Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35382e302f32332d3233203d3e20313430373137.roa
File:                     3132302e37322e35382e302f32332d3233203d3e20313430373137.roa (raw, json)
Hash identifier:          liu9LMzpMSuCXCg0dnDc2l/DD4ujE58PrMXp8kBcSZQ=
Subject key identifier:   08:41:10:06:B0:69:DD:AD:0C:E8:B8:F6:F5:95:8F:88:2E:07:D8:47
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       247959E7EA4EA25FB6AEFC03A6F7DD4CAC84F39F
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35382e302f32332d3233203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 06:56:46 +0000
ROA not before:           Wed 03 Jun 2026 06:51:46 +0000
ROA not after:            Wed 02 Jun 2027 06:56:46 +0000
asID:                     140717
IP address blocks:        120.72.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:79:59:e7:ea:4e:a2:5f:b6:ae:fc:03:a6:f7:dd:4c:ac:84:f3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:51:46 2026 GMT
            Not After : Jun  2 06:56:46 2027 GMT
        Subject: CN=08411006B069DDAD0CE8B8F6F5958F882E07D847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:55:1c:8d:74:dc:62:e2:a0:10:df:5e:be:
                    3c:92:69:34:ec:9e:d9:ea:05:c6:a5:46:1e:61:c1:
                    3f:f2:0e:da:00:63:a1:6e:5b:24:e7:69:95:f2:cc:
                    bb:7f:b3:01:c6:7b:0b:fa:49:48:6a:7a:48:10:88:
                    5d:e8:60:a9:61:ba:e2:1f:27:0d:a8:18:85:a9:31:
                    d9:a0:3e:42:e8:87:8b:f7:9e:a8:fa:d9:09:38:1f:
                    7e:3c:c0:5b:7c:7d:6f:9b:e1:32:7d:a0:42:2b:90:
                    b8:a3:61:8a:a4:22:f6:dd:b2:04:17:a3:14:af:07:
                    bb:03:9f:b7:61:d5:f6:72:3f:6e:c6:a8:cc:d8:80:
                    e7:d8:89:16:90:69:96:c3:07:58:48:5e:95:20:8a:
                    96:cb:d1:c7:6c:5c:04:4c:af:e5:a0:d9:ef:51:9d:
                    98:b7:ad:d2:34:70:03:72:fe:dc:08:40:bb:ea:62:
                    81:57:4d:3a:a6:07:43:fc:5f:91:bb:14:ce:f7:77:
                    eb:d2:ba:36:92:1a:6d:c9:7f:79:11:2d:28:f2:8f:
                    32:9d:4a:b3:4d:46:a4:0e:58:1d:b2:c4:85:cc:bd:
                    c4:47:b7:3c:1c:82:8c:52:65:16:52:71:92:2e:38:
                    19:1f:71:f2:40:c9:8f:4d:6e:c9:50:62:35:20:7b:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:10:06:B0:69:DD:AD:0C:E8:B8:F6:F5:95:8F:88:2E:07:D8:47
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3132302e37322e35382e302f32332d3233203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:19:4a:46:cf:e6:06:ee:6e:de:58:f1:d6:47:05:ce:6c:
         32:18:b3:0f:e9:dc:7e:35:cf:2f:36:75:0d:99:9c:11:81:71:
         1a:55:1d:7a:e1:68:97:9c:e5:6b:b3:ca:1b:7e:cb:69:1f:f8:
         92:54:b3:ea:08:af:1e:13:20:ca:cd:c5:a6:66:2d:18:16:be:
         af:81:68:47:6a:79:e3:b5:e0:de:2b:d0:fa:9b:3f:b6:2c:2f:
         3e:79:84:35:99:2e:ef:a2:0e:20:e4:b2:3b:be:16:1b:03:84:
         12:7d:09:96:c0:35:81:8f:2f:b1:23:06:ad:ed:d5:e9:92:bf:
         63:8c:c0:29:0d:24:0c:29:9b:2c:cb:ec:57:73:20:9c:13:ca:
         bc:33:14:a0:d2:e6:34:7b:80:80:d1:7c:d6:50:e3:13:9b:40:
         97:3f:59:48:49:9c:07:2a:1e:20:54:3f:00:a6:fe:d5:9e:5d:
         69:b6:d9:e0:b0:eb:e5:46:35:89:2f:d9:6c:c4:94:da:2c:7f:
         d4:af:21:24:a4:10:0d:a7:0f:4c:c6:0c:13:9f:75:5f:8d:a3:
         ad:19:05:ea:7c:a8:d9:33:2d:f4:d2:6e:a1:42:1d:e4:ad:7a:
         83:08:b1:2c:dd:40:b1:a7:55:63:d6:bf:73:60:59:a3:b2:f0:
         53:94:f1:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:26 2026 by rpki-client