Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa
File:                     3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=
Subject key identifier:   30:8A:E2:8A:0B:09:35:76:57:96:C5:BB:02:B1:B8:A5:A5:40:AE:05
Certificate issuer:       /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
Certificate serial:       5572905FA0874418820BCBEB6A1BC86380191260
Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa
Signing time:             Thu 04 Jun 2026 09:38:24 +0000
ROA not before:           Thu 04 Jun 2026 09:33:24 +0000
ROA not after:            Thu 03 Jun 2027 09:38:24 +0000
asID:                     23724
IP address blocks:        218.240.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:72:90:5f:a0:87:44:18:82:0b:cb:eb:6a:1b:c8:63:80:19:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A
        Validity
            Not Before: Jun  4 09:33:24 2026 GMT
            Not After : Jun  3 09:38:24 2027 GMT
        Subject: CN=308AE28A0B0935765796C5BB02B1B8A5A540AE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:a7:b0:1d:67:ff:65:29:bb:4f:8b:ea:cc:
                    a5:5c:7f:b4:5a:e3:8f:8e:e7:7e:42:1c:11:d4:26:
                    18:16:a9:cf:51:63:71:13:90:d1:c1:e5:02:3d:1c:
                    e1:98:b5:51:39:9e:75:f5:8b:ec:67:05:97:6c:8e:
                    1e:02:75:75:6c:c7:e5:08:80:eb:99:6a:e7:fe:91:
                    12:a3:ef:e1:b8:a9:8c:ef:db:8a:ac:01:27:7c:2e:
                    89:5a:63:8f:4f:43:79:e1:73:2e:06:87:6b:97:cc:
                    04:e2:f8:12:20:b6:d8:d0:be:a0:00:46:95:42:fe:
                    f2:06:2a:3d:1b:ab:28:30:64:3e:36:53:64:a7:e0:
                    2c:b8:fb:ab:91:86:75:e2:0c:2f:f6:96:2c:b4:79:
                    1d:33:65:a2:3f:4d:46:83:83:87:07:99:7d:c8:bb:
                    c3:64:25:d6:a9:cb:80:5e:b7:2c:da:f6:f7:bb:ec:
                    82:f7:36:1c:aa:3d:a3:c1:1e:47:1e:e6:fa:c9:c5:
                    f9:7b:37:60:fc:4c:5e:83:61:bd:a8:69:ad:75:b4:
                    72:24:01:7b:4e:20:97:e5:6d:66:d3:64:59:07:d8:
                    63:aa:99:81:c7:f1:ea:a9:5a:0a:d6:77:33:43:bc:
                    b3:97:73:ae:48:c8:b3:f6:42:81:62:df:92:28:c7:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8A:E2:8A:0B:09:35:76:57:96:C5:BB:02:B1:B8:A5:A5:40:AE:05
            X509v3 Authority Key Identifier:
                keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.240.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:bd:29:42:92:1c:61:4f:15:5d:75:d5:b2:74:6c:60:72:
         f3:eb:a8:16:08:78:93:2e:b1:94:cc:ba:88:3d:61:97:5f:dd:
         de:25:33:e7:00:51:39:22:10:82:4e:b3:4b:12:1c:06:91:87:
         6a:bd:46:46:99:a0:15:c8:33:ea:34:ef:9d:c0:b1:fb:71:d6:
         7d:68:5a:f1:db:84:6a:32:98:c9:e2:40:ec:b2:e8:b4:57:80:
         d3:7f:41:fd:75:5f:fd:f3:c9:45:16:0d:f4:fc:8b:80:17:0b:
         7d:df:79:29:a9:c6:80:3d:af:db:3c:0a:7a:2b:61:2d:62:0c:
         41:dc:88:c1:95:14:fd:40:84:20:49:ae:5a:33:70:60:a9:29:
         62:4b:d6:95:4c:42:f2:bb:3f:a8:63:67:62:e5:bc:a5:63:af:
         0e:37:7c:09:29:f4:88:09:4d:29:33:c1:66:8c:b3:5e:ad:fd:
         7a:67:dc:b8:c3:a7:17:b4:a4:40:e7:a9:94:5a:87:35:a2:82:
         59:aa:60:c1:4f:53:6a:33:a7:94:e8:81:04:b2:8b:e4:85:2a:
         85:e5:2b:a0:44:dc:0f:83:09:7b:fe:7b:82:9f:f8:a4:6b:82:
         d3:d2:b5:89:c3:b4:b6:47:10:37:ae:55:7c:b4:5c:44:3d:43:
         18:2d:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:59 2026 by rpki-client