Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e31362e302f32302d3230203d3e2030.roa
File:                     3131392e38302e31362e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          wXdUkHyko20WaVlYUiHP8tBEIEQIv2A+egzvJ1QeSK4=
Subject key identifier:   E2:02:75:77:25:C0:0D:D0:74:6B:A6:62:48:54:D7:A3:FD:D9:58:9C
Certificate issuer:       /CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
Certificate serial:       581459EA62461BC2DAC1031CEB2D0E4F1FD7EB6B
Authority key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e31362e302f32302d3230203d3e2030.roa
Signing time:             Mon 25 May 2026 01:09:38 +0000
ROA not before:           Mon 25 May 2026 01:04:38 +0000
ROA not after:            Mon 24 May 2027 01:09:38 +0000
asID:                     0
IP address blocks:        119.80.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:14:59:ea:62:46:1b:c2:da:c1:03:1c:eb:2d:0e:4f:1f:d7:eb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49
        Validity
            Not Before: May 25 01:04:38 2026 GMT
            Not After : May 24 01:09:38 2027 GMT
        Subject: CN=E202757725C00DD0746BA6624854D7A3FDD9589C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:c6:9d:10:d6:ba:ef:9b:4e:cf:3b:7e:8e:
                    50:d9:71:fd:62:78:c3:0f:ab:77:09:d5:a6:fc:57:
                    f5:d0:bc:5f:08:5a:9a:e7:a6:1f:80:7d:b5:7f:2c:
                    0b:02:ba:da:2d:19:79:65:ee:06:b7:68:42:88:a1:
                    20:f3:60:a7:21:9e:9e:6f:40:08:a5:f2:0c:87:c8:
                    75:04:65:56:9d:12:f2:1e:41:2f:d8:33:f4:e3:65:
                    b5:ff:fb:b1:19:5e:a8:74:2a:30:7c:3d:61:ac:5d:
                    e3:87:84:0c:f1:b3:77:63:23:10:ba:7c:bd:85:a3:
                    be:39:fd:08:e6:c1:ea:a9:d6:7b:6f:f1:de:1f:1f:
                    24:a2:7a:cb:a7:f0:53:c7:8b:1c:92:11:e8:29:19:
                    50:0e:14:05:64:57:d2:bf:54:e3:a8:95:63:2f:c2:
                    27:b9:ff:86:9e:6d:9d:e0:dc:d0:b9:94:92:6f:7b:
                    96:71:f8:26:ac:36:5b:23:f5:46:4e:d2:5d:f7:c3:
                    75:f8:4f:31:a9:1f:ad:fa:09:1d:05:7f:1a:24:cd:
                    68:35:71:15:5f:53:85:1e:6e:75:3d:44:3b:e9:a1:
                    b6:f8:34:8b:3c:c8:d6:96:59:c0:99:f6:0e:87:43:
                    23:b8:94:f0:0a:c3:cf:4b:1b:bd:47:c4:f2:02:23:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:02:75:77:25:C0:0D:D0:74:6B:A6:62:48:54:D7:A3:FD:D9:58:9C
            X509v3 Authority Key Identifier:
                keyid:C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/3131392e38302e31362e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.80.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:0f:ec:96:bc:6a:5d:ae:0b:a8:76:4a:12:0a:a8:c1:0b:
         35:cd:70:f8:6c:49:5e:9d:cb:60:57:dd:d1:4a:a2:7d:26:49:
         13:94:e1:06:16:67:7b:16:63:5c:50:89:70:82:50:1c:4a:69:
         2a:34:1b:08:c0:44:3b:fe:3d:97:bb:4a:2d:5d:f8:b3:38:6b:
         ea:71:98:84:5e:b0:d3:2c:4c:ba:fd:fb:d3:b3:d3:48:15:42:
         50:7b:52:fb:e5:d2:6f:02:a5:d5:0c:78:a2:1e:79:a9:a9:1f:
         a8:8a:e5:6d:45:46:ef:d6:bc:25:03:fe:d9:af:30:ef:77:ad:
         8a:50:c1:cb:06:b1:50:69:11:da:9c:ef:25:7e:94:56:f5:2c:
         bb:6e:a5:3f:1e:1e:08:62:44:c0:e5:ba:eb:57:27:ba:72:ca:
         43:0c:49:c3:64:7c:89:55:cd:da:f5:ac:d6:04:3e:60:d4:19:
         dc:69:37:13:a0:f9:a1:17:53:c0:81:ed:01:40:65:34:0b:fc:
         56:4d:74:f6:69:03:a4:8b:97:84:37:a8:89:ed:52:44:26:a2:
         4d:0c:53:4f:35:3c:51:6b:8c:f2:25:40:62:4d:c6:15:87:8e:
         b2:48:25:f6:43:df:04:85:da:80:41:15:5d:5f:de:8b:27:78:
         9b:4f:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:53 2026 by rpki-client