Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31362d3136203d3e203233373731.roa
File:                     3138322e38302e302e302f31362d3136203d3e203233373731.roa (raw, json)
Hash identifier:          SL8ao5mBDRj9SKwrevD5m3zw7PU4gwinAemJl8YZrnI=
Subject key identifier:   DF:91:2F:55:9F:B7:22:34:AD:FE:67:84:27:18:15:30:68:F1:70:92
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       0C1AFBEC5526A6D57B1851EE44718B33B62E3FF6
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31362d3136203d3e203233373731.roa
Signing time:             Mon 20 Apr 2026 02:21:32 +0000
ROA not before:           Mon 20 Apr 2026 02:16:32 +0000
ROA not after:            Mon 19 Apr 2027 02:21:32 +0000
asID:                     23771
IP address blocks:        182.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1a:fb:ec:55:26:a6:d5:7b:18:51:ee:44:71:8b:33:b6:2e:3f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Apr 20 02:16:32 2026 GMT
            Not After : Apr 19 02:21:32 2027 GMT
        Subject: CN=DF912F559FB72234ADFE67842718153068F17092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:52:c3:1d:e9:ee:99:d6:c7:02:6e:bb:3f:
                    3b:34:cc:e6:84:60:31:13:f1:af:10:6f:63:6f:df:
                    99:f1:48:02:22:4c:60:f8:23:f8:9e:61:ab:55:9b:
                    91:4c:3f:b5:bb:13:16:cb:7d:9b:4b:0b:46:cd:29:
                    03:d6:a1:1a:56:f5:02:b7:08:3a:21:f1:33:6d:43:
                    40:8e:d1:14:6d:09:87:48:76:30:ce:07:62:9c:c2:
                    1a:70:c4:b1:4b:20:36:d4:cb:2f:d8:c0:ed:81:86:
                    4a:aa:3e:82:01:a2:d2:34:b3:3b:b0:7c:08:52:0a:
                    0c:6a:a5:c5:a3:17:bd:f4:66:36:66:d5:1b:4e:ee:
                    fa:fd:de:5a:44:0a:8d:68:07:e2:91:0a:2e:fc:12:
                    20:88:04:09:8a:37:a8:eb:8e:bf:85:7a:02:86:70:
                    f6:de:8c:08:58:b4:f5:e6:eb:7b:40:6d:9c:9d:ff:
                    0f:0c:ee:2a:ed:a5:c1:45:be:6a:9f:79:0f:79:e2:
                    67:41:f3:4a:61:8a:76:ae:e6:49:12:ae:32:25:f0:
                    79:6a:f1:a2:3f:a8:f1:85:ea:f3:1c:bb:84:1a:01:
                    e7:c9:19:39:fe:b2:cc:fb:90:32:0a:b3:f7:c0:65:
                    1f:7e:3c:c6:db:c1:de:7c:48:48:1b:42:eb:72:ba:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:91:2F:55:9F:B7:22:34:AD:FE:67:84:27:18:15:30:68:F1:70:92
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31362d3136203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:c6:06:f4:31:02:ba:d2:3b:00:29:1d:c2:87:cd:e9:67:
         17:9b:67:11:d5:22:e7:ee:f2:e6:af:f9:46:0c:64:bd:8a:7c:
         58:a8:4e:c3:74:7e:a6:df:86:e0:21:f8:5e:2b:0d:18:21:d0:
         bd:67:be:3b:b3:19:f6:81:f9:be:3f:bc:32:d8:a4:5c:f8:3f:
         a5:d0:7c:da:95:e2:b6:e4:ce:9b:0e:94:05:4c:0f:0b:ab:cd:
         c5:f4:86:62:d5:b7:4c:f5:be:56:76:07:4c:d5:7a:74:55:05:
         39:93:d6:d9:d4:02:ed:ef:c8:13:52:68:88:41:9f:5f:2a:c2:
         5c:b5:1b:a5:cf:35:8b:f1:60:20:55:03:ab:b2:be:5a:3a:e2:
         41:9d:76:45:41:c8:77:7f:7f:1f:db:90:e8:3d:b1:f6:53:40:
         de:22:e4:0b:c6:33:69:d2:d0:50:72:e0:fd:a3:a2:8d:ae:84:
         51:d2:6a:f3:30:bf:34:77:6e:d6:c5:a2:74:06:ab:fe:a8:b6:
         c4:73:ad:07:17:92:04:fb:8d:c8:4d:d0:28:b8:f7:1a:0a:bd:
         a1:2d:57:ce:fe:0a:66:1a:bb:66:00:92:75:4a:53:07:48:56:
         4c:03:02:0e:15:76:b3:f1:ab:ab:1c:41:8b:65:9f:a6:61:69:
         ed:a0:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:29 2026 by rpki-client