Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139362e302f32332d3234203d3e203338333635.roa
File:                     3138302e37362e3139362e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier:          Hvo67BWKxvZfPAx327t6rz0pCFPt8Sv2ygiJM+Y0/w0=
Subject key identifier:   D8:8E:B0:1B:04:62:3E:E3:E6:AE:FD:62:4F:26:28:2A:E8:4C:26:54
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       1C8591F2119AF39254036DA634D95AC9076D1102
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139362e302f32332d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 12:53:22 +0000
ROA not before:           Sun 19 Apr 2026 12:48:22 +0000
ROA not after:            Sun 18 Apr 2027 12:53:22 +0000
asID:                     38365
IP address blocks:        180.76.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:85:91:f2:11:9a:f3:92:54:03:6d:a6:34:d9:5a:c9:07:6d:11:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 12:48:22 2026 GMT
            Not After : Apr 18 12:53:22 2027 GMT
        Subject: CN=D88EB01B04623EE3E6AEFD624F26282AE84C2654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:24:42:3b:7a:d4:9d:0b:3f:81:07:e2:71:
                    cf:17:48:00:08:f2:3c:ce:8d:2e:30:5e:a6:0d:9d:
                    2e:0b:a0:96:27:75:ba:c4:92:89:69:9b:dc:e7:20:
                    6e:b7:36:30:3a:6a:36:be:11:b8:f3:8e:e2:30:c8:
                    bf:fb:1c:c9:42:e7:b2:c9:76:a0:87:7a:97:14:9a:
                    6c:79:9a:82:63:61:c2:53:ec:19:33:e5:fc:93:2a:
                    bb:72:b7:13:31:92:d4:56:59:bd:92:b9:b4:89:a0:
                    0d:b9:8f:cd:0c:3e:7a:e0:37:69:34:af:d0:eb:bc:
                    44:8c:e9:71:a5:89:38:cc:c5:2b:42:3b:7e:9a:76:
                    27:55:37:22:63:6a:e1:82:1d:fb:3b:be:5e:7f:f4:
                    df:64:88:1b:36:c2:7c:30:79:0b:62:d8:37:64:ec:
                    39:13:2d:8c:a9:75:f0:27:47:19:e6:77:90:ae:45:
                    03:d1:61:12:95:62:e4:83:e6:d5:92:bd:04:16:20:
                    fd:07:e1:e6:cc:2b:a7:75:e0:fa:00:09:7a:9c:c7:
                    8e:04:7d:36:e6:31:d5:57:33:93:1e:ce:ce:85:2a:
                    0f:a9:45:b3:05:a9:1b:3c:1e:99:6b:fb:5f:ec:d2:
                    a0:d6:07:da:81:e9:64:55:9e:0a:68:21:f7:31:d1:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:B0:1B:04:62:3E:E3:E6:AE:FD:62:4F:26:28:2A:E8:4C:26:54
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139362e302f32332d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:9d:ad:b9:86:b2:5b:0b:0d:0a:69:26:3a:a0:14:ac:56:
         21:a2:22:81:df:82:ce:6a:2e:e7:9c:ed:04:e7:64:87:55:57:
         13:ff:69:65:1e:8f:49:f4:d5:83:56:89:76:f7:ae:e0:c6:b0:
         18:27:28:5f:d9:9c:1c:8f:26:b8:af:00:dc:48:dd:09:da:02:
         ed:92:20:e0:20:ce:e9:a4:05:e4:91:25:c4:7c:89:66:0d:80:
         cc:5c:45:8a:b6:ea:06:f6:1f:24:14:a3:1b:f7:bc:30:27:0e:
         89:10:14:00:b5:b2:11:1a:6f:14:19:60:d6:5e:db:cd:8e:01:
         69:22:72:5b:0c:c7:90:ea:6d:fa:2d:65:4d:2b:88:cb:6a:50:
         24:a4:bd:9f:ec:2a:7c:6c:81:d9:37:74:12:ab:02:84:40:2f:
         8e:1c:e9:15:86:8b:0b:9b:aa:ee:e4:6c:db:f6:14:25:77:5e:
         f1:6c:e9:0e:83:f5:b6:3c:c1:73:9d:cb:04:af:d7:6b:6a:f3:
         02:3a:50:62:7d:94:2b:fc:3f:e8:93:bf:a7:e0:1f:de:a2:27:
         97:4d:04:22:14:ee:ec:3b:a2:8f:2c:b0:8a:fa:4d:a0:69:4c:
         d0:41:a0:4b:6b:3c:dc:ae:50:51:f4:81:f2:bf:f8:8a:62:df:
         b3:a1:4e:67
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:55 2026 by rpki-client