Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230302e36342e302f31382d3138203d3e2034383038.roa
File:                     3132342e3230302e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          96l27eUOM9Bt+FhbrebDQvcD22GlfHPPEfnN7pFNf6c=
Subject key identifier:   0D:F3:58:E5:7F:C0:35:30:AA:BF:0E:2D:0E:2E:C0:13:41:48:D9:85
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       7BC72925A0F9D6069A07DA6C0708D7CFB006A552
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230302e36342e302f31382d3138203d3e2034383038.roa
Signing time:             Wed 13 May 2026 03:46:14 +0000
ROA not before:           Wed 13 May 2026 03:41:14 +0000
ROA not after:            Wed 12 May 2027 03:46:14 +0000
asID:                     4808
IP address blocks:        124.200.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c7:29:25:a0:f9:d6:06:9a:07:da:6c:07:08:d7:cf:b0:06:a5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 13 03:41:14 2026 GMT
            Not After : May 12 03:46:14 2027 GMT
        Subject: CN=0DF358E57FC03530AABF0E2D0E2EC0134148D985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:16:5d:e0:59:5e:a5:ca:9d:14:4f:65:8f:
                    f3:db:21:c9:cd:50:c1:ac:77:46:1a:68:a4:7f:05:
                    ec:b9:11:f2:11:8c:fc:6b:a5:70:39:9e:d2:24:ae:
                    bd:f3:2a:f3:13:06:8b:8c:7b:a7:db:17:e0:74:5e:
                    ca:54:ec:8e:d6:6d:a8:2b:4f:26:95:a8:60:e4:c6:
                    f6:d0:31:85:40:cb:ae:e1:ff:85:93:69:6f:63:78:
                    4e:7c:c7:ca:b7:1a:1d:48:b2:18:76:4c:b1:aa:86:
                    a2:62:51:a4:be:16:c2:95:7c:f9:e2:5a:6b:c5:44:
                    af:14:64:f0:59:5b:10:cf:bb:37:1b:5b:dd:e0:5e:
                    7d:ba:a8:02:f3:c5:07:4b:38:dd:c3:d5:5e:7e:ea:
                    f2:d6:ab:38:a5:a4:78:c9:4b:63:70:b6:d9:cc:75:
                    fa:27:dd:9b:ed:4f:3a:af:e6:b3:43:0a:b1:db:32:
                    e8:e8:c1:75:c0:05:1c:c3:b5:14:84:46:7d:db:33:
                    ad:99:f6:30:26:f2:01:58:8e:1e:f1:26:67:07:d7:
                    28:41:01:f0:38:9b:54:5d:52:8c:b0:f1:c4:28:0a:
                    c2:95:2d:7f:fa:a5:78:ee:96:6b:98:b5:22:78:54:
                    d6:54:89:b4:fb:75:4f:3a:d9:71:d4:37:68:31:8b:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F3:58:E5:7F:C0:35:30:AA:BF:0E:2D:0E:2E:C0:13:41:48:D9:85
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230302e36342e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.200.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:60:c9:08:13:b2:ca:9c:d8:4d:31:30:34:5a:70:ff:ae:
         a7:a9:0c:8f:44:40:e6:fe:4d:28:b6:05:de:05:6d:e5:a6:91:
         ff:9b:f6:bc:21:0c:29:bd:15:aa:f9:b3:3f:ea:53:fa:39:c0:
         74:4c:e0:b4:ea:a4:e0:c9:6d:d3:d8:30:6d:b1:d0:b4:17:71:
         8e:34:69:f5:b2:69:36:5b:de:67:aa:5f:92:0c:41:fe:bb:b8:
         76:56:c4:32:75:92:3b:d7:43:61:2a:14:15:06:48:43:e2:e8:
         fc:f8:92:4e:9c:51:da:6d:51:07:60:58:4a:0d:de:16:80:22:
         5c:9b:8d:49:2d:b6:65:10:a0:06:fd:20:a7:77:b2:55:b3:97:
         8b:c5:f5:9f:c3:31:c7:02:06:ae:3c:40:b9:9e:f6:30:01:c2:
         52:9e:19:16:c1:dc:80:5e:49:81:c4:be:dc:e0:32:6f:ed:8c:
         9d:d6:e7:73:78:92:80:0f:d3:4d:6d:09:c3:53:fd:ab:31:fa:
         9f:20:8f:1c:57:4d:d0:e6:22:6d:be:17:2b:6d:02:ff:64:fe:
         c5:26:8f:84:0b:9a:48:62:d7:0d:68:7c:c8:9f:42:80:7b:07:
         d6:ae:1a:69:84:08:70:f6:f1:bc:06:26:51:d8:55:aa:76:8a:
         64:76:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:32 2026 by rpki-client