Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e37362e302f32342d3234203d3e203338333635.roa
File:                     3138302e37362e37362e302f32342d3234203d3e203338333635.roa (raw, json)
Hash identifier:          z6Niuf+Qw9g692QgC2smeTlYUyOzUKyQ58anV7K9Gio=
Subject key identifier:   7C:63:CB:B7:72:99:4D:0E:D0:45:4D:62:D6:F3:88:FB:F8:0E:23:C9
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       3F4A77CBE2B83B2DCB74FB09B9233D3D54E33538
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e37362e302f32342d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 12:04:56 +0000
ROA not before:           Sun 19 Apr 2026 11:59:56 +0000
ROA not after:            Sun 18 Apr 2027 12:04:56 +0000
asID:                     38365
IP address blocks:        180.76.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4a:77:cb:e2:b8:3b:2d:cb:74:fb:09:b9:23:3d:3d:54:e3:35:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:59:56 2026 GMT
            Not After : Apr 18 12:04:56 2027 GMT
        Subject: CN=7C63CBB772994D0ED0454D62D6F388FBF80E23C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:b1:21:fe:67:84:a7:cc:9f:d8:76:77:9e:
                    e0:a3:2f:9c:cd:32:9d:4c:08:9e:61:ec:ef:94:bf:
                    8c:a4:e4:c5:a0:07:d6:77:12:24:23:fe:6d:5a:bc:
                    9b:f8:8c:ac:6b:78:92:9c:c7:8f:0f:33:a6:c0:6b:
                    51:a8:5c:cc:93:af:30:90:77:1d:21:44:71:4a:0a:
                    87:fc:72:95:83:db:78:38:0e:f5:94:20:eb:5e:22:
                    7c:5d:a5:e1:45:c9:7a:40:8c:cd:e4:2c:43:f0:c2:
                    2c:66:dd:c9:44:fe:23:b1:97:64:40:6a:b5:cc:3f:
                    4c:01:e4:b4:a7:ea:e2:a3:be:39:09:ef:e5:03:fc:
                    08:97:02:dc:ef:78:6f:16:84:6f:e0:57:bd:e0:39:
                    7f:7a:e6:11:8b:3a:97:03:2d:56:c5:24:e6:54:0e:
                    9c:33:cb:af:37:b5:6e:d3:74:33:9b:02:01:2e:db:
                    08:07:08:77:b7:72:ae:ea:62:1e:d9:af:c2:60:ad:
                    74:87:64:38:47:f7:f3:1f:6e:d4:ae:33:6b:7b:b3:
                    12:84:bd:4e:82:fb:68:ff:57:3d:d7:71:3e:f7:bb:
                    74:f3:87:75:36:8e:a8:1a:9e:a7:71:8e:87:97:aa:
                    42:f8:d1:be:d6:45:28:ce:17:a6:91:78:ed:9f:77:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:63:CB:B7:72:99:4D:0E:D0:45:4D:62:D6:F3:88:FB:F8:0E:23:C9
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138302e37362e37362e302f32342d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:33:d9:c4:d8:ca:02:ec:18:29:cc:c1:38:b7:63:34:75:
         cb:94:df:a5:11:e7:68:14:ef:6d:0a:2c:c4:e1:e9:51:96:8a:
         fa:d4:6b:d8:86:32:9b:05:a4:8a:d5:5a:ba:25:e4:96:1a:bd:
         ff:16:51:46:09:63:a5:d2:30:28:7b:52:1b:57:e1:da:40:3c:
         3a:76:f1:81:9e:96:bc:b8:b1:9e:c9:fe:3f:33:a2:59:5b:ca:
         9c:48:18:4d:16:55:70:a1:25:40:29:75:a4:55:e9:4b:53:98:
         1a:d1:c2:05:ef:16:b9:1b:d0:57:63:de:4a:51:da:35:f1:e6:
         79:df:9a:01:cb:30:d5:6b:ff:f1:68:3b:dc:d6:27:bf:32:1d:
         3b:6b:51:17:37:8d:d3:b3:b9:45:81:c7:6a:d4:2d:88:0b:65:
         3d:4a:2e:30:31:10:90:80:b6:85:40:a5:b4:02:cb:8e:a2:66:
         48:a8:50:fd:cb:25:b8:25:3a:bd:7b:3d:3a:a2:ac:b5:f3:40:
         ef:8a:8b:00:52:1c:86:55:2b:42:ab:ed:59:7c:11:4a:7a:3d:
         68:7e:7a:14:10:1e:44:c2:f3:67:8d:e0:71:22:2a:b3:0e:c0:
         7e:32:29:ba:cd:dc:4c:08:c7:8e:6b:1a:52:14:5a:61:5a:b8:
         fc:17:c6:89
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUP0p3y+K4Oy3LdPsJuSM9PVTjNTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MTkxMTU5NTZaFw0yNzA0MTgxMjA0NTZaMDMxMTAvBgNV
BAMTKDdDNjNDQkI3NzI5OTREMEVEMDQ1NEQ2MkQ2RjM4OEZCRjgwRTIzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2GbEh/meEp8yf2HZ3nuCjL5zN
Mp1MCJ5h7O+Uv4yk5MWgB9Z3EiQj/m1avJv4jKxreJKcx48PM6bAa1GoXMyTrzCQ
dx0hRHFKCof8cpWD23g4DvWUIOteInxdpeFFyXpAjM3kLEPwwixm3clE/iOxl2RA
arXMP0wB5LSn6uKjvjkJ7+UD/AiXAtzveG8WhG/gV73gOX965hGLOpcDLVbFJOZU
Dpwzy683tW7TdDObAgEu2wgHCHe3cq7qYh7Zr8JgrXSHZDhH9/MfbtSuM2t7sxKE
vU6C+2j/Vz3XcT73u3Tzh3U2jqganqdxjoeXqkL40b7WRSjOF6aReO2fd3l9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUfGPLt3KZTQ7QRU1i1vOI+/gOI8kwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTEzOTIyLzAvMzEzODMwMmUzNzM2
MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALRMTDANBgkqhkiG9w0BAQsFAAOCAQEAjnYz2cTYygLsGCnMwTi3YzR1y5Tf
pRHnaBTvbQosxOHpUZaK+tRr2IYymwWkitVauiXklhq9/xZRRgljpdIwKHtSG1fh
2kA8OnbxgZ6WvLixnsn+PzOiWVvKnEgYTRZVcKElQCl1pFXpS1OYGtHCBe8WuRvQ
V2PeSlHaNfHmed+aAcsw1Wv/8Wg73NYnvzIdO2tRFzeN07O5RYHHatQtiAtlPUou
MDEQkIC2hUCltALLjqJmSKhQ/csluCU6vXs9OqKstfNA74qLAFIchlUrQqvtWXwR
Sno9aH56FBAeRMLzZ43gcSIqsw7AfjIpus3cTAjHjmsaUhRaYVq4/BfGiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:13 2026 by rpki-client