Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/3230322e3132322e33322e302f32312d3231203d3e2037343937.roa
File:                     3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (raw, json)
Hash identifier:          mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=
Subject key identifier:   67:D1:F9:B4:7F:0F:44:51:5F:79:5A:E6:C3:6E:7A:EC:0C:19:9E:4C
Certificate issuer:       /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
Certificate serial:       60130E41C63A0D76B63A235FC2EC3936D6D2280F
Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/3230322e3132322e33322e302f32312d3231203d3e2037343937.roa
Signing time:             Thu 18 Jun 2026 07:12:35 +0000
ROA not before:           Thu 18 Jun 2026 07:07:35 +0000
ROA not after:            Thu 17 Jun 2027 07:12:35 +0000
asID:                     7497
IP address blocks:        202.122.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 13:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:13:0e:41:c6:3a:0d:76:b6:3a:23:5f:c2:ec:39:36:d6:d2:28:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8
        Validity
            Not Before: Jun 18 07:07:35 2026 GMT
            Not After : Jun 17 07:12:35 2027 GMT
        Subject: CN=67D1F9B47F0F44515F795AE6C36E7AEC0C199E4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dd:5f:8d:44:72:f3:e7:c9:b4:00:4d:ba:9a:
                    7c:ff:0e:bc:bb:f9:1b:34:1b:9e:b1:b5:ba:95:7d:
                    46:60:55:ac:87:d3:7d:05:cf:ce:b0:5b:3a:94:87:
                    2a:ae:25:34:a8:fe:19:0c:61:ce:0b:11:cb:62:e4:
                    87:09:38:d2:30:6b:84:8d:b4:2f:28:04:55:9f:4f:
                    13:ba:04:aa:58:d8:a0:81:9f:b6:59:ef:19:f4:55:
                    2a:23:e1:a5:ca:2a:7a:e3:fe:f3:a8:a5:88:8f:44:
                    f9:b0:24:27:90:62:0a:0a:eb:80:6b:ec:b5:5d:f2:
                    55:de:cf:73:dd:9a:d9:5c:45:e3:e4:1e:5b:ba:5c:
                    3f:41:c9:58:92:0c:4b:0e:db:7f:86:9c:91:2e:26:
                    05:b8:73:fe:bc:21:7e:6c:78:1b:9e:a1:ef:63:18:
                    08:ff:09:e3:56:68:77:52:e2:85:05:08:c6:90:3d:
                    82:f0:80:b6:05:e5:6f:18:06:fc:66:d4:8a:e6:b3:
                    64:4d:7f:08:ee:84:59:c9:8e:f6:0a:a6:b8:24:68:
                    e4:25:f4:62:c3:f4:fa:97:0b:6d:33:c6:20:0c:86:
                    2f:ee:78:65:6e:09:0d:2e:dc:cc:2a:cb:98:08:d4:
                    19:b1:77:1e:ee:4f:59:9a:ae:c6:e4:93:62:36:a0:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:F9:B4:7F:0F:44:51:5F:79:5A:E6:C3:6E:7A:EC:0C:19:9E:4C
            X509v3 Authority Key Identifier:
                keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/3230322e3132322e33322e302f32312d3231203d3e2037343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:e6:f8:56:c6:7f:5d:12:9b:80:88:07:bd:cf:b0:df:cf:
         d7:8d:50:61:07:d2:f1:89:b3:97:e3:d0:9f:53:aa:de:ef:bb:
         c3:37:74:74:1d:2e:b7:a4:f8:39:5c:f1:ab:21:6c:91:8f:74:
         2a:ba:5a:37:b7:8f:da:b3:b6:02:10:1a:65:ff:7e:bf:ca:71:
         0e:a2:b2:38:a8:c4:40:66:a5:22:b1:f6:8f:9d:ec:61:86:9a:
         b9:ac:3b:82:a9:dc:76:ae:65:3b:2a:04:9e:e2:cb:56:7a:9f:
         d8:3c:9d:23:1f:1c:5a:34:b4:3f:43:86:9c:7b:2a:80:6b:3f:
         e6:a6:87:db:1b:cb:2f:3a:4f:af:95:cf:42:f0:f9:30:8a:e6:
         8d:b4:89:26:85:b2:6a:e7:f9:b5:f2:3f:4b:65:75:8d:7f:5a:
         e2:85:d4:4d:41:9c:54:de:55:75:75:c0:bd:ac:dd:94:45:72:
         00:7f:90:81:d2:0d:62:39:d8:f6:98:8e:8d:f1:15:05:f5:5b:
         eb:e6:dd:f7:16:f5:9d:87:8d:7a:95:69:0f:84:4f:79:be:d2:
         df:35:f2:a7:6f:98:3c:0e:fb:46:90:41:94:3b:c8:1b:42:4e:
         80:2c:48:2c:7f:d4:a4:99:c3:67:9c:0f:a7:fa:23:ca:6d:a6:
         59:0e:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:52 2026 by rpki-client