Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e302e302f31382d3138203d3e2034383038.roa
File:                     36302e3139342e302e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          YgTAxak9bJ970isMLGg/xtAcarO8yGZze1bmSCyNrhY=
Subject key identifier:   41:80:5D:B4:7F:8C:6A:80:78:3E:A6:31:29:99:B8:B0:95:01:08:72
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       10E966C71D7BEC68A37120D8F64EAA4846EEE456
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e302e302f31382d3138203d3e2034383038.roa
Signing time:             Wed 13 May 2026 03:41:32 +0000
ROA not before:           Wed 13 May 2026 03:36:32 +0000
ROA not after:            Wed 12 May 2027 03:41:32 +0000
asID:                     4808
IP address blocks:        60.194.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e9:66:c7:1d:7b:ec:68:a3:71:20:d8:f6:4e:aa:48:46:ee:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 13 03:36:32 2026 GMT
            Not After : May 12 03:41:32 2027 GMT
        Subject: CN=41805DB47F8C6A80783EA6312999B8B095010872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:f2:ef:f5:47:8c:60:ee:5f:41:46:91:81:
                    8e:ea:42:e0:82:92:20:5c:59:c5:c4:3b:cc:9f:68:
                    43:4c:e4:e6:70:4d:27:56:02:bd:e4:b4:9c:e5:d1:
                    34:cb:00:cc:92:18:3f:16:45:bd:e7:93:f3:9b:56:
                    03:f3:3a:4a:a5:42:9a:90:af:59:dc:76:98:aa:7d:
                    71:66:4f:50:91:df:8f:aa:ef:0f:78:97:f7:ed:e2:
                    43:45:7b:fb:a0:c0:70:6d:d2:f9:e7:bd:40:cd:7b:
                    ad:55:f2:81:81:56:9c:57:33:ce:15:11:8a:65:a1:
                    75:de:53:6b:a3:28:f9:a0:23:d6:04:a6:f7:dc:59:
                    11:42:a1:58:dc:7b:4c:98:af:3a:f7:a9:6c:a6:65:
                    69:0d:73:79:a0:0a:ec:2d:f8:a6:32:f8:7c:84:f0:
                    1d:f2:e3:14:02:02:ea:7a:ff:b0:8e:ae:d0:a0:c4:
                    55:71:d6:73:88:67:eb:6d:f2:ab:d9:c4:b4:49:84:
                    6e:25:a5:63:4a:4c:d0:4c:c0:53:b7:7e:8b:c8:1d:
                    e0:21:6c:9a:bf:b3:63:28:e6:6a:a7:ce:82:d0:32:
                    8f:4e:13:55:85:41:f7:6a:8a:6e:24:aa:27:14:df:
                    90:14:03:5a:55:7c:b2:0d:2f:6b:86:48:12:01:c7:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:5D:B4:7F:8C:6A:80:78:3E:A6:31:29:99:B8:B0:95:01:08:72
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e302e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.194.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:7f:ed:25:4d:a2:6d:4a:0a:0c:c5:bd:cd:14:1d:a5:a3:
         d9:46:0c:bf:a6:1f:f0:73:38:ef:0b:b1:2c:58:d3:3b:c3:ab:
         33:63:ea:d2:d7:b7:ce:d5:d5:d8:9e:d2:ac:05:a5:6a:64:ee:
         8e:a9:95:58:2e:cc:92:36:28:3e:e0:f9:25:4d:53:f7:11:a4:
         7e:4e:21:02:1b:2d:e7:e9:71:c5:98:c3:9a:70:9e:fd:7e:15:
         69:d5:9d:ab:d9:7d:8d:95:dc:3e:55:8f:4e:07:b9:88:2d:52:
         1b:0f:9f:6f:9b:40:6f:5d:12:67:4b:a4:81:64:a9:c6:e8:8e:
         3e:67:e1:cc:9e:14:61:99:c1:3b:86:e6:0b:33:5e:82:58:83:
         98:c3:19:62:5a:34:d7:e6:33:1d:93:d7:e1:47:92:16:49:d5:
         0a:8f:3e:5e:a7:5a:11:a6:0d:63:ad:fa:30:0d:5b:15:1f:09:
         96:57:e4:90:55:2e:f2:1f:aa:85:64:6a:67:12:c3:71:0e:34:
         fa:51:c3:16:4e:9f:01:25:b4:b9:b3:1e:46:d4:5a:88:d4:ae:
         de:92:df:eb:ed:92:ae:90:5f:bd:72:7a:55:72:74:eb:a7:f3:
         bd:54:ca:b6:d7:6d:a0:48:ba:3a:06:d2:63:fc:82:20:93:2a:
         0b:c6:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:25 2026 by rpki-client