Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/3131392e36312e3132382e302f32342d3234203d3e2034383131.roa
File:                     3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=
Subject key identifier:   5E:C0:0C:00:38:B9:A8:AD:F6:F9:02:5A:DA:06:AD:3E:A5:74:95:1E
Certificate issuer:       /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49
Certificate serial:       7979E328BA724236B6351BE220C8C985260C7548
Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/3131392e36312e3132382e302f32342d3234203d3e2034383131.roa
Signing time:             Sun 28 Jun 2026 13:17:50 +0000
ROA not before:           Sun 28 Jun 2026 13:12:50 +0000
ROA not after:            Sun 27 Jun 2027 13:17:50 +0000
asID:                     4811
IP address blocks:        119.61.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:e3:28:ba:72:42:36:b6:35:1b:e2:20:c8:c9:85:26:0c:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49
        Validity
            Not Before: Jun 28 13:12:50 2026 GMT
            Not After : Jun 27 13:17:50 2027 GMT
        Subject: CN=5EC00C0038B9A8ADF6F9025ADA06AD3EA574951E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:06:e5:b8:72:7c:bf:50:5f:c0:2d:3f:a8:
                    a8:ea:eb:54:59:54:c8:7f:1b:9b:46:8f:b3:b3:ad:
                    18:24:f1:07:52:bb:ce:45:d8:41:ab:87:b1:ff:37:
                    4d:62:77:78:2c:4f:50:f7:ae:fa:e1:a9:e0:41:81:
                    7c:a2:af:39:38:8b:97:83:e4:32:f8:0d:58:bd:07:
                    fa:d4:15:47:37:29:30:09:18:ed:8e:c1:a4:d1:8d:
                    5f:d1:8b:71:ea:e5:7a:1d:9d:09:d3:37:2e:72:e0:
                    72:f5:ea:49:a0:6f:e5:e8:19:3f:73:b5:de:91:39:
                    83:26:94:e2:39:d9:a3:fc:d6:1e:2d:3c:23:6c:b5:
                    7c:36:8e:fb:53:d1:07:88:74:b9:32:d1:23:80:26:
                    e2:6d:b3:96:68:6e:f3:b1:d6:b7:61:13:4f:56:69:
                    dd:a5:72:ab:d7:f0:2d:df:5e:d3:a5:4d:f7:b7:86:
                    8b:96:a0:c2:90:c9:9d:e7:49:65:a9:5b:63:37:d9:
                    2d:1d:8b:8e:90:05:d9:03:5a:64:91:f0:58:31:83:
                    1c:55:99:fd:a5:3f:75:4e:72:dc:fd:11:6d:17:86:
                    5f:a7:5e:c1:df:42:02:72:88:74:17:7f:0a:84:a0:
                    cd:09:5d:10:a6:e5:3b:e0:e2:d0:80:29:1b:b0:79:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C0:0C:00:38:B9:A8:AD:F6:F9:02:5A:DA:06:AD:3E:A5:74:95:1E
            X509v3 Authority Key Identifier:
                keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/3131392e36312e3132382e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.61.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ee:ac:5a:7e:66:23:5f:61:25:30:6f:af:08:44:6c:45:79:
         4b:6e:e2:77:df:af:a2:62:c4:c6:28:93:ce:3a:d3:a5:bc:08:
         56:39:c2:a6:e7:74:e4:fa:ac:5b:f9:ce:51:3d:26:58:a6:4b:
         80:84:86:dd:32:8c:79:b0:d0:ce:db:4c:67:d0:b3:a7:cd:92:
         7b:8f:f2:00:9f:fe:52:f4:d5:a7:57:73:31:3a:b7:ba:0d:49:
         2b:5b:e7:3e:2b:83:cf:9b:b0:74:1e:bf:37:a6:6c:93:26:8d:
         13:2c:b7:71:06:98:0f:23:51:87:bd:47:62:f8:08:e0:e1:9a:
         56:22:2b:eb:78:44:d3:2c:a0:41:c5:d6:3f:f0:96:47:a8:44:
         99:f0:c3:64:4d:e8:87:af:33:1a:7c:c2:b4:36:4c:59:51:ac:
         d5:09:bd:6f:00:81:7f:7b:18:fd:85:14:f4:2c:81:cf:11:41:
         bf:64:ef:a1:f7:99:43:23:15:4e:f1:43:71:2e:71:a6:d7:0b:
         a6:95:98:53:55:f7:a2:9b:eb:53:dc:01:fd:eb:c2:5d:e5:ff:
         f9:37:89:d2:a8:49:3c:97:af:fe:87:3d:87:ca:6d:ee:4c:3f:
         3a:e3:a0:9f:bd:8c:3a:44:f3:d9:03:8d:a5:ab:56:bb:e3:7f:
         72:b6:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:53 2026 by rpki-client