Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa
File:                     3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier:          34DEjgc+uFzAvaJR2gQqwSseBX9CZsTiDQ1qcyMCy+A=
Subject key identifier:   42:C7:19:EF:79:14:C9:16:7E:61:D3:46:8C:7C:E4:D7:0C:45:FE:61
Certificate issuer:       /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial:       4CF0BF5B09694E79AD2782096CCA63704BAA43DF
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa
Signing time:             Thu 16 Apr 2026 07:16:03 +0000
ROA not before:           Thu 16 Apr 2026 07:11:03 +0000
ROA not after:            Thu 15 Apr 2027 07:16:03 +0000
asID:                     63631
IP address blocks:        119.161.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 13:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f0:bf:5b:09:69:4e:79:ad:27:82:09:6c:ca:63:70:4b:aa:43:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
        Validity
            Not Before: Apr 16 07:11:03 2026 GMT
            Not After : Apr 15 07:16:03 2027 GMT
        Subject: CN=42C719EF7914C9167E61D3468C7CE4D70C45FE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:31:2c:b9:c1:3e:11:e3:2a:e9:18:31:27:
                    ca:fb:55:48:99:df:31:b2:13:58:d2:3c:cc:00:a4:
                    e9:15:dd:f0:22:7e:17:4a:68:2b:64:c9:77:3b:dd:
                    ad:47:c4:81:af:e5:7a:72:0c:9a:06:4b:87:69:72:
                    2f:c2:2a:e5:2e:1a:66:67:c8:75:b3:8e:32:52:e7:
                    50:be:b7:42:b9:89:79:95:90:b3:fc:23:00:82:69:
                    3c:5d:1a:a0:64:4d:5b:6d:cc:07:b5:71:9b:9a:e4:
                    ed:ba:7a:fb:c9:88:04:49:30:55:b2:e9:08:5e:f4:
                    56:1e:57:77:e9:98:50:c7:14:f0:f1:37:4b:fd:0b:
                    95:5d:2c:e5:63:92:c8:13:fb:36:b5:41:d6:35:b3:
                    68:c2:5b:f0:04:e7:e0:b6:47:64:16:c2:4b:de:1d:
                    25:16:d2:8e:6d:60:a1:bd:22:40:3d:c5:f1:44:dc:
                    b2:a3:53:69:6e:25:11:4c:a8:3a:71:b5:8e:5c:d8:
                    d6:6a:34:32:12:16:4b:fd:23:a6:75:72:ff:da:1d:
                    f6:b1:f5:9e:cb:a2:70:b7:1f:81:b7:5f:b4:81:dc:
                    1d:ac:a2:0c:c7:e4:e2:84:f3:2c:5a:b4:5b:3b:b1:
                    cd:2a:38:c7:b5:49:63:e4:b1:92:e7:27:06:91:c6:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C7:19:EF:79:14:C9:16:7E:61:D3:46:8C:7C:E4:D7:0C:45:FE:61
            X509v3 Authority Key Identifier:
                keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135312e302f32342d3234203d3e203633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:df:96:1a:31:c4:5b:aa:08:65:15:94:1f:0b:a0:7d:bf:4f:
         03:05:d0:77:7e:21:60:a8:40:b6:65:ce:8c:43:c4:32:fd:81:
         17:4f:b0:10:68:19:a6:7a:85:e1:7f:f8:5e:87:a3:9e:c2:db:
         ee:81:5e:79:1d:37:23:5d:15:fb:2f:1f:c3:20:03:11:33:1e:
         c6:72:3b:9e:8f:7c:c4:03:5d:dd:d4:fb:9a:80:07:70:8a:46:
         a6:4c:56:79:ad:d6:bc:17:4f:58:22:94:8d:b1:e7:98:87:ee:
         c3:14:fd:2c:18:82:99:34:97:be:e7:69:c6:18:72:d3:f3:69:
         44:4b:9f:58:ae:ea:a6:f3:b0:45:ea:68:54:64:49:1f:bd:b0:
         94:49:f8:eb:5c:df:54:00:53:ec:a9:98:b7:85:4c:f0:f5:30:
         91:b1:7c:6b:d2:7f:37:e2:58:31:09:e8:88:b2:83:56:16:0a:
         07:af:9c:98:4d:f8:f5:6e:fa:0b:21:0f:44:f2:09:73:a3:4a:
         6f:db:02:42:0d:3b:74:6c:0a:85:10:d0:ef:32:74:29:c4:07:
         39:4d:80:d8:3b:1d:3f:2e:95:53:29:0a:7d:e5:29:e4:ca:32:
         d7:88:91:30:7f:2b:df:ed:9b:d3:63:b9:53:74:13:54:8b:a3:
         af:7e:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:23 2026 by rpki-client