Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/36302e3233322e302e302f31372d3137203d3e203234313433.roa
File:                     36302e3233322e302e302f31372d3137203d3e203234313433.roa (raw, json)
Hash identifier:          cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=
Subject key identifier:   07:83:DF:90:4F:AC:CF:0B:6C:36:39:33:00:29:22:C7:96:6E:71:79
Certificate issuer:       /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9
Certificate serial:       2B317F81D515D5A75F743AEA20EC8A144C10BBCD
Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/36302e3233322e302e302f31372d3137203d3e203234313433.roa
Signing time:             Tue 30 Jun 2026 09:21:03 +0000
ROA not before:           Tue 30 Jun 2026 09:16:03 +0000
ROA not after:            Tue 29 Jun 2027 09:21:03 +0000
asID:                     24143
IP address blocks:        60.232.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 05:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:31:7f:81:d5:15:d5:a7:5f:74:3a:ea:20:ec:8a:14:4c:10:bb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9
        Validity
            Not Before: Jun 30 09:16:03 2026 GMT
            Not After : Jun 29 09:21:03 2027 GMT
        Subject: CN=0783DF904FACCF0B6C363933002922C7966E7179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d3:32:55:b4:4d:8c:a4:a8:8a:25:14:95:88:
                    79:b1:70:c5:66:d9:4a:7f:71:91:4a:a0:c0:7c:8f:
                    23:6d:d8:94:7c:f0:40:a6:7c:4b:8d:2d:63:94:1b:
                    a3:6c:d2:67:4b:5c:fd:d3:f6:3e:7a:26:c2:8e:74:
                    2f:70:40:54:7c:fd:d7:1f:c7:13:29:0d:e8:24:f6:
                    3b:ee:8a:53:68:a8:64:fa:0f:51:d4:94:de:67:89:
                    f6:5a:8f:4e:26:00:c6:a0:62:79:ee:a8:d4:b4:31:
                    ca:65:ae:2e:10:bc:96:94:c6:8d:e6:0a:e3:62:1f:
                    2e:e5:e9:c8:99:c1:57:6e:01:78:e6:4d:85:c3:91:
                    f8:e6:7e:83:35:75:3b:66:4f:64:a1:31:18:0b:5e:
                    38:da:fb:4b:00:5b:b5:2d:73:50:a3:d6:50:a7:95:
                    a6:5d:aa:44:ea:ba:e4:cc:5b:5b:2a:60:f0:f7:2a:
                    cf:a9:ae:35:95:69:4f:b3:af:92:ab:6f:d5:51:7c:
                    a1:6e:46:1f:9b:65:20:1a:30:23:48:ce:1b:9c:69:
                    7c:45:ce:8e:4f:30:74:1c:8c:4c:b0:7f:c3:14:75:
                    b9:dd:d5:5a:0a:3d:4d:d6:01:6e:49:84:23:f7:d6:
                    57:36:f5:07:79:13:81:69:33:14:08:18:94:47:d4:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:DF:90:4F:AC:CF:0B:6C:36:39:33:00:29:22:C7:96:6E:71:79
            X509v3 Authority Key Identifier:
                keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/36302e3233322e302e302f31372d3137203d3e203234313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.232.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:91:b1:4f:f2:7e:44:43:40:44:5d:f8:f8:39:32:e6:de:84:
         c0:52:26:a6:78:0e:5f:cb:33:42:15:3c:0f:ae:d3:86:b2:14:
         f1:f1:f4:86:c5:09:f8:bd:a3:51:ea:e5:10:4f:6e:a6:31:77:
         9c:d4:1f:ac:08:54:5e:d5:cc:d7:ff:cb:09:32:11:b5:45:31:
         33:4c:98:ad:98:3a:b4:8a:73:3e:d6:18:a5:7e:88:ce:6d:01:
         1d:5f:34:69:cb:a0:a2:94:4e:73:9a:8a:4c:47:0a:3e:96:4d:
         c0:a6:6b:29:7f:50:99:bd:ac:2b:dc:71:6b:3f:a5:c8:54:43:
         67:c2:11:a8:1d:24:07:fd:c4:24:3c:7f:96:ae:73:ec:ef:c9:
         81:eb:60:80:1f:d1:50:b4:c0:2d:d3:47:93:ff:a8:d8:79:5e:
         8b:c8:d1:89:10:5e:03:76:90:1d:da:5b:41:33:51:20:5a:6b:
         44:f3:d9:ee:84:4f:36:28:70:ec:06:50:da:a9:61:06:7b:1b:
         73:91:a3:43:66:cf:26:8f:8d:71:15:ad:b5:c3:c5:f1:93:7c:
         af:70:1a:4d:ec:9e:48:34:1a:da:98:ee:9b:65:19:87:55:76:
         8a:fe:17:f8:e5:79:1b:05:a1:a2:f5:0e:8e:c3:38:11:a9:e9:
         3d:c4:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:48:24 2026 by rpki-client