Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139382e302f32332d3234203d3e203338333635.roa
File:                     3138302e37362e3139382e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier:          UVM6KYHj1TQn2nWf6AGD3F7bxLArs+nH3PN/QkduE+g=
Subject key identifier:   2D:77:0C:06:8C:EA:FC:2A:54:23:EF:F1:24:32:F7:1E:63:96:93:4D
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       12B96170DA7F2220D0EEE9BE04F6D85133A8EC72
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139382e302f32332d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 12:38:25 +0000
ROA not before:           Sun 19 Apr 2026 12:33:25 +0000
ROA not after:            Sun 18 Apr 2027 12:38:25 +0000
asID:                     38365
IP address blocks:        180.76.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b9:61:70:da:7f:22:20:d0:ee:e9:be:04:f6:d8:51:33:a8:ec:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 12:33:25 2026 GMT
            Not After : Apr 18 12:38:25 2027 GMT
        Subject: CN=2D770C068CEAFC2A5423EFF12432F71E6396934D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:d8:94:3f:35:38:02:06:3c:b5:f3:c2:05:
                    cf:14:ea:4d:5b:02:84:e1:34:ac:10:73:1a:10:ed:
                    71:8e:56:fa:24:c1:18:a2:6d:95:68:8d:3f:b9:3e:
                    37:96:4c:d6:0e:36:39:26:0d:b1:bb:85:ff:43:13:
                    fa:80:06:72:65:a8:ad:15:10:d5:12:8f:55:99:04:
                    46:a1:59:5d:34:a7:75:68:bf:c8:4e:64:3d:de:c0:
                    9d:3e:1c:63:de:89:78:47:99:12:36:db:b6:3f:32:
                    bb:32:53:7a:4b:d1:31:1c:e5:1d:52:b2:80:fa:e2:
                    f3:2e:9c:2c:33:f3:9e:77:f5:51:2d:10:0a:b8:22:
                    85:78:e9:19:93:0a:36:c9:b1:27:95:c7:dc:60:4b:
                    6c:35:57:f1:5c:4e:83:68:70:55:57:c4:ec:8e:9a:
                    73:f1:91:2a:15:ac:c5:cb:ed:5c:e6:9a:64:39:d3:
                    c1:ad:98:37:9d:ef:f0:51:7e:db:e1:5e:1a:5b:be:
                    a7:80:a0:f0:3d:7c:30:87:01:86:47:0b:6d:42:4d:
                    59:4e:c0:a4:52:5e:00:0f:67:a6:24:8c:53:41:f5:
                    b3:a5:cb:da:63:ad:0a:12:59:30:a5:6e:86:d9:d3:
                    2e:bc:ef:29:ac:6a:89:13:13:98:0d:f6:56:6b:4b:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:0C:06:8C:EA:FC:2A:54:23:EF:F1:24:32:F7:1E:63:96:93:4D
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139382e302f32332d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:1b:b6:78:52:c0:32:44:09:4b:e2:4a:aa:d6:7a:be:6e:
         f5:45:01:68:89:33:c4:10:1e:2f:f7:db:d7:78:c6:ca:5b:67:
         b6:06:0b:1a:b1:c6:a8:d3:ab:e1:68:32:e7:13:4c:8d:b9:38:
         84:78:1f:c7:47:cd:11:15:ac:fe:37:b2:c6:00:bc:d0:2e:c2:
         58:8f:44:50:66:3b:c4:d7:34:82:23:6b:e5:49:15:ed:c4:6e:
         d3:fd:83:58:58:ae:95:6f:c9:79:97:da:f1:62:4a:87:1f:1b:
         be:66:25:de:85:1f:90:c2:f4:27:66:cc:42:c4:ed:fa:ad:44:
         18:9f:19:f4:d4:7e:fa:14:84:db:b2:0e:ff:41:cf:c2:f4:48:
         b8:71:b3:4e:8b:45:e1:95:05:37:52:67:ee:ab:b7:0c:03:e3:
         cc:41:96:37:00:54:ba:56:07:ac:f7:66:43:cc:7b:ae:84:a8:
         9f:6b:1f:7b:8f:52:ef:0c:28:8b:22:31:e2:7e:49:10:12:af:
         4e:f4:b7:7c:7d:f4:4f:15:15:56:28:b1:be:cc:65:05:21:b9:
         02:38:1e:96:5e:8f:2c:7c:48:c4:4f:11:98:54:10:c1:0f:3a:
         3a:b2:a7:82:b1:a9:09:86:87:61:94:f0:b3:c5:d0:0e:61:f9:
         7c:3f:df:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:32:36 2026 by rpki-client