Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3230302e302f32312d3234203d3e203338333635.roa
File:                     3138302e37362e3230302e302f32312d3234203d3e203338333635.roa (raw, json)
Hash identifier:          FZJZpdE+7Vh0S/uhklPI9xtPSycaonyuCaFFfR0o9z8=
Subject key identifier:   4B:96:52:C1:8A:0A:B3:0B:6B:E4:68:58:F3:DE:BF:08:81:CA:98:65
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       13ABAC59BEEA6FC0784355BFA3C985242C555C12
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3230302e302f32312d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 12:53:22 +0000
ROA not before:           Sun 19 Apr 2026 12:48:22 +0000
ROA not after:            Sun 18 Apr 2027 12:53:22 +0000
asID:                     38365
IP address blocks:        180.76.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ab:ac:59:be:ea:6f:c0:78:43:55:bf:a3:c9:85:24:2c:55:5c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 12:48:22 2026 GMT
            Not After : Apr 18 12:53:22 2027 GMT
        Subject: CN=4B9652C18A0AB30B6BE46858F3DEBF0881CA9865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ff:c8:bc:af:e7:3c:35:be:af:1c:51:66:13:
                    b0:1e:71:b1:38:2a:b6:06:b1:48:dd:07:2d:65:e8:
                    31:db:fe:e6:41:c2:99:81:01:7a:95:69:9b:8e:12:
                    ce:d0:67:87:32:0f:a0:c6:4b:f7:d9:a3:a8:ec:bb:
                    61:d5:9b:5b:3f:69:95:78:c1:66:45:8a:8a:98:8f:
                    e8:45:c8:fa:7e:ed:63:24:6f:2b:8c:31:13:30:18:
                    bd:61:4c:02:9e:73:61:92:0a:4f:34:e8:90:49:73:
                    f8:d1:63:a3:23:63:f9:d6:ac:79:95:f6:33:ac:11:
                    ce:98:ae:f1:d6:89:ec:bc:b2:60:e3:25:80:1c:ed:
                    02:b0:fd:a7:fb:b7:65:ca:49:9c:11:e4:56:33:37:
                    e0:27:23:9f:a2:63:ad:e3:4e:c3:5e:e7:b0:bc:be:
                    d1:bf:ce:a4:af:28:d9:7c:71:e4:88:2b:49:2a:a2:
                    d4:f9:bf:cf:63:dd:af:2c:b3:80:87:04:31:7e:57:
                    33:78:ee:90:b4:fe:1f:4c:90:68:1b:53:c3:c5:19:
                    3b:69:3c:1e:cf:c2:3e:ae:e9:fe:d0:a3:0f:65:a0:
                    f1:d2:b0:dc:d7:78:9c:77:69:2c:3b:dd:d6:aa:96:
                    9e:e7:3c:09:5a:09:be:ae:d7:9b:e7:91:95:4d:51:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:96:52:C1:8A:0A:B3:0B:6B:E4:68:58:F3:DE:BF:08:81:CA:98:65
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e3230302e302f32312d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:59:cf:57:d8:8f:1c:77:1b:62:0e:b8:dc:47:45:d3:6f:
         74:b5:e7:0b:4b:db:c4:8a:4d:80:4f:85:8f:d3:4e:2c:dc:ec:
         5a:09:c3:99:31:44:86:2e:0f:c0:d7:23:5e:2c:92:62:46:ec:
         b8:26:8d:0b:3f:01:83:65:bf:ca:c5:8e:25:97:96:98:06:fb:
         46:54:e6:ae:34:1b:c7:50:9f:56:a5:db:82:51:1a:c4:67:13:
         54:1f:28:53:74:a9:90:fd:4e:c1:be:d8:53:eb:39:68:9f:65:
         1c:17:64:10:7a:4b:ba:b5:e6:de:d7:e4:49:2d:3c:26:64:b0:
         fb:b3:87:0a:25:a9:f2:71:16:e0:04:fe:d3:d5:0f:65:a9:9e:
         1e:99:1f:31:11:93:a3:9b:b3:c2:88:86:51:5d:ac:a6:c2:11:
         01:b3:e0:ad:3c:79:6f:2e:04:b5:fc:74:c9:18:59:47:98:21:
         3c:ed:3b:27:04:50:81:3f:ed:ba:3f:a3:af:02:fa:2c:58:bd:
         dc:91:74:ca:7e:bb:08:32:8d:5c:bb:4a:93:88:20:3d:33:aa:
         ed:51:6e:dc:42:2b:59:e6:95:2b:ea:b7:92:e4:39:77:b3:8c:
         a5:f7:ed:53:70:45:34:d1:c7:b5:37:98:1b:10:8e:6a:11:51:
         67:77:19:e6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUE6usWb7qb8B4Q1W/o8mFJCxVXBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MTkxMjQ4MjJaFw0yNzA0MTgxMjUzMjJaMDMxMTAvBgNV
BAMTKDRCOTY1MkMxOEEwQUIzMEI2QkU0Njg1OEYzREVCRjA4ODFDQTk4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/8i8r+c8Nb6vHFFmE7AecbE4
KrYGsUjdBy1l6DHb/uZBwpmBAXqVaZuOEs7QZ4cyD6DGS/fZo6jsu2HVm1s/aZV4
wWZFioqYj+hFyPp+7WMkbyuMMRMwGL1hTAKec2GSCk806JBJc/jRY6MjY/nWrHmV
9jOsEc6YrvHWiey8smDjJYAc7QKw/af7t2XKSZwR5FYzN+AnI5+iY63jTsNe57C8
vtG/zqSvKNl8ceSIK0kqotT5v89j3a8ss4CHBDF+VzN47pC0/h9MkGgbU8PFGTtp
PB7Pwj6u6f7Qow9loPHSsNzXeJx3aSw73daqlp7nPAlaCb6u15vnkZVNUUYLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUS5ZSwYoKswtr5GhY896/CIHKmGUwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzgzMDJlMzcz
NjJlMzIzMDMwMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA7RMyDANBgkqhkiG9w0BAQsFAAOCAQEALjFZz1fYjxx3G2IOuNxHRdNv
dLXnC0vbxIpNgE+Fj9NOLNzsWgnDmTFEhi4PwNcjXiySYkbsuCaNCz8Bg2W/ysWO
JZeWmAb7RlTmrjQbx1CfVqXbglEaxGcTVB8oU3SpkP1Owb7YU+s5aJ9lHBdkEHpL
urXm3tfkSS08JmSw+7OHCiWp8nEW4AT+09UPZameHpkfMRGTo5uzwoiGUV2spsIR
AbPgrTx5by4Etfx0yRhZR5ghPO07JwRQgT/tuj+jrwL6LFi93JF0yn67CDKNXLtK
k4ggPTOq7VFu3EIrWeaVK+q3kuQ5d7OMpfftU3BFNNHHtTeYGxCOahFRZ3cZ5g==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:12 2026 by rpki-client