Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3131392e33382e3230382e302f32302d3234203d3e203337393633.roa
File:                     3131392e33382e3230382e302f32302d3234203d3e203337393633.roa (raw, json)
Hash identifier:          1aHESw/nOTcL9zkX8b/2Way4ZXH0rcVYJtBS9uwyBGQ=
Subject key identifier:   91:DC:B2:10:D4:7F:98:4C:EB:7E:A9:CF:91:34:F3:DF:80:34:E2:EB
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       78D402B35A309BCF654D7751E7115E5ECA0990B4
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3131392e33382e3230382e302f32302d3234203d3e203337393633.roa
Signing time:             Thu 26 Feb 2026 02:44:23 +0000
ROA not before:           Thu 26 Feb 2026 02:39:23 +0000
ROA not after:            Thu 25 Feb 2027 02:44:23 +0000
asID:                     37963
IP address blocks:        119.38.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 00:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d4:02:b3:5a:30:9b:cf:65:4d:77:51:e7:11:5e:5e:ca:09:90:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Feb 26 02:39:23 2026 GMT
            Not After : Feb 25 02:44:23 2027 GMT
        Subject: CN=91DCB210D47F984CEB7EA9CF9134F3DF8034E2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:96:f0:40:24:53:14:9b:0c:59:82:6d:dd:
                    89:18:59:45:fb:28:5e:b5:85:28:03:e5:5b:81:41:
                    f1:f8:b1:ea:29:0d:f5:60:f0:57:01:a4:24:ca:1e:
                    7f:e6:87:99:2d:88:b6:e3:3d:25:e3:2e:93:20:5f:
                    da:ae:2c:f5:42:92:15:d4:2b:a3:be:db:36:ac:26:
                    e0:fa:9f:c8:81:f0:3d:47:ed:2c:ea:db:9b:2c:c0:
                    c0:ff:85:f6:7c:91:1b:04:d7:c9:80:52:fb:f4:b9:
                    e7:31:e3:f1:24:2d:ea:76:f7:48:79:2f:03:ee:53:
                    7e:b7:1b:14:97:28:4a:78:a3:48:72:94:47:8e:b6:
                    81:77:2c:63:8b:f8:53:8f:1a:49:1d:a6:fe:2b:88:
                    50:e8:ac:58:05:7c:9c:ca:c3:dc:a3:1a:95:60:23:
                    86:7e:f6:8a:0d:be:a0:2b:99:ef:e2:9d:8c:b2:d9:
                    7f:5c:5e:36:c0:ad:cd:a5:39:67:d0:ea:bf:4c:80:
                    21:d0:a1:a4:18:6f:4d:5d:9a:7e:72:9d:06:dd:5b:
                    fc:72:7a:e8:c4:a5:ff:9d:1c:98:2f:c2:52:22:d3:
                    1d:1d:ef:8a:77:ba:b7:0d:45:1a:e3:73:1f:45:4c:
                    ae:6b:b6:f0:fc:60:33:ae:60:94:b4:31:5a:5e:11:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DC:B2:10:D4:7F:98:4C:EB:7E:A9:CF:91:34:F3:DF:80:34:E2:EB
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/3131392e33382e3230382e302f32302d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.38.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:be:70:72:e5:87:f9:50:6f:ff:eb:ae:13:c5:c0:df:09:
         10:df:9b:8b:bb:a7:9d:7d:73:95:d2:d5:40:79:2f:6c:11:a5:
         8d:5d:44:5d:48:8c:72:07:6d:81:a5:fa:24:39:ac:99:ba:2f:
         a8:10:d3:6e:09:48:41:f5:b1:21:a2:cf:4d:78:45:d7:6e:61:
         f5:c5:b1:5e:dd:77:6d:e3:ef:b3:37:48:53:90:0f:55:f1:ea:
         56:03:96:92:9e:1f:6c:3b:66:7c:ff:d9:83:e1:ee:54:52:06:
         a2:e6:7a:86:f4:a9:fb:4b:67:1d:af:0d:32:43:62:91:3a:45:
         ee:be:6b:36:7b:d6:00:85:74:df:87:24:79:a1:cf:62:af:da:
         81:7e:52:45:74:53:37:86:00:5c:c1:8c:42:8c:3d:89:86:b4:
         b0:67:aa:92:77:aa:6b:44:52:77:f6:a1:e0:5c:97:23:a2:e3:
         5a:7f:80:7c:a4:4b:bb:b0:bd:00:3c:32:df:20:e8:a8:e7:ad:
         f3:f6:8a:cd:b9:29:ff:80:54:ee:e8:19:09:92:2f:57:b2:14:
         34:57:31:af:e3:1f:c5:7d:fc:75:08:c1:34:e7:f1:a8:7d:30:
         f8:82:d6:59:cc:06:36:cc:7b:cc:31:f9:35:fd:e0:f2:79:af:
         c8:2b:22:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:31:06 2026 by rpki-client