Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133362e302f32312d3234203d3e203338333635.roa
File:                     3138322e36312e3133362e302f32312d3234203d3e203338333635.roa (raw, json)
Hash identifier:          JvWYCa5GRw2yOBStVM0OQdQmvrMXj2YtvYgZoX/W4o8=
Subject key identifier:   88:AF:AB:BD:84:D2:3F:27:56:75:0D:FA:D7:B8:97:F7:6B:71:7D:39
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       076976E4CF3EDA844D76034569F2F2B10A096C65
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133362e302f32312d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 10:43:33 +0000
ROA not before:           Sun 19 Apr 2026 10:38:33 +0000
ROA not after:            Sun 18 Apr 2027 10:43:33 +0000
asID:                     38365
IP address blocks:        182.61.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:69:76:e4:cf:3e:da:84:4d:76:03:45:69:f2:f2:b1:0a:09:6c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:38:33 2026 GMT
            Not After : Apr 18 10:43:33 2027 GMT
        Subject: CN=88AFABBD84D23F2756750DFAD7B897F76B717D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:8a:81:a6:9e:4a:cb:16:a7:20:17:4a:f6:
                    14:b3:d1:98:de:09:97:be:b4:5b:e3:20:da:9f:89:
                    5b:8b:ec:e5:35:60:81:be:a6:8c:6a:62:e6:2d:fb:
                    44:c6:e6:e4:bd:92:4b:60:91:bf:08:b9:60:9c:0c:
                    c9:14:3e:f3:78:30:c6:ed:d9:be:53:6b:d5:0b:bf:
                    2b:48:96:79:b9:ca:9d:36:d1:4c:81:3d:22:72:14:
                    f6:7f:cb:b1:e7:a5:44:dc:b0:47:eb:7b:61:1e:29:
                    d4:9f:05:37:55:80:2b:d1:3e:59:61:39:88:f9:9a:
                    60:53:c1:35:8a:16:fe:d9:58:ae:75:85:e6:1f:2f:
                    5e:c4:bf:32:7a:fd:a5:a0:c2:cc:68:27:6d:b4:da:
                    bd:4a:f9:77:f5:41:f0:ab:e4:43:62:42:91:9c:94:
                    93:fb:08:97:ea:85:24:69:cb:6b:0d:4a:47:f2:a2:
                    47:d8:30:bc:d5:53:88:e0:ee:5c:fc:62:68:f1:78:
                    8a:88:be:03:f4:37:2f:38:ce:b7:ec:f0:71:10:e8:
                    72:31:8c:ae:46:b6:04:ea:c6:cb:50:a5:4f:d0:65:
                    43:ae:69:a9:30:12:db:97:53:63:10:f2:40:3d:84:
                    2b:29:5e:d2:80:af:8a:e4:00:ff:c4:09:40:3d:b8:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AF:AB:BD:84:D2:3F:27:56:75:0D:FA:D7:B8:97:F7:6B:71:7D:39
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3133362e302f32312d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:97:48:1a:f1:55:58:8d:07:71:8d:e1:98:d6:9f:ca:7a:
         3c:1c:93:46:40:32:89:21:1c:e3:cc:9d:2b:42:a4:f1:91:5d:
         52:c2:08:4c:33:e9:d0:f9:d8:58:74:50:ea:f5:d8:79:9e:4a:
         2d:7b:46:f3:4e:0f:72:79:9d:c4:69:42:d3:ca:74:4f:46:2e:
         0c:6f:08:47:43:dd:ef:6d:e5:fa:f4:cf:9a:b8:41:f8:72:06:
         2e:88:01:27:ad:f3:53:bb:57:e8:cd:77:ce:74:5d:ea:71:21:
         34:b6:04:27:ba:5f:76:30:d1:a6:f3:ce:c7:dd:5f:27:e0:14:
         c0:4d:74:20:ae:23:e2:5f:57:a8:13:24:44:4d:82:93:c5:d8:
         58:45:c6:06:6b:22:24:9a:1e:e2:29:68:c2:a6:f7:f1:8a:6e:
         29:9d:d3:84:33:68:69:c0:83:a5:a0:4b:ba:cc:ad:94:df:7e:
         ca:8c:08:c6:90:95:35:5e:dc:ba:4b:63:bf:99:6a:f5:de:14:
         37:e7:54:bd:62:36:ec:bc:f8:f6:95:5d:2d:95:79:60:2e:f6:
         9f:28:98:c5:12:79:65:6f:9d:34:c3:aa:3e:d7:7d:9b:b3:93:
         a2:29:e5:39:3e:ba:f9:57:39:73:0b:ab:3c:91:23:00:6d:a6:
         16:fe:f0:75
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:32:37 2026 by rpki-client