Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133302e302f32332d3234203d3e203338333635.roa
File:                     3138322e36312e3133302e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier:          UGoXPKjdkjNmffWUNHTUulozTswrEjDJpN4UBfXOZU8=
Subject key identifier:   5B:5C:16:2E:D7:13:4A:19:AD:73:A2:50:2D:CD:CC:81:F3:49:81:0B
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       754046DCB83754090C33DD9C955E0362F13E4B3C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133302e302f32332d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 10:41:55 +0000
ROA not before:           Sun 19 Apr 2026 10:36:55 +0000
ROA not after:            Sun 18 Apr 2027 10:41:55 +0000
asID:                     38365
IP address blocks:        182.61.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:46:dc:b8:37:54:09:0c:33:dd:9c:95:5e:03:62:f1:3e:4b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:36:55 2026 GMT
            Not After : Apr 18 10:41:55 2027 GMT
        Subject: CN=5B5C162ED7134A19AD73A2502DCDCC81F349810B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1c:9b:17:7a:68:06:34:75:fc:fd:a6:58:83:
                    cd:71:c2:2f:43:fe:20:70:4d:e2:c0:c8:ee:ba:01:
                    4c:c7:7a:ba:c2:43:50:df:55:81:83:17:7d:bc:15:
                    cf:92:14:8b:ed:d7:bb:e3:f6:ff:5c:4e:f5:91:bf:
                    74:72:da:1f:c2:2e:ef:64:be:65:09:32:56:03:33:
                    48:f7:ab:cf:25:20:2f:16:20:f7:13:22:42:67:9a:
                    2d:e1:44:19:ea:c0:3f:43:30:b4:48:45:67:c3:9d:
                    e3:03:0e:31:ac:6a:6b:13:fd:4a:93:a5:cb:63:fb:
                    26:16:9f:ef:06:7c:7b:13:de:85:e3:95:e3:68:1d:
                    73:c9:7f:28:6f:f0:43:64:cf:cd:d3:b3:76:e8:11:
                    76:c7:57:3a:02:33:4a:27:af:d1:b2:9d:70:8d:db:
                    7c:b6:33:8f:65:1d:dc:52:5e:b4:9b:a2:0e:b0:8d:
                    44:fb:64:5d:3f:0c:1f:0e:0c:06:35:46:46:9a:45:
                    ee:62:c8:9a:5d:5a:be:2d:45:83:85:f0:80:62:4e:
                    0e:9d:61:ac:e1:bd:57:dc:04:b9:ac:8d:27:ee:0e:
                    11:9d:1a:59:b7:f1:ec:f8:ef:39:9b:09:ec:49:88:
                    d0:9d:3a:1c:cd:8d:1e:f1:0f:c2:fd:4b:39:29:33:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:16:2E:D7:13:4A:19:AD:73:A2:50:2D:CD:CC:81:F3:49:81:0B
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133302e302f32332d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:63:50:2c:7c:46:60:9d:e9:2d:bd:b5:31:a8:eb:85:67:
         2c:d4:37:b5:a5:f1:a9:7e:a6:fe:9e:e1:68:84:c3:94:84:ad:
         fa:04:7c:d4:1f:06:bb:49:5c:92:86:25:2a:46:22:90:6e:7a:
         79:6d:b2:89:d5:aa:f4:52:4b:27:02:e5:85:e6:b5:92:97:7e:
         a6:de:6f:54:4e:1d:a4:0c:d8:e8:4c:50:1b:fb:f1:79:71:9e:
         bc:71:e2:59:26:d7:46:cc:4c:ae:7f:fb:44:83:65:3e:48:19:
         48:cf:41:3b:65:c8:af:2c:83:b4:41:1a:96:49:0a:88:86:a9:
         ad:35:67:75:eb:58:42:dc:34:6e:d5:a4:8e:ba:b6:28:e4:f7:
         ac:39:83:ff:84:77:a6:23:eb:35:6d:11:71:1c:c2:77:46:a6:
         73:0a:d5:e3:06:51:33:f8:52:1a:bf:8b:8c:09:c0:ef:4a:b3:
         07:ea:2f:9b:60:7e:96:ee:6b:44:aa:7a:39:bb:35:63:f4:45:
         c2:57:c6:13:5d:12:6d:4b:e3:df:8a:90:61:a3:81:ab:e8:6f:
         20:c5:cb:72:58:f8:49:81:f4:2c:68:1f:2f:02:c2:00:8a:96:
         5d:94:82:de:af:8e:30:a3:1a:f6:b9:07:e9:ef:a0:8a:ad:5c:
         1f:4d:77:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:32:37 2026 by rpki-client