Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3132382e302f32332d3234203d3e203538353430.roa
File:                     3138322e36312e3132382e302f32332d3234203d3e203538353430.roa (raw, json)
Hash identifier:          ZzcBTP8ub+do1qOzMnvwmrU9c7lYT3td33ohwJEpDU0=
Subject key identifier:   E9:F0:FA:3A:6A:05:22:34:04:F0:5D:D2:E9:A9:79:03:67:22:3D:48
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       8845C45A6752815BD46B38CA8FFFFADBBDEAAD
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3132382e302f32332d3234203d3e203538353430.roa
Signing time:             Sun 19 Apr 2026 11:02:10 +0000
ROA not before:           Sun 19 Apr 2026 10:57:10 +0000
ROA not after:            Sun 18 Apr 2027 11:02:10 +0000
asID:                     58540
IP address blocks:        182.61.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            88:45:c4:5a:67:52:81:5b:d4:6b:38:ca:8f:ff:fa:db:bd:ea:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:57:10 2026 GMT
            Not After : Apr 18 11:02:10 2027 GMT
        Subject: CN=E9F0FA3A6A05223404F05DD2E9A9790367223D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:87:62:74:f8:9a:17:e6:30:d2:9b:40:f1:
                    0d:a6:6b:98:10:9f:85:4a:45:54:0c:d1:a2:88:78:
                    8d:0e:ae:ac:47:0a:c1:26:81:7f:eb:c7:53:30:fc:
                    da:2c:8c:49:78:e9:5a:df:1c:f3:1b:f8:d0:f2:9c:
                    1d:50:2d:e1:8e:77:9e:5b:4a:26:4a:d3:6d:e9:21:
                    8d:27:9b:b1:85:f5:10:e6:c8:3e:85:ef:30:7b:59:
                    87:db:a7:e7:8b:7d:75:35:c0:f1:2b:a8:67:ee:aa:
                    59:82:78:ae:2a:99:44:9e:51:8b:da:4a:d4:97:d5:
                    84:69:66:d1:16:28:80:f5:1f:d9:5b:46:50:36:3d:
                    3d:96:f8:41:25:62:eb:6c:c1:ee:00:97:8c:4d:58:
                    43:14:13:23:4a:50:17:39:1e:b7:06:49:ea:85:b1:
                    5a:4d:f1:16:21:97:ce:e2:e0:2e:e3:09:76:aa:89:
                    c8:27:d8:5d:ea:59:f6:75:05:49:8f:53:fd:91:9a:
                    3f:de:9c:97:5d:c7:62:5f:06:5d:f6:c2:a8:ac:eb:
                    8e:39:f2:c7:3f:0d:e7:ff:f4:9a:34:bd:1a:d2:99:
                    12:68:2e:1c:14:25:46:07:8c:67:67:eb:c7:4b:05:
                    9e:75:77:a3:51:a3:47:c4:02:46:42:92:68:5c:6d:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F0:FA:3A:6A:05:22:34:04:F0:5D:D2:E9:A9:79:03:67:22:3D:48
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3132382e302f32332d3234203d3e203538353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:a4:c7:f7:a5:7b:73:f3:4f:14:86:70:13:4f:a2:22:30:
         61:cd:f0:37:0b:d5:4a:18:e0:82:28:c7:3f:22:3e:d6:50:51:
         6f:ff:9c:5a:5f:f8:40:fd:4e:fb:88:3b:16:bc:d7:1f:ec:48:
         02:40:72:b0:71:ad:c0:92:08:41:00:7e:16:92:1e:a7:de:28:
         c8:22:59:30:42:62:9c:75:13:2b:f6:cf:7c:dc:94:09:60:5e:
         50:cc:ac:df:a0:38:26:e2:be:be:a4:6f:fd:01:83:bb:b8:07:
         86:43:00:36:dd:dd:46:27:29:02:98:b0:7a:8d:c8:90:be:fe:
         89:60:86:47:8b:5c:9d:1c:cf:68:bb:aa:4d:0f:34:e0:d0:26:
         90:1a:de:8f:0e:24:14:2c:75:45:1c:a9:35:ea:6d:2f:4c:85:
         1e:bb:60:0a:ba:91:3f:1f:15:35:54:0d:60:bc:fc:18:55:df:
         c1:4a:f7:29:a0:03:76:39:c3:64:5e:08:f1:85:9a:cf:63:7d:
         25:e6:8f:21:3b:4a:ff:98:ad:de:be:18:58:1c:03:37:55:29:
         a4:87:8a:fc:47:6c:cb:28:ff:1d:0c:6c:a1:2d:1f:ca:c9:ae:
         de:55:a3:86:9e:19:22:3e:01:bc:75:04:33:b7:cb:f2:6a:21:
         3f:2a:a5:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:24 2026 by rpki-client