Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/3131382e38382e33322e302f31392d3234203d3e2034383337.roa
File:                     3131382e38382e33322e302f31392d3234203d3e2034383337.roa (raw, json)
Hash identifier:          TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=
Subject key identifier:   9A:3B:7C:77:26:2B:34:A0:CB:31:FE:26:D8:37:F0:CE:6E:95:9A:A5
Certificate issuer:       /CN=7168563389D6040E01C75892D6228B15ABD8EFB5
Certificate serial:       64B5099DA16D262F51CC99ABAB51070EB4581470
Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/3131382e38382e33322e302f31392d3234203d3e2034383337.roa
Signing time:             Mon 15 Jun 2026 08:28:21 +0000
ROA not before:           Mon 15 Jun 2026 08:23:21 +0000
ROA not after:            Mon 14 Jun 2027 08:28:21 +0000
asID:                     4837
IP address blocks:        118.88.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 21:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:09:9d:a1:6d:26:2f:51:cc:99:ab:ab:51:07:0e:b4:58:14:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5
        Validity
            Not Before: Jun 15 08:23:21 2026 GMT
            Not After : Jun 14 08:28:21 2027 GMT
        Subject: CN=9A3B7C77262B34A0CB31FE26D837F0CE6E959AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:97:97:e6:fc:c2:32:14:b7:39:cb:8c:01:
                    92:80:ad:3d:81:73:f7:11:1f:c5:a5:c3:2c:ef:5b:
                    5c:d1:e1:04:57:84:e4:f2:f7:64:e0:0a:3e:a3:8f:
                    e0:ae:7a:ad:55:b5:d7:62:f4:76:4a:49:62:38:52:
                    1c:87:56:11:aa:ce:08:3e:b3:42:59:45:5c:45:49:
                    a8:85:dc:ff:26:46:dd:b3:04:30:e0:ae:4e:0d:65:
                    7e:52:04:45:52:5b:16:d3:b6:23:30:74:87:ee:7c:
                    d8:fb:8e:3c:c6:e1:2a:e1:12:c9:5d:80:7d:53:9e:
                    ff:11:25:3f:cb:23:2d:f9:9e:b1:4d:30:6e:5c:60:
                    64:bc:e1:fd:15:52:5b:8b:52:a6:33:74:16:97:60:
                    21:80:3d:85:f9:c8:4a:cc:81:23:da:aa:37:11:e7:
                    eb:5c:67:a3:5c:85:c3:a5:0c:c8:d9:3e:17:d4:2f:
                    e5:81:f8:f0:a3:11:d2:25:b3:93:4f:c3:27:84:57:
                    a1:5e:cc:f1:11:dc:76:74:f7:0c:61:bc:d3:5b:59:
                    ff:e9:33:8c:7e:8c:a5:2e:42:32:34:42:13:d3:54:
                    10:b5:af:ef:a8:3c:9f:e8:7a:fc:01:db:19:63:b5:
                    07:10:53:84:96:e1:70:13:6b:6a:c2:03:57:fe:24:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3B:7C:77:26:2B:34:A0:CB:31:FE:26:D8:37:F0:CE:6E:95:9A:A5
            X509v3 Authority Key Identifier:
                keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/3131382e38382e33322e302f31392d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.88.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:cb:ef:1b:5d:c8:52:28:2d:f8:a9:d6:f3:37:24:6c:cc:
         7b:05:f9:75:67:df:5c:c2:76:e1:4d:8f:80:07:76:94:82:99:
         9b:d7:b5:c2:07:49:20:a4:cc:01:c4:81:d3:30:4a:d4:82:5d:
         76:86:11:c2:d0:17:ec:38:43:33:cf:05:55:91:9e:ce:3a:d8:
         86:0b:10:b2:7a:1c:42:5e:fd:c4:ab:ee:69:da:75:06:ac:7a:
         f6:39:77:d6:17:c6:13:14:3d:18:59:46:fa:af:b9:27:0b:1d:
         13:e2:a3:52:59:91:48:2c:b4:bf:12:a7:bc:3c:af:21:6a:2a:
         88:f8:21:ac:ed:ef:70:c5:89:30:cb:8d:cd:98:f2:c0:ed:71:
         4d:ae:ba:a6:66:bd:9c:0e:63:86:af:19:c4:21:80:68:35:6d:
         dc:16:f6:df:6e:ed:8c:7b:d1:cf:05:87:51:25:9f:70:a9:07:
         33:36:99:05:25:fd:33:34:3a:08:0b:01:fe:f0:a6:dd:af:f1:
         83:7a:77:b6:cf:a5:a5:15:4a:5b:2b:b9:f9:47:9e:88:1c:70:
         d1:11:3a:49:db:70:c4:f0:04:8f:1c:33:84:d5:f9:f9:5d:99:
         a8:c3:e1:e8:2a:d8:8c:f6:a9:b7:58:a7:a4:85:57:0b:b8:48:
         36:ca:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:04:27 2026 by rpki-client