Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e35392e302f32342d3234203d3e20313430373136.roa
File:                     3231382e39382e35392e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier:          SzmK+15kX2gqeFCaYlq9FDkeQZ92Cji7f4lTkqYkSm8=
Subject key identifier:   68:58:3D:6A:A1:98:7A:C2:EB:9E:9A:FF:65:10:FB:7B:48:59:0A:94
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       41D761F0CFF3C8B4FC48871B403FF6D78F1997A2
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e35392e302f32342d3234203d3e20313430373136.roa
Signing time:             Wed 03 Jun 2026 07:30:33 +0000
ROA not before:           Wed 03 Jun 2026 07:25:33 +0000
ROA not after:            Wed 02 Jun 2027 07:30:33 +0000
asID:                     140716
IP address blocks:        218.98.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d7:61:f0:cf:f3:c8:b4:fc:48:87:1b:40:3f:f6:d7:8f:19:97:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 07:25:33 2026 GMT
            Not After : Jun  2 07:30:33 2027 GMT
        Subject: CN=68583D6AA1987AC2EB9E9AFF6510FB7B48590A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:ab:10:d0:09:c9:93:dd:77:65:42:a7:51:
                    10:77:00:93:fd:70:c8:e4:3e:ce:78:b7:88:3f:27:
                    fd:de:af:b7:fd:c0:c1:17:e8:dd:76:9f:18:ec:2e:
                    5d:62:b2:f3:05:bd:b4:fa:b2:dc:bd:5a:af:e8:b5:
                    51:67:b2:ab:b7:29:77:6f:8d:67:7a:68:0b:35:ef:
                    e3:0e:85:fc:f6:b8:3b:1a:75:c0:96:b8:9c:9c:78:
                    37:e1:06:6d:31:91:d2:14:ae:88:fb:cd:dc:56:7a:
                    7b:47:1a:04:24:fe:2e:bd:89:2c:8a:86:fe:3f:12:
                    58:b2:1c:42:dc:e6:36:6c:ed:fd:73:ea:77:29:04:
                    ff:c4:33:9c:78:49:9f:47:58:b0:c5:7c:b1:44:a7:
                    53:df:18:7a:00:ff:87:6b:03:6d:af:10:d3:68:8d:
                    bc:e2:9b:fe:2c:b6:63:73:40:ab:c6:41:38:e7:f7:
                    f1:6c:c6:aa:ee:a7:a6:92:d2:84:f8:c6:f5:3a:c6:
                    2d:09:49:6e:a5:76:66:7c:eb:ee:c0:16:a1:86:12:
                    c7:3b:71:9c:95:11:f0:4b:66:f2:02:ff:d6:81:98:
                    6c:d4:05:b9:0b:67:a3:53:b2:24:1a:be:f7:71:49:
                    b2:65:d1:09:57:56:1e:55:81:6b:6f:9b:48:10:71:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:58:3D:6A:A1:98:7A:C2:EB:9E:9A:FF:65:10:FB:7B:48:59:0A:94
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e35392e302f32342d3234203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:1c:be:35:c6:d7:d5:cd:d5:b1:c7:66:19:a8:20:7f:da:
         4c:72:38:e5:4f:58:b4:35:a8:e4:c3:d0:7b:98:fe:49:22:62:
         eb:60:b3:2f:af:4a:ac:82:b3:91:f7:b8:0d:a3:45:1b:a2:26:
         00:f4:43:b9:09:e5:02:b4:26:ed:56:77:4d:c3:88:02:11:fb:
         00:23:4b:e5:5c:d4:8b:3a:86:67:82:cc:d5:8a:e5:57:e6:f1:
         9f:06:29:76:5d:6a:21:0a:75:d9:41:52:b0:1e:79:74:ba:bb:
         84:8d:c1:7d:ef:34:e2:c8:1b:18:47:c1:d8:36:ef:c4:31:48:
         63:75:e6:c0:cc:6f:64:8d:45:8a:07:09:2b:dd:ae:bd:15:8d:
         60:ec:70:4c:87:61:90:3c:8b:ae:8d:bf:7e:06:3a:03:ac:85:
         7c:32:d1:9c:48:7d:a6:a4:03:d3:74:c0:f1:19:90:49:98:3b:
         9b:bf:73:2b:bc:04:0f:b7:38:cc:58:69:4b:ce:e8:b5:f0:f3:
         9d:9e:2e:90:ca:de:52:97:af:ab:68:97:4c:14:80:41:a3:51:
         bb:64:a0:46:62:8a:d8:c1:c3:24:08:9d:c1:83:71:01:a9:f8:
         5a:37:74:03:23:69:f9:2d:12:d3:e7:f7:6d:ad:03:e7:f5:00:
         1f:dc:e3:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:58 2026 by rpki-client