Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3230342e302f32342d3234203d3e203539303334.roa
File:                     312e3131392e3230342e302f32342d3234203d3e203539303334.roa (raw, json)
Hash identifier:          ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=
Subject key identifier:   83:DB:2A:5B:64:00:5A:9A:74:11:80:81:64:B1:C1:5C:2B:51:7E:B7
Certificate issuer:       /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial:       103BAB0EA4703411C80057521DC95D5FDC6853F7
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3230342e302f32342d3234203d3e203539303334.roa
Signing time:             Thu 04 Jun 2026 10:04:01 +0000
ROA not before:           Thu 04 Jun 2026 09:59:01 +0000
ROA not after:            Thu 03 Jun 2027 10:04:01 +0000
asID:                     59034
IP address blocks:        1.119.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 22:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3b:ab:0e:a4:70:34:11:c8:00:57:52:1d:c9:5d:5f:dc:68:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
        Validity
            Not Before: Jun  4 09:59:01 2026 GMT
            Not After : Jun  3 10:04:01 2027 GMT
        Subject: CN=83DB2A5B64005A9A7411808164B1C15C2B517EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:80:70:da:77:5d:60:eb:55:9e:7b:ff:dd:
                    92:41:4b:02:77:f9:19:41:1c:4d:8c:d2:50:1a:d2:
                    d6:e3:3d:f9:44:58:2e:2d:76:3d:be:8e:d5:5b:cf:
                    1e:2f:a6:70:14:03:b6:26:c0:dc:17:e0:e3:31:38:
                    af:4a:d0:9f:e7:49:95:b5:13:99:6e:82:a3:56:90:
                    a0:ac:25:61:c2:ba:51:fd:52:17:3d:03:5b:7e:9d:
                    1d:16:0b:17:b2:a5:71:a2:3f:8a:d6:06:16:53:01:
                    d5:ed:bc:5b:c4:64:19:17:61:49:ac:ba:e3:01:05:
                    5c:98:69:9a:53:84:10:c7:a3:1f:04:ae:d9:97:31:
                    20:c1:7e:7b:ac:64:c6:06:16:84:bb:d8:18:1b:8c:
                    f4:71:a5:5f:2b:8d:45:48:26:2a:b4:ef:43:c7:89:
                    e9:f6:fc:0e:4d:33:cf:22:24:2b:11:c1:29:da:af:
                    bf:65:b3:7e:56:87:52:93:e4:aa:cf:33:ed:32:e6:
                    dd:9f:0a:2b:56:3b:b3:d0:47:7d:24:0d:1b:d7:b7:
                    c0:8c:a5:55:9d:d1:7c:76:ed:8b:33:e9:d9:f5:d3:
                    a2:3c:f4:8a:36:f1:f7:eb:9c:e4:f1:33:6a:fc:f3:
                    17:d7:4d:80:d1:64:42:76:f1:ba:3d:02:df:0b:e2:
                    99:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:2A:5B:64:00:5A:9A:74:11:80:81:64:B1:C1:5C:2B:51:7E:B7
            X509v3 Authority Key Identifier:
                keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/312e3131392e3230342e302f32342d3234203d3e203539303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.119.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:76:13:7c:a9:86:66:d6:43:e1:07:66:1f:3e:3a:6a:70:
         7c:93:ee:71:1b:88:cf:88:10:0c:60:df:1d:04:95:fc:d2:5c:
         fa:a7:9a:8e:3c:56:57:0b:e0:ac:e2:54:5f:c8:2c:85:88:66:
         27:6b:07:ea:76:28:6a:73:e9:5d:de:01:77:cc:f4:43:53:ea:
         44:69:7d:21:d1:be:c9:1c:e8:99:c3:eb:f8:d6:30:60:e3:eb:
         f2:9e:f0:81:57:3d:a9:8d:46:b0:e1:02:d5:21:69:07:cb:2d:
         f3:6b:d7:a3:e5:d9:11:42:68:c0:ca:36:6b:8b:58:d2:78:3e:
         e7:3f:3c:68:36:aa:67:8a:c4:1c:ee:38:23:08:af:45:82:f4:
         52:c2:59:15:a2:dd:16:8b:a0:b2:ca:15:14:53:1f:9b:6a:4c:
         11:64:10:c4:2b:7d:84:55:63:b8:ad:08:f4:8d:88:a8:97:6d:
         2f:81:1d:dd:68:30:59:f8:d1:bb:b3:f2:cc:df:d4:ad:88:97:
         a7:f4:ca:81:67:68:10:ae:7d:23:16:53:42:46:21:ea:59:8d:
         b9:19:a0:10:a2:18:50:36:29:19:c1:30:91:16:1a:1e:77:fd:
         69:8a:9b:cc:b4:6f:d8:c8:ba:c4:c2:22:4f:17:df:29:cd:9f:
         02:37:e9:81
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEDurDqRwNBHIAFdSHcldX9xoU/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw
NDNBQ0IyMzAeFw0yNjA2MDQwOTU5MDFaFw0yNzA2MDMxMDA0MDFaMDMxMTAvBgNV
BAMTKDgzREIyQTVCNjQwMDVBOUE3NDExODA4MTY0QjFDMTVDMkI1MTdFQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QIBw2nddYOtVnnv/3ZJBSwJ3
+RlBHE2M0lAa0tbjPflEWC4tdj2+jtVbzx4vpnAUA7YmwNwX4OMxOK9K0J/nSZW1
E5lugqNWkKCsJWHCulH9Uhc9A1t+nR0WCxeypXGiP4rWBhZTAdXtvFvEZBkXYUms
uuMBBVyYaZpThBDHox8ErtmXMSDBfnusZMYGFoS72BgbjPRxpV8rjUVIJiq070PH
ien2/A5NM88iJCsRwSnar79ls35Wh1KT5KrPM+0y5t2fCitWO7PQR30kDRvXt8CM
pVWd0Xx27Ysz6dn106I89Io28ffrnOTxM2r88xfXTYDRZEJ28bo9At8L4pnDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUg9sqW2QAWpp0EYCBZLHBXCtRfrcwHwYDVR0j
BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0
NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE0ODUyNjc1MjU5NzI3ODk1LzAvMzEyZTMxMzEzOTJl
MzIzMDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAAF3zDANBgkqhkiG9w0BAQsFAAOCAQEAnuF2E3yphmbWQ+EHZh8+OmpwfJPu
cRuIz4gQDGDfHQSV/NJc+qeajjxWVwvgrOJUX8gshYhmJ2sH6nYoanPpXd4Bd8z0
Q1PqRGl9IdG+yRzomcPr+NYwYOPr8p7wgVc9qY1GsOEC1SFpB8st82vXo+XZEUJo
wMo2a4tY0ng+5z88aDaqZ4rEHO44IwivRYL0UsJZFaLdFougssoVFFMfm2pMEWQQ
xCt9hFVjuK0I9I2IqJdtL4Ed3WgwWfjRu7PyzN/UrYiXp/TKgWdoEK59IxZTQkYh
6lmNuRmgEKIYUDYpGcEwkRYaHnf9aYqbzLRv2Mi6xMIiTxffKc2fAjfpgQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:51 2026 by rpki-client