Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e3132382e302f31382d3138203d3e2034383038.roa
File:                     36302e3139342e3132382e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          fHg9dra9mMab3aobPYJjZr/VYfI3JbdqpfcMGmLeyj8=
Subject key identifier:   F4:FD:E6:76:79:F6:25:DC:6B:CB:22:0D:84:4C:00:59:F4:E3:FD:A7
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       76B202BF2A3BD65B5DE62A472DE40EF494E4F76B
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e3132382e302f31382d3138203d3e2034383038.roa
Signing time:             Wed 13 May 2026 03:41:32 +0000
ROA not before:           Wed 13 May 2026 03:36:32 +0000
ROA not after:            Wed 12 May 2027 03:41:32 +0000
asID:                     4808
IP address blocks:        60.194.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b2:02:bf:2a:3b:d6:5b:5d:e6:2a:47:2d:e4:0e:f4:94:e4:f7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 13 03:36:32 2026 GMT
            Not After : May 12 03:41:32 2027 GMT
        Subject: CN=F4FDE67679F625DC6BCB220D844C0059F4E3FDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:e5:b2:87:6b:3b:47:6c:12:3c:29:65:bc:
                    b4:08:a5:5f:e8:27:ec:cc:49:a2:be:45:9e:5e:21:
                    d3:20:c1:b6:04:d8:92:55:db:8d:8e:e4:af:88:e7:
                    ed:09:60:71:fe:fb:69:72:c5:5e:80:37:ad:1c:e6:
                    53:3b:36:5e:c6:e8:48:9f:70:a3:5b:bd:e2:89:ce:
                    94:84:03:26:08:ea:55:26:47:8a:3f:4d:0a:22:20:
                    6a:81:1c:cb:98:d4:b9:f0:2a:70:22:ae:46:30:78:
                    22:8c:fd:f5:dc:df:58:25:dc:a5:16:cf:58:d7:13:
                    b3:fd:9d:70:66:96:b8:26:2a:a3:7f:13:b0:07:a3:
                    34:bc:18:e1:0f:90:9d:2a:1a:d0:71:09:4d:4c:ed:
                    44:cf:d9:a3:47:5d:96:05:24:05:15:21:57:59:ec:
                    52:23:97:dd:1b:74:92:f6:9c:d4:e3:fb:b8:01:42:
                    ae:69:a2:3e:a7:28:cf:dc:e3:1d:01:f4:2f:50:75:
                    3b:e3:82:38:d7:ff:4e:8d:d1:9b:b8:ae:a5:99:72:
                    4c:be:e1:d1:8c:64:7c:f2:0b:fd:3a:f6:51:ab:24:
                    d7:e7:be:de:e9:0e:96:db:2e:b2:d7:38:c1:f6:a6:
                    ae:8f:06:10:96:f7:0e:86:58:d2:21:45:c6:d6:29:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:E6:76:79:F6:25:DC:6B:CB:22:0D:84:4C:00:59:F4:E3:FD:A7
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e3132382e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.194.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:8d:19:ec:15:81:5a:d3:54:30:b0:64:ac:60:54:88:14:
         0c:38:7c:5f:dd:f0:78:6e:ff:84:04:cd:9c:5a:a7:8b:ac:bf:
         a8:96:ba:4e:0c:77:2e:12:9c:c5:7b:85:37:96:04:f7:02:ff:
         fa:e2:72:50:92:22:a3:dc:88:0f:b4:29:a9:29:ee:06:72:1e:
         45:20:3f:c4:54:f3:8b:60:45:a5:f0:c3:26:e9:ce:3a:d5:d6:
         a3:50:f8:d5:d5:2c:5f:8b:3e:ef:36:c6:d1:0d:77:87:e3:94:
         52:ba:10:cd:f3:db:55:43:e3:8e:d9:da:8e:bb:9a:a6:2c:a5:
         b9:58:87:ca:04:19:f4:09:f6:c3:01:fb:b5:50:09:d2:4e:80:
         ba:cd:53:b7:6c:d3:14:05:b5:aa:4b:f0:b2:77:46:26:30:61:
         d2:04:4b:52:05:4c:ba:dd:3d:1b:1f:d1:da:69:ee:bd:81:b5:
         06:3f:b5:ca:46:7d:64:9a:86:a7:2a:ea:f2:be:2b:e5:87:10:
         39:bf:61:a6:52:e9:96:99:2c:ff:ce:4a:0f:b6:4a:7f:16:4d:
         2b:32:2e:f7:92:0a:a0:a3:bf:30:d4:6f:a6:48:84:b6:00:fb:
         c2:02:10:15:6f:dc:15:74:91:0c:c9:d0:2c:6a:5c:05:22:05:
         7f:25:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:03 2026 by rpki-client