Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3132382e302f31382d3234203d3e203338333635.roa
File:                     3138302e37362e3132382e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier:          t2yDYzfR6tLz1IFndbLzrSRb/U7R5xIygzwuq+dMV8Y=
Subject key identifier:   AF:AD:CD:3A:32:FC:4B:F9:4E:27:13:E8:9C:58:38:A9:84:33:2A:5E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       5152FC72EE7B4D53149119164141EA7DA50488C0
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3132382e302f31382d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 12:53:22 +0000
ROA not before:           Sun 19 Apr 2026 12:48:22 +0000
ROA not after:            Sun 18 Apr 2027 12:53:22 +0000
asID:                     38365
IP address blocks:        180.76.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:fc:72:ee:7b:4d:53:14:91:19:16:41:41:ea:7d:a5:04:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 12:48:22 2026 GMT
            Not After : Apr 18 12:53:22 2027 GMT
        Subject: CN=AFADCD3A32FC4BF94E2713E89C5838A984332A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:c0:0d:cb:6e:82:2c:3b:2e:ad:5d:67:f8:
                    1e:eb:3e:9e:39:6d:cb:9c:c2:0a:43:07:08:96:86:
                    e6:5c:c6:25:c0:24:92:9f:e1:42:f9:5d:a6:82:9f:
                    22:c8:eb:95:a7:63:6a:75:ef:3a:58:b5:f5:b4:09:
                    5a:a7:a9:70:2c:42:b7:42:2c:fc:90:23:ed:f7:07:
                    aa:1d:78:6f:88:d7:3a:90:9a:d4:1d:37:7d:84:91:
                    b8:49:21:6f:e5:30:9d:4d:4c:3d:06:37:da:d0:68:
                    66:5e:3a:a2:b4:bd:ff:1d:c5:27:67:21:2e:7b:95:
                    3f:f6:98:1e:b2:1a:4f:65:af:36:cc:ce:91:b8:b6:
                    91:cf:7d:1d:60:8a:a8:03:eb:9c:b0:c0:e4:8a:86:
                    44:b9:91:d6:ab:32:dd:d5:67:1b:66:1c:1e:4c:c0:
                    fb:df:31:be:f1:bf:76:4b:df:fc:04:e4:ab:a1:9e:
                    2f:1d:06:91:e7:81:0e:03:3a:a8:91:ef:51:af:3e:
                    95:e3:36:e0:38:9c:86:77:4a:a2:ee:cd:ce:28:60:
                    7c:7d:64:71:52:7b:34:33:2d:63:64:bb:e9:ff:e2:
                    8b:e1:20:d7:cc:04:a7:c5:ec:a7:8a:12:27:10:ce:
                    fa:f6:67:13:0a:2a:36:61:a8:f7:1d:7b:b4:1f:33:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AD:CD:3A:32:FC:4B:F9:4E:27:13:E8:9C:58:38:A9:84:33:2A:5E
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3132382e302f31382d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:85:50:0d:90:e6:08:9a:20:f6:17:fd:85:96:5e:e5:95:4f:
         5c:79:85:4c:64:82:1d:e4:87:92:23:d8:3f:d0:a1:fd:f1:dd:
         5a:4a:ae:cd:24:2b:c0:ca:f6:4d:6e:d4:0c:e6:fe:2d:ff:5f:
         ad:04:3a:55:78:7f:89:ca:ad:a8:51:6c:f1:2f:07:0c:68:50:
         04:03:d2:78:40:f8:c4:b6:44:a4:65:1d:91:d3:a6:a9:0f:ee:
         48:f1:8b:c1:c2:aa:d7:72:62:2f:69:5c:f9:d4:4c:a6:b7:47:
         19:5a:b4:2b:70:cc:05:54:1d:88:51:f0:e2:75:42:0e:95:54:
         e5:ce:4a:c8:aa:8a:41:ee:67:c8:2c:dd:68:af:c5:1d:87:d8:
         64:66:26:94:09:e5:5f:6f:77:a6:25:8c:5c:60:2d:67:13:c6:
         9b:f6:fe:a2:a3:5e:06:be:9d:c3:3b:52:0a:1f:c6:9b:29:f4:
         ca:35:9d:a1:d9:21:4e:89:87:f0:9c:3b:3c:45:29:03:7e:de:
         1b:9a:7b:0f:0f:cc:73:11:9a:f4:bb:59:a5:4c:74:d6:0e:05:
         6f:b8:39:49:e3:1e:66:c9:37:72:df:b6:12:4c:13:83:32:09:
         60:93:61:0e:16:ef:09:08:14:19:d8:12:bb:15:ea:3b:b2:38:
         76:9d:77:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:07 2026 by rpki-client