Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e203233373234.roa
File:                     3131382e3139342e34382e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          5aYFYC3sz9pdXlA4MZsC3Gzn3v3fHAYEvc5Hr3Osouw=
Subject key identifier:   37:9A:6A:1A:59:AF:49:1E:2C:FF:4A:E4:28:95:F5:84:1F:3C:62:FC
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       257EEB4A468491A09041525EEEEB1A0E71963B45
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e203233373234.roa
Signing time:             Tue 02 Jun 2026 07:46:58 +0000
ROA not before:           Tue 02 Jun 2026 07:41:58 +0000
ROA not after:            Tue 01 Jun 2027 07:46:58 +0000
asID:                     23724
IP address blocks:        118.194.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7e:eb:4a:46:84:91:a0:90:41:52:5e:ee:eb:1a:0e:71:96:3b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:41:58 2026 GMT
            Not After : Jun  1 07:46:58 2027 GMT
        Subject: CN=379A6A1A59AF491E2CFF4AE42895F5841F3C62FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:ea:46:4e:0a:94:ba:28:91:8e:bb:73:e9:
                    51:db:be:bd:1c:1e:ce:fe:88:05:65:56:26:c9:4e:
                    01:91:f1:d0:6d:89:f3:30:6f:19:ec:d0:2a:02:aa:
                    51:03:cc:e3:84:a0:e0:8d:14:c8:2c:3d:d4:00:22:
                    9e:92:b0:e2:2a:6c:7b:d7:5d:c0:e3:d5:c9:f0:c8:
                    7f:13:e8:d6:c9:bc:ec:17:5a:ae:64:c4:ab:7f:7e:
                    76:1a:51:70:3e:87:7a:5e:b2:c5:46:8c:6c:37:e5:
                    53:25:0b:4f:0a:2f:f1:89:c6:93:22:e9:0c:08:d9:
                    0d:df:bf:e4:37:88:86:cb:01:6a:6b:ea:4c:56:32:
                    bb:43:4f:ad:71:5f:1b:34:e5:43:f3:68:3a:af:dd:
                    43:f1:76:3c:82:3e:5e:f5:d7:db:f1:03:06:ae:bd:
                    c2:f1:80:69:ea:f9:a3:aa:72:67:e0:08:e8:dd:d4:
                    d3:39:52:be:d9:6b:dc:07:d0:a3:51:f9:42:b5:b9:
                    8e:a1:fa:2d:85:8a:7b:e4:ef:a9:69:8b:b8:5e:84:
                    91:e3:12:1b:67:30:90:72:06:ec:ee:b3:6c:3b:66:
                    65:8e:c9:78:6e:b7:bb:77:99:57:3a:c1:09:a4:81:
                    23:36:b6:65:d8:00:9e:8a:8f:90:31:71:25:0b:0a:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9A:6A:1A:59:AF:49:1E:2C:FF:4A:E4:28:95:F5:84:1F:3C:62:FC
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e34382e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.194.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:36:bf:e5:9a:dc:3e:cb:2e:02:0e:db:f4:69:99:a1:39:
         bd:16:85:42:32:b8:c6:79:e3:80:af:0f:67:1d:c6:60:61:96:
         cb:8c:56:7f:0f:0c:4e:68:b5:97:88:4f:83:1d:fd:e8:f4:15:
         a7:93:0a:cd:2d:19:f3:66:42:a7:39:af:63:51:34:02:fc:04:
         69:68:d8:2c:51:df:84:f5:57:bd:f4:89:2c:3a:93:34:25:cc:
         dd:5a:dc:7d:9b:c3:2d:17:ae:c8:dc:16:ce:dc:35:89:f6:37:
         11:13:0e:49:02:2d:0a:5c:93:ec:dd:22:df:b5:e2:6c:6b:a9:
         fd:ba:8a:83:f4:71:80:68:69:d4:a5:54:57:59:28:e5:ca:05:
         fc:08:41:81:8b:94:b1:b6:29:11:0e:0b:0c:40:f0:ea:c7:32:
         d6:86:f3:d4:7c:cb:9a:45:d8:75:66:fa:11:79:aa:44:0a:37:
         b6:8f:bf:67:f4:36:58:b7:64:ad:ab:e1:6d:7e:9c:37:12:24:
         de:0a:07:2d:4a:c9:ea:70:76:c7:d5:ac:ef:a1:5f:c8:50:92:
         13:b6:57:56:90:c4:db:eb:72:0b:fb:da:01:f3:04:bc:f4:d0:
         ad:e8:cd:6b:b5:ca:5d:98:a7:2d:22:74:80:ca:56:82:cf:bb:
         66:ac:12:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:47:56 2026 by rpki-client