Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230302e3139322e302f31382d3138203d3e2034383038.roa
File:                     3132342e3230302e3139322e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          siOmptHKKPhmD0LkiglfdI4+WM8ba/G2yXc6wv+RztY=
Subject key identifier:   06:FD:88:C5:99:C6:62:C1:1E:E7:A8:3C:2F:F6:16:5B:B2:30:D6:4C
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       4D55C2365050DE30012ABE99585C2631FC4030B4
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230302e3139322e302f31382d3138203d3e2034383038.roa
Signing time:             Wed 13 May 2026 03:46:14 +0000
ROA not before:           Wed 13 May 2026 03:41:14 +0000
ROA not after:            Wed 12 May 2027 03:46:14 +0000
asID:                     4808
IP address blocks:        124.200.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:55:c2:36:50:50:de:30:01:2a:be:99:58:5c:26:31:fc:40:30:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 13 03:41:14 2026 GMT
            Not After : May 12 03:46:14 2027 GMT
        Subject: CN=06FD88C599C662C11EE7A83C2FF6165BB230D64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:5f:4c:ab:05:92:90:c2:4f:a0:d4:01:08:
                    f9:db:41:0b:55:2d:97:c0:0b:3e:1d:fe:0d:6b:f6:
                    27:07:15:c8:51:7f:bf:80:ca:44:00:78:33:1e:76:
                    2d:a0:55:9b:0f:38:a6:5b:99:e6:92:39:0d:c7:e7:
                    61:77:10:3b:ec:76:93:51:d3:88:39:26:8e:ec:36:
                    3d:c9:4e:7d:0a:13:77:4e:5a:f7:ae:9d:c6:a5:73:
                    a7:ae:10:71:22:a4:ba:29:a1:b0:cc:72:7e:bb:bf:
                    0e:1c:e4:57:f1:34:e0:c6:54:f9:7e:f7:dc:63:00:
                    7f:32:3c:1c:e1:b3:31:9d:ae:a1:e1:04:ae:b1:7d:
                    11:1a:cf:21:c5:3e:f6:e9:6d:0d:92:91:62:21:27:
                    af:06:3d:e0:36:34:24:51:9e:3b:5b:a7:10:c6:27:
                    e8:36:75:80:33:e4:c0:ee:e1:f5:f0:62:53:cb:fd:
                    7e:ea:7f:b1:2f:f3:17:f6:e0:fb:24:72:8e:ab:62:
                    51:17:33:ac:a7:3a:12:1b:c9:02:2b:44:d5:90:62:
                    79:e6:86:25:ab:6b:99:de:04:9a:5d:af:ce:97:53:
                    61:79:d0:ee:98:95:b9:64:cf:cc:95:c4:ef:1a:44:
                    b6:0d:71:06:f9:ac:d0:91:5c:6f:53:e1:93:d9:dd:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FD:88:C5:99:C6:62:C1:1E:E7:A8:3C:2F:F6:16:5B:B2:30:D6:4C
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230302e3139322e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:11:be:75:d8:0e:a4:90:fc:b5:37:30:26:dd:b4:e4:de:e2:
         68:a7:9f:da:a7:82:a7:9d:33:cd:3b:42:30:73:68:6c:60:94:
         b6:db:ce:22:d0:91:60:5a:7b:fe:74:bc:72:4b:a8:c7:68:8d:
         fb:0e:4b:1e:c4:d6:fa:bf:c2:86:7d:6a:b2:15:b8:56:a6:6e:
         6e:99:27:ac:bf:41:74:65:e7:7b:40:e5:4b:8f:80:03:73:d5:
         7e:ab:ad:6a:69:0e:b9:2d:3b:1a:5d:b4:57:ea:3b:a0:ea:ab:
         51:4a:d9:32:ce:47:7b:64:6d:5e:5f:3e:19:01:4c:50:4e:07:
         ab:c8:9e:97:21:f1:74:78:74:0d:37:fd:c7:b2:ea:12:ed:dd:
         c7:1d:85:62:f5:67:b0:37:94:33:9c:f0:af:a2:1a:fb:54:a9:
         bd:18:5c:af:77:80:35:2b:f6:11:18:66:0f:0c:96:70:1e:a2:
         b6:56:e8:38:1f:20:52:97:c6:b3:26:8b:b0:30:83:b1:d8:bc:
         fa:03:28:04:50:42:1f:d4:ed:d4:07:d7:d5:de:86:10:ae:04:
         d0:ed:86:21:53:cb:3c:60:94:06:91:fe:5b:fe:8f:ac:7c:f8:
         85:ad:84:ad:de:6a:ec:70:2f:80:28:6e:5f:d1:63:26:8d:8b:
         53:34:7f:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:29 2026 by rpki-client