Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e302e302f31382d3234203d3e203338333635.roa
File:                     3138322e36312e302e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier:          uWAvimrA1FUsOSHhNQOxRK6tjs/vdqkImxh+CSZ57RA=
Subject key identifier:   1F:88:75:5F:E9:71:D6:39:5B:51:E5:6C:A6:EF:BF:FC:C0:60:5C:E2
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       54E2209CB4A5C91378DDD161DB3543B90D49A680
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e302e302f31382d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 10:05:52 +0000
ROA not before:           Sun 19 Apr 2026 10:00:52 +0000
ROA not after:            Sun 18 Apr 2027 10:05:52 +0000
asID:                     38365
IP address blocks:        182.61.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e2:20:9c:b4:a5:c9:13:78:dd:d1:61:db:35:43:b9:0d:49:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:00:52 2026 GMT
            Not After : Apr 18 10:05:52 2027 GMT
        Subject: CN=1F88755FE971D6395B51E56CA6EFBFFCC0605CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:d4:b4:82:a0:7e:87:9e:97:bc:74:0c:5b:
                    3a:93:93:84:cd:c9:61:e9:ff:22:52:51:b3:e1:21:
                    41:d0:4a:99:7a:03:15:3d:9a:44:5b:a1:f9:47:82:
                    d1:17:24:b6:2d:16:26:ad:0c:bf:66:dd:a9:6c:f6:
                    c9:21:c2:73:f5:72:2c:78:7a:8c:54:a8:c6:97:61:
                    92:d6:63:79:19:de:2a:dd:7f:64:3c:c3:e6:54:16:
                    ca:cd:da:0f:aa:48:82:3b:02:15:34:dc:6e:b5:3d:
                    81:dc:2b:de:c1:df:b5:ba:18:df:a8:9b:b1:57:29:
                    47:41:fb:7b:2e:8e:f4:47:25:8c:fd:e9:2c:1d:ef:
                    97:cd:a1:b1:59:b1:42:2f:88:c1:02:07:07:1d:84:
                    1c:ac:cf:90:34:44:a8:5b:76:bb:fa:77:65:9c:b4:
                    4e:cf:b9:17:f2:48:e6:12:23:c4:97:02:28:80:a7:
                    1c:6e:65:bc:43:48:35:38:53:f9:13:46:aa:56:46:
                    38:f2:2c:a1:fb:0e:c8:35:6b:38:44:38:61:a9:3c:
                    14:f0:69:96:54:b7:bb:5d:e3:d3:08:86:b2:55:fb:
                    af:c5:49:98:3b:81:a7:1f:2f:77:1c:6d:c5:f2:e0:
                    55:d7:6d:9f:cc:27:d0:34:7f:48:2a:24:30:9e:fe:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:88:75:5F:E9:71:D6:39:5B:51:E5:6C:A6:EF:BF:FC:C0:60:5C:E2
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e302e302f31382d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:7e:8f:63:22:fc:bb:76:1f:1d:c8:06:b6:4e:54:14:f4:
         61:63:58:05:ab:3d:ac:63:06:e2:ad:af:80:0b:95:20:f9:8d:
         99:f5:de:64:d1:2b:de:06:8b:aa:ee:88:55:0e:d8:4a:e0:ef:
         b9:9f:46:e8:3a:46:37:e5:68:93:6e:55:b7:f6:86:0f:e1:6a:
         82:91:b1:e3:8d:2a:56:59:0f:86:05:6e:2d:8b:89:0d:c1:35:
         1d:10:f6:67:cd:cf:45:7b:18:d4:2c:9c:5e:3a:bb:96:bf:40:
         a7:30:62:8a:03:aa:c1:fa:4b:e9:02:de:2d:e6:14:82:79:3f:
         1d:9a:96:d6:e5:3d:24:2e:3e:fd:3a:c9:f8:a9:26:fa:4d:b8:
         02:bf:6d:62:a1:92:d0:77:d6:39:73:37:f3:44:49:4e:05:4d:
         3e:2c:86:fb:76:88:de:5b:e7:a2:d1:07:bb:1a:c1:85:99:c9:
         ac:72:f8:6f:af:09:b3:96:3f:f0:de:00:c6:05:d4:fc:ef:df:
         ae:fd:c2:7a:f3:e1:d4:5a:ef:c9:c6:0b:db:8c:bf:c2:6f:89:
         01:10:5c:2c:27:04:71:84:7c:fa:36:ea:fe:62:c2:d8:66:f3:
         ee:2f:28:65:20:52:38:80:70:e7:ed:95:0b:c0:8e:74:a3:00:
         b7:8d:75:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:17 2026 by rpki-client