Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139382e302f32332d3234203d3e203538353430.roa
File:                     3138302e37362e3139382e302f32332d3234203d3e203538353430.roa (raw, json)
Hash identifier:          g0D3pHHu4ONFCA/JCmMBoai2MRol6Q4x5fzE3Noef28=
Subject key identifier:   E9:AA:07:38:B1:CC:C9:83:90:96:4E:90:C4:91:C5:97:AC:F3:B9:2F
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       495514E9335F3626CDFD6BC16437DBCE1469E429
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139382e302f32332d3234203d3e203538353430.roa
Signing time:             Sun 19 Apr 2026 12:38:25 +0000
ROA not before:           Sun 19 Apr 2026 12:33:25 +0000
ROA not after:            Sun 18 Apr 2027 12:38:25 +0000
asID:                     58540
IP address blocks:        180.76.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:55:14:e9:33:5f:36:26:cd:fd:6b:c1:64:37:db:ce:14:69:e4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 12:33:25 2026 GMT
            Not After : Apr 18 12:38:25 2027 GMT
        Subject: CN=E9AA0738B1CCC98390964E90C491C597ACF3B92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:88:8c:36:1b:68:d1:0a:99:e5:09:e8:3b:
                    cd:29:5f:1a:72:ee:53:5a:40:36:9d:5d:19:e0:4d:
                    10:8b:08:f1:26:98:ad:ca:d3:47:44:f2:80:ce:5c:
                    49:19:69:f9:31:40:1e:24:70:ca:6b:6a:a9:da:b4:
                    54:ac:32:b0:37:90:2a:2a:70:c4:2a:41:7c:81:06:
                    97:04:1d:4d:a2:82:aa:5d:cc:23:a7:3b:74:fd:8c:
                    ea:3d:ca:6f:6b:64:1e:9b:85:94:5a:6d:7f:2c:86:
                    a3:fc:06:10:71:0a:7a:c9:f5:3e:6a:d2:2c:5d:6f:
                    30:04:1b:1b:b9:c9:12:68:07:3f:05:46:a8:d8:54:
                    47:ec:6f:6b:cc:24:e9:fe:80:ef:fa:8b:59:7d:12:
                    25:6e:ca:e2:c4:2c:e9:6a:0a:94:b1:b2:ba:66:19:
                    b6:63:86:36:42:8e:60:fd:af:02:15:76:98:85:25:
                    95:25:94:d4:f4:63:4c:12:f7:ed:0a:f6:c5:81:aa:
                    b0:22:8f:2e:a9:db:05:7f:a2:0f:69:eb:7a:f4:c5:
                    6a:10:1b:ee:ea:b1:95:9e:4b:b3:63:f4:f1:92:20:
                    7f:31:75:91:33:be:90:42:4d:ec:fd:60:ed:3f:a2:
                    e2:e8:5b:a4:db:41:d1:4c:08:60:a1:28:1a:3b:48:
                    29:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AA:07:38:B1:CC:C9:83:90:96:4E:90:C4:91:C5:97:AC:F3:B9:2F
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3139382e302f32332d3234203d3e203538353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:64:54:29:4e:95:c8:d6:04:e2:82:9a:5f:37:50:21:87:
         bd:7a:01:d9:0b:b3:fa:fa:6c:6d:5a:47:ad:ac:62:48:f8:b1:
         ce:8c:19:02:a4:ec:c6:d4:6f:a3:ca:4e:e3:b8:b2:9f:a3:2d:
         bf:11:d9:de:71:45:ee:6f:d9:f4:ad:cf:a0:32:43:c4:e2:20:
         83:99:31:ce:a9:e3:86:4b:6e:f8:71:f7:79:4b:38:80:e2:1e:
         8b:34:dc:a7:da:5d:ea:6e:bf:b7:8c:0f:76:9e:db:62:7f:46:
         18:c1:3a:27:7d:c8:d4:4c:7a:00:97:55:64:5e:e0:c6:cc:29:
         d3:2f:c0:dc:45:82:0e:79:ae:7b:ab:e5:d2:f1:f2:1b:28:a0:
         02:a1:63:9d:3c:96:41:08:00:3b:02:e2:75:70:6f:79:50:aa:
         62:c9:20:36:16:34:9e:5b:62:7e:39:10:f5:b1:5b:42:c0:82:
         0b:c0:aa:6d:72:e9:01:b5:b0:d6:7c:8c:b1:14:42:ca:34:21:
         e3:a0:dd:db:0d:dd:ee:ba:f2:11:b2:61:b1:75:8e:5f:57:4e:
         fb:c6:79:9f:57:f9:e3:12:8f:75:32:76:38:83:4f:62:ed:47:
         f0:5e:09:8d:e9:84:1a:e1:ef:af:3a:8b:25:ab:15:37:d2:ae:
         2f:26:81:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:59 2026 by rpki-client