Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e302e302f32302d3234203d3e203535393637.roa
File:                     3138302e37362e302e302f32302d3234203d3e203535393637.roa (raw, json)
Hash identifier:          P3R4mnKUUApLcDLIvpBDLkV37fqAZcmmzvw81T3mpiQ=
Subject key identifier:   A8:43:89:B3:BF:21:7D:64:49:66:FE:3C:B4:9D:30:54:8A:80:88:1E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       16E963FC27773A0FAAF33ABD86F7225FCB1BBD02
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e302e302f32302d3234203d3e203535393637.roa
Signing time:             Sun 19 Apr 2026 11:47:16 +0000
ROA not before:           Sun 19 Apr 2026 11:42:16 +0000
ROA not after:            Sun 18 Apr 2027 11:47:16 +0000
asID:                     55967
IP address blocks:        180.76.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:63:fc:27:77:3a:0f:aa:f3:3a:bd:86:f7:22:5f:cb:1b:bd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:42:16 2026 GMT
            Not After : Apr 18 11:47:16 2027 GMT
        Subject: CN=A84389B3BF217D644966FE3CB49D30548A80881E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:a8:3e:01:0c:13:54:2f:ec:84:93:46:e4:
                    e4:66:d0:f8:2c:41:2d:9f:a4:f5:c0:db:a6:a7:11:
                    35:ba:58:fe:f1:59:64:03:f2:6d:10:d5:f9:e5:a0:
                    cb:a0:cc:0c:b7:70:7b:17:3c:c9:4a:29:29:86:91:
                    7d:54:53:2b:49:70:3a:a2:f2:95:a3:a8:9a:c5:11:
                    8a:78:d5:bf:54:00:ee:7f:f1:f0:6d:4f:62:e7:e6:
                    28:dd:9a:47:16:41:d4:7f:35:92:a7:83:ab:18:c8:
                    af:bc:c8:c4:ef:cc:41:5c:19:2e:07:df:99:2a:5e:
                    5a:65:76:7d:28:bc:ca:07:c8:6d:e5:38:2f:74:7e:
                    45:a5:e1:08:31:f1:a3:63:f4:ee:7f:72:2d:36:26:
                    7b:22:91:f4:c2:4b:db:3d:a8:f0:02:c9:70:3a:22:
                    d0:48:88:fd:a7:95:50:ca:1c:05:6f:ff:b6:a8:d2:
                    09:1f:f5:a0:fd:7a:2b:74:b9:16:b1:93:6c:f9:f4:
                    84:3b:50:77:4d:d8:45:98:6e:a6:78:10:a2:15:e4:
                    46:75:e3:b6:60:cf:b6:46:3e:31:7f:0e:ad:06:0e:
                    a5:c7:8a:90:0d:59:99:9a:13:fa:5a:ec:8c:47:6f:
                    4d:93:54:56:37:b9:a5:57:35:64:59:68:2b:74:2f:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:89:B3:BF:21:7D:64:49:66:FE:3C:B4:9D:30:54:8A:80:88:1E
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e302e302f32302d3234203d3e203535393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:b6:7f:07:9d:05:66:f4:df:b1:26:6a:53:47:5a:75:8f:
         dd:95:ea:41:bb:1c:57:f6:d3:f6:7d:5b:c4:41:fb:61:b1:30:
         58:6b:40:85:a6:21:a7:cd:6f:a1:77:30:42:fe:c1:a0:d4:c7:
         74:bc:64:45:5b:90:08:62:5b:14:d9:20:8a:fe:0d:fb:2f:c6:
         90:03:69:71:1d:c7:6c:9f:b8:14:a3:5a:7a:0c:dd:8f:d1:fd:
         df:a9:0f:7c:ae:1d:2b:a4:f7:9c:91:da:77:b6:02:5e:13:ac:
         83:10:6b:5d:9c:9a:01:c0:92:0b:16:e2:18:7c:00:ec:d8:72:
         99:26:f7:e9:92:50:0f:71:71:2f:ff:02:ef:65:25:80:bd:46:
         f1:5f:9a:7b:b5:92:30:88:6e:25:0d:a4:63:e0:cc:1f:83:15:
         9b:a9:a3:4c:01:b1:b8:d3:69:df:e2:cd:a9:99:93:26:55:c3:
         92:b0:e7:91:7e:ef:ee:85:5c:a8:de:25:ab:8f:42:b2:dd:b4:
         b3:e3:b1:e6:a7:37:05:6b:d8:24:76:58:aa:84:30:96:68:84:
         29:c6:68:7f:98:9a:1a:73:f4:de:c5:a7:64:94:b3:0a:7d:fb:
         e5:08:9d:c7:05:80:3c:cb:b9:fc:b3:07:0f:8d:b0:91:3a:2e:
         79:42:d6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:23 2026 by rpki-client