Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e31362e302f32302d3234203d3e203338333635.roa
File:                     3138302e37362e31362e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier:          DdW/OhoAMODKMKeIkIXBeVAcqXnACLI2gAFZmumOx80=
Subject key identifier:   F8:01:D0:73:80:C9:A2:B9:95:1F:51:33:2D:4E:8C:8C:2F:13:7C:FE
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       64EEF71B38F80166EC4ECCAF8B0912790C34C908
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e31362e302f32302d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 11:50:14 +0000
ROA not before:           Sun 19 Apr 2026 11:45:14 +0000
ROA not after:            Sun 18 Apr 2027 11:50:14 +0000
asID:                     38365
IP address blocks:        180.76.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ee:f7:1b:38:f8:01:66:ec:4e:cc:af:8b:09:12:79:0c:34:c9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:45:14 2026 GMT
            Not After : Apr 18 11:50:14 2027 GMT
        Subject: CN=F801D07380C9A2B9951F51332D4E8C8C2F137CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a5:0a:98:2c:83:15:57:cd:af:3a:d5:cd:5d:
                    fd:e6:cb:a8:6a:8b:1d:e5:3a:b5:ee:7d:a1:12:f2:
                    80:19:9b:0f:94:4d:08:57:4c:c9:f7:95:c8:48:0a:
                    c6:72:e6:a7:7d:f2:ea:89:25:46:84:9e:df:ff:cb:
                    c8:44:80:7b:0b:b4:ea:15:f0:0e:ad:84:fb:dd:51:
                    92:ea:d6:67:c0:18:f3:d5:53:15:39:3c:3c:1c:80:
                    26:7a:cf:db:7c:46:25:a8:4f:d4:6b:cd:40:df:61:
                    48:56:10:5c:82:0e:e7:5c:14:0f:74:af:16:d9:d4:
                    4b:a5:67:8f:72:67:e2:0f:af:cd:f9:a9:f6:d5:49:
                    5c:e9:28:29:3c:79:74:78:c2:b3:7f:8d:65:4f:ca:
                    c6:02:1e:65:3f:1b:1b:ce:80:06:76:d4:96:1b:4d:
                    53:d4:b8:f2:00:62:77:db:da:22:bd:6c:d9:c5:bf:
                    a5:b6:4f:51:68:73:56:ee:58:2f:c8:56:56:2d:65:
                    5a:02:ae:c1:6c:3e:a3:47:dd:1a:a6:c0:73:09:8a:
                    0e:17:5d:bc:6a:3c:fc:45:da:29:60:43:58:57:98:
                    fa:5c:1a:f2:d6:0f:e4:97:8a:7a:74:fd:ed:93:0d:
                    0b:4f:7a:ce:f3:d4:ee:d4:fa:9e:40:b8:2d:3d:94:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:01:D0:73:80:C9:A2:B9:95:1F:51:33:2D:4E:8C:8C:2F:13:7C:FE
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e31362e302f32302d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:60:0c:c8:cd:d7:b8:4d:3e:41:3d:d7:11:9b:a2:dc:a4:
         a7:b4:18:8a:48:3c:fe:a3:f5:b8:40:53:b2:a0:e7:b7:dc:8f:
         b3:10:8a:1d:86:ae:f6:6b:84:6d:12:9f:9b:cc:12:e2:e0:05:
         fb:6c:0d:83:c2:f7:13:ef:f4:b0:12:1e:97:b0:6a:7f:ec:13:
         5f:33:28:45:22:02:90:6e:4b:26:1f:68:e3:0d:da:4a:a0:96:
         50:97:a8:22:ce:39:23:9d:fb:cd:f8:94:6f:ba:32:d8:d4:66:
         a2:d9:d8:f6:ea:36:fc:ee:0d:98:8e:b0:7a:a2:d7:23:36:7c:
         88:6f:4a:d8:d5:a5:0f:18:cf:5b:9e:8d:6d:64:08:5b:aa:0d:
         7f:ca:17:98:a3:ef:c6:ef:35:08:c7:f8:de:fb:cf:5b:7a:9b:
         a9:35:0c:70:f2:b9:98:3d:91:23:02:99:21:82:d3:a5:7e:68:
         5a:8f:63:65:ef:28:56:33:f1:53:37:f2:74:ea:71:db:47:3a:
         aa:86:d4:67:6f:a8:dd:da:4c:2c:86:d4:a2:68:ad:c8:44:fe:
         6d:84:29:8b:50:32:d6:17:76:45:3d:93:bf:d5:9b:13:e1:1f:
         72:28:32:8e:ed:23:33:89:9b:35:63:2f:04:8b:4c:4e:bf:c0:
         cf:7d:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:17 2026 by rpki-client