Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e203233373234.roa
File:                     3131382e3139342e35362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier:          ltZtkAqvZJofnyKNAI5X/W6jfZZwufYjJun0Ygp1JBc=
Subject key identifier:   6D:7D:BA:B9:83:61:A0:8E:3B:D3:CD:67:DD:EA:C2:48:81:74:EB:76
Certificate issuer:       /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial:       73EE1F778F03EF9FBFAC8D8AB98F6B4B2B36F490
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e203233373234.roa
Signing time:             Tue 02 Jun 2026 07:46:58 +0000
ROA not before:           Tue 02 Jun 2026 07:41:58 +0000
ROA not after:            Tue 01 Jun 2027 07:46:58 +0000
asID:                     23724
IP address blocks:        118.194.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ee:1f:77:8f:03:ef:9f:bf:ac:8d:8a:b9:8f:6b:4b:2b:36:f4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
        Validity
            Not Before: Jun  2 07:41:58 2026 GMT
            Not After : Jun  1 07:46:58 2027 GMT
        Subject: CN=6D7DBAB98361A08E3BD3CD67DDEAC2488174EB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:c5:3c:55:39:13:c1:5e:25:0b:29:59:5f:
                    95:5f:c3:57:0b:2d:a5:b9:1e:1e:5c:60:be:3d:5e:
                    24:5b:ea:7d:4d:20:7d:46:c3:ac:03:78:a1:d2:57:
                    ec:65:9b:35:47:c5:fa:15:aa:dd:ef:94:87:4d:a8:
                    e6:c6:fc:1d:c0:ae:a0:49:56:e7:ee:53:34:c4:80:
                    bc:11:ab:18:c7:9d:ce:83:ed:92:a2:7e:1a:47:e4:
                    e3:5b:f3:f2:74:56:f0:59:37:67:94:c6:5b:d6:b5:
                    d9:a7:b8:4d:e1:ae:20:1a:4e:8d:70:2e:44:3d:57:
                    f8:3d:20:2d:d1:ac:3b:ce:21:7d:a9:aa:50:91:9c:
                    fa:17:cc:78:91:35:78:28:64:07:2c:34:cb:e6:7b:
                    aa:73:0d:3f:ec:b8:45:65:71:a4:d5:5a:54:0d:19:
                    5d:b9:75:9f:2f:10:32:68:b8:2d:1a:01:b3:ae:23:
                    4d:a3:c7:80:7d:eb:ad:bb:9c:9c:9c:3e:63:0d:3a:
                    e9:a8:9d:93:45:79:bb:b3:ef:f5:61:1d:4f:cb:b8:
                    f1:73:d5:30:e5:6b:f8:45:55:d7:e6:2f:da:2a:59:
                    1a:97:11:05:43:52:3d:b3:35:75:89:77:1e:6e:c1:
                    0a:fb:4f:4e:d7:62:ea:aa:77:46:3c:75:11:45:80:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:BA:B9:83:61:A0:8E:3B:D3:CD:67:DD:EA:C2:48:81:74:EB:76
            X509v3 Authority Key Identifier:
                keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3131382e3139342e35362e302f32312d3231203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.194.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:b9:87:9b:79:1a:53:be:84:75:07:d4:b2:b4:30:2b:21:70:
         6a:04:6b:fe:45:13:e8:7f:26:1c:8d:de:91:62:bb:e5:7c:e6:
         eb:92:46:81:17:97:1a:c3:8c:87:e7:60:3a:d2:39:ce:27:40:
         e1:89:c8:99:69:2e:3e:5b:f2:50:82:a5:68:13:3c:57:a5:1d:
         58:c9:16:27:83:7c:f0:0c:de:7f:27:b6:34:47:88:93:77:61:
         22:a9:c9:a6:b7:7d:a6:89:44:d0:56:3a:8c:b5:22:e9:2a:bb:
         09:dc:21:33:ce:36:c6:ae:d5:11:b6:8c:3c:e9:a8:b6:ab:7e:
         8a:bb:36:7b:76:6f:e0:ad:8d:c8:11:40:37:58:8a:c7:89:e6:
         cb:e1:17:8b:b4:43:6f:44:ef:48:b6:17:20:ab:2e:82:b9:54:
         3c:11:1c:a3:93:1e:be:7e:41:85:26:a7:20:e2:09:99:76:56:
         19:86:57:dc:45:ce:5a:ba:c5:c3:a9:c0:73:59:e6:c6:0f:23:
         d7:9a:35:35:05:fe:fc:87:9a:bd:6b:59:23:e1:33:68:5f:d3:
         68:7c:bc:97:f4:a7:78:47:59:21:e8:41:86:2b:a5:61:05:d1:
         72:81:a9:08:0c:b5:dd:27:e2:6e:90:6a:0d:d0:80:22:bc:23:
         22:f9:db:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:04 2026 by rpki-client