun 2026 07:20:29 +0000
ROA not before:           Thu 04 Jun 2026 07:15:29 +0000
ROA not after:            Thu 03 Jun 2027 07:20:29 +0000
asID:                     4837
IP address blocks:        120.72.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fc:af:93:7d:91:9a:60:49:ab:de:dd:e7:4c:13:82:ae:5f:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  4 07:15:29 2026 GMT
            Not After : Jun  3 07:20:29 2027 GMT
        Subject: CN=F705AAB24CA12FEDFF84B454076EBFE0DC55AEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:b3:0b:09:0f:06:8b:eb:e4:11:c0:dc:d6:
                    8b:9b:13:48:74:02:00:79:3c:e3:7a:ac:8f:fc:d8:
                    b4:24:79:84:d2:99:1b:c6:b7:12:1d:be:78:7a:7b:
                    c9:72:bf:60:36:eb:22:03:91:6b:82:08:cd:9f:fd:
                    4d:03:5c:c5:4e:af:e6:37:1a:05:93:a6:a1:dd:5b:
                    14:bc:94:a7:79:0b:ca:fe:95:1b:d0:15:da:3f:fb:
                    e0:ae:ca:4f:4d:b9:9d:b5:ca:f1:c1:d3:33:fa:72:
                    59:d8:35:85:2d:3e:d6:d7:ad:2e:94:cb:f9:f5:28:
                    4c:4e:ba:20:e7:3c:c1:ac:d4:fa:9e:c3:1e:c8:8c:
                    d7:a4:3b:c1:4e:24:8e:c4:f4:ee:5e:e0:85:47:d8:
                    e8:81:9b:0e:ed:57:89:7b:16:71:ae:2f:61:9b:cd:
                    18:95:a1:99:8a:a1:21:5f:bd:0d:09:a2:1f:2d:b9:
                    5a:03:df:dc:26:62:52:15:fb:b1:a5:be:28:ba:a8:
                    60:ef:83:b3:a9:2d:05:49:36:ae:d5:34:a7:e0:0e:
                    31:ac:4b:d6:7c:9b:e0:1f:64:08:f2:02:39:41:d4:
                    9c:d1:58:aa:28:20:9d:96:be:5b:b8:68:e0:30:76:
                    f5:58:d7:8d:2c:ce:f1:49:0b:e4:b3:2f:61:8e:85:
                    70:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:05:AA:B2:4C:A1:2F:ED:FF:84:B4:54:07:6E:BF:E0:DC:55:AE:A1
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e33322e302f31392d3139203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:61:93:0e:0e:0a:11:d6:1f:40:73:1d:31:e6:29:21:65:83:
         a2:43:9b:66:76:aa:ec:fc:2a:e8:3e:01:17:32:02:45:34:35:
         9d:8e:df:57:9a:84:4e:bb:62:0a:a9:d4:55:04:13:4e:7f:6e:
         0f:ae:f9:49:d4:e8:b3:b4:f7:c9:94:81:b2:fd:91:1d:03:7b:
         84:5e:08:89:4b:43:5f:fa:2c:3d:83:b0:83:12:5a:f8:a1:81:
         42:c0:3f:6f:31:ae:03:47:ea:eb:b8:0e:8f:ee:17:94:e8:27:
         f1:6a:a0:70:74:55:5d:02:6a:9d:0e:c3:24:7c:0b:8d:b9:9f:
         4f:c2:ef:22:df:70:f3:88:b4:ac:f9:eb:fa:0f:8d:d7:fc:ce:
         89:ea:af:e8:b2:56:9c:f3:0a:11:1e:ec:fe:38:52:41:d9:86:
         49:87:5f:cc:30:e7:40:fc:5e:72:b8:72:36:21:0a:ef:89:08:
         49:d9:36:ba:64:a7:c8:87:68:94:6b:6b:c6:87:d4:fd:07:80:
         b0:4d:a6:a4:c3:39:fa:7f:19:78:f2:df:aa:ea:12:a4:02:e0:
         94:db:a1:f8:1e:ab:11:5f:30:67:14:7a:f8:3f:d0:92:ab:56:
         74:b6:c3:3b:5e:ea:e5:f4:ba:06:c8:07:97:b9:fd:09:8a:b2:
         eb:57:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:23 2026 by rpki-client