Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3132382e302f32332d3234203d3e203338333635.roa
File:                     3138322e36312e3132382e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier:          LAx7Go5sUOOVgausfzvfskkYNBDUmLp6Zfegwpp7c5g=
Subject key identifier:   9D:63:34:EF:0F:E6:8D:E1:DB:CE:57:62:D6:88:63:8F:B1:03:ED:59
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       1A42453ECAF449A3E26BEB33D79E0862C180F145
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3132382e302f32332d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 11:01:26 +0000
ROA not before:           Sun 19 Apr 2026 10:56:26 +0000
ROA not after:            Sun 18 Apr 2027 11:01:26 +0000
asID:                     38365
IP address blocks:        182.61.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:45:3e:ca:f4:49:a3:e2:6b:eb:33:d7:9e:08:62:c1:80:f1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:56:26 2026 GMT
            Not After : Apr 18 11:01:26 2027 GMT
        Subject: CN=9D6334EF0FE68DE1DBCE5762D688638FB103ED59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:fa:7e:76:08:3a:a9:b9:3f:b4:94:df:8c:
                    8e:e5:91:9f:9b:3d:77:70:08:38:73:0d:dd:c8:97:
                    2f:5b:f3:b4:e4:6d:12:e6:df:10:d2:e3:b0:8d:e6:
                    64:af:7d:cc:5e:9f:67:30:90:a3:c1:63:d6:31:e4:
                    1b:25:d1:f4:ad:51:d3:8c:4d:79:3a:1d:fe:71:82:
                    74:6a:05:8a:9b:e8:5b:cb:36:a1:9b:98:26:14:d0:
                    14:a8:8a:fd:71:82:09:97:ae:6e:6b:78:6f:df:ab:
                    eb:d2:d9:c3:26:b7:eb:5f:09:50:d4:87:a1:f4:c4:
                    d1:be:77:17:d5:7a:ad:2e:be:2e:ca:be:d7:82:6b:
                    ad:56:0a:66:ae:64:93:ff:29:ba:09:8b:12:84:d4:
                    ba:80:7a:f1:02:ac:30:92:66:f3:a5:4f:73:ac:a4:
                    d1:2b:a4:b7:98:69:6c:5f:15:17:6f:62:03:9e:03:
                    14:b0:71:3b:0a:b4:a8:22:b3:14:d0:03:b5:6b:38:
                    98:6f:a0:e9:e8:9d:70:8b:4a:c8:b2:c2:93:7a:b0:
                    fa:a8:fc:43:91:0d:ad:4a:3e:fc:7d:3f:c8:15:49:
                    44:29:5a:a1:f8:ae:d4:6c:39:b7:5c:43:0e:2f:d9:
                    35:37:33:ec:ec:2f:fa:81:f3:e6:04:82:ad:ed:1d:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:63:34:EF:0F:E6:8D:E1:DB:CE:57:62:D6:88:63:8F:B1:03:ED:59
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3132382e302f32332d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:0f:c4:78:a8:dc:f4:57:8e:ee:85:ce:2c:6d:e1:b8:84:0c:
         83:eb:af:e9:06:85:4b:8d:96:46:be:bc:48:b3:b9:e7:f9:08:
         6a:64:26:8f:51:57:d4:a0:1b:af:28:6e:7e:2a:36:13:17:a5:
         a3:2a:e5:ae:d6:96:54:be:dc:37:aa:bf:ac:84:fd:83:e9:3a:
         35:ec:2b:a4:19:c7:ba:c7:f4:35:8b:97:ca:1f:1e:2c:b0:b6:
         b1:cf:b7:bb:14:af:f8:f2:fb:83:49:a0:59:fa:3c:21:6b:60:
         90:1a:71:f9:5b:e2:2c:df:0c:08:da:ac:c6:90:1b:dd:98:53:
         04:b8:8d:7a:79:a2:d5:30:82:f2:0f:65:40:15:61:64:e2:a3:
         cd:a6:e5:fd:38:f4:04:07:9b:d0:be:bd:07:7f:58:98:4d:ea:
         fc:5d:30:3f:3a:4c:45:4a:7f:75:7a:ac:85:34:6e:0e:d4:dd:
         cb:72:08:c5:51:51:d9:85:44:4c:51:79:8b:2d:5e:e1:00:13:
         ac:cb:db:8e:62:83:c6:46:5f:e6:a5:1a:2b:30:ff:20:1d:e6:
         f1:bd:67:ee:91:5b:4a:d0:e7:05:7c:3c:8f:fe:9e:78:06:05:
         e8:a0:91:af:df:a3:e1:e9:78:b2:f4:a9:42:4a:59:80:da:37:
         19:b5:d3:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:58 2026 by rpki-client