Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3134342e302f32302d3234203d3e203338333635.roa
File:                     3138322e36312e3134342e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier:          7mBQjgba6cI8nY5SWnxNkqvpj3M+fSp6ZUl3hSjGx5I=
Subject key identifier:   7B:74:DB:D0:FE:D5:EB:D0:24:5E:41:6F:C7:B4:A3:3B:C4:2C:33:8C
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       5F7A1E03D961A1DFFE3298BB5680F24CE9A4847C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3134342e302f32302d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 10:44:17 +0000
ROA not before:           Sun 19 Apr 2026 10:39:17 +0000
ROA not after:            Sun 18 Apr 2027 10:44:17 +0000
asID:                     38365
IP address blocks:        182.61.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7a:1e:03:d9:61:a1:df:fe:32:98:bb:56:80:f2:4c:e9:a4:84:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:39:17 2026 GMT
            Not After : Apr 18 10:44:17 2027 GMT
        Subject: CN=7B74DBD0FED5EBD0245E416FC7B4A33BC42C338C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:d5:f0:31:17:e4:b5:ef:b8:38:25:d7:1a:
                    1b:d2:a7:a1:e5:33:5b:70:17:02:e1:06:2a:89:3e:
                    4e:21:66:1c:1d:0d:92:e2:e3:0f:75:89:ce:c9:94:
                    73:e0:98:a2:b4:ae:4e:73:b3:27:99:96:e3:76:37:
                    ce:4c:70:3b:c3:11:21:26:80:6d:37:b3:ec:82:94:
                    d5:62:c5:e3:2d:08:75:be:08:e1:8f:87:02:82:ce:
                    63:82:fe:0d:0b:44:ad:cc:43:3f:36:29:57:c9:55:
                    95:4c:3d:b6:d0:71:43:fd:a1:52:c9:3b:05:4e:d8:
                    f3:71:24:65:83:4d:e5:34:00:dc:0f:4d:fa:96:35:
                    53:be:2f:8e:78:36:a8:ce:9b:63:fe:b3:ba:bf:1f:
                    e7:b1:eb:2e:c2:5f:3e:4d:d5:76:da:3c:b8:bd:4a:
                    cb:7d:83:7c:f7:66:85:f9:44:a7:ba:50:c8:a1:52:
                    b6:98:e7:d5:1a:47:57:ee:de:83:f4:3b:c2:11:7c:
                    bb:2e:b4:98:9b:1e:35:72:27:15:fc:90:cf:a9:bd:
                    5b:88:80:37:f9:75:d3:c8:4b:95:08:31:44:05:0b:
                    08:28:4d:79:dd:2e:ca:98:8d:b7:82:ef:b7:eb:64:
                    75:1d:3c:01:a2:c0:89:fc:18:1f:1c:35:39:45:3c:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:DB:D0:FE:D5:EB:D0:24:5E:41:6F:C7:B4:A3:3B:C4:2C:33:8C
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3134342e302f32302d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:39:9f:08:e6:41:95:d1:e7:9e:b2:53:d4:13:c0:9d:d7:
         62:45:4a:68:0a:98:13:79:21:a0:1f:b3:fe:a8:6c:9e:cb:5b:
         84:a3:11:94:73:1e:3e:c8:4d:82:84:dc:bf:6a:be:9f:a4:e9:
         01:32:43:18:4b:c0:5d:de:31:1a:5f:6e:6c:c2:52:30:60:98:
         a1:f2:03:73:a9:04:8b:87:8c:c2:2a:88:7c:b5:6e:46:56:68:
         72:1c:b6:4b:78:5d:e8:d6:64:7c:cd:b5:02:ab:ba:b2:dd:5b:
         fe:b8:41:ee:2e:70:63:5b:55:a9:0a:24:0a:9c:cd:4d:96:b0:
         cf:06:84:6f:f1:6a:e5:23:32:78:0c:73:00:b4:ee:2d:20:04:
         01:15:90:a8:67:93:c9:0a:b8:a7:65:e3:8c:21:7a:ca:3a:14:
         f0:c9:dc:57:32:f4:8d:a8:e5:f2:d2:6f:e7:8f:4d:3c:f0:88:
         bb:64:36:f3:7e:b1:56:2b:11:91:c8:c1:41:b4:b9:70:42:47:
         84:1c:d8:c4:1b:94:6f:9e:de:fa:c0:1c:26:2e:c8:36:72:d2:
         ab:d4:38:5d:05:9e:5c:f6:fd:98:de:e5:e8:07:f2:bd:18:46:
         2e:b6:69:7f:fe:b0:3c:21:0a:1a:67:e4:1e:3e:b0:86:54:e9:
         e9:a7:50:4a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUX3oeA9lhod/+Mpi7VoDyTOmkhHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MTkxMDM5MTdaFw0yNzA0MTgxMDQ0MTdaMDMxMTAvBgNV
BAMTKDdCNzREQkQwRkVENUVCRDAyNDVFNDE2RkM3QjRBMzNCQzQyQzMzOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRtXwMRfkte+4OCXXGhvSp6Hl
M1twFwLhBiqJPk4hZhwdDZLi4w91ic7JlHPgmKK0rk5zsyeZluN2N85McDvDESEm
gG03s+yClNVixeMtCHW+COGPhwKCzmOC/g0LRK3MQz82KVfJVZVMPbbQcUP9oVLJ
OwVO2PNxJGWDTeU0ANwPTfqWNVO+L454NqjOm2P+s7q/H+ex6y7CXz5N1XbaPLi9
Sst9g3z3ZoX5RKe6UMihUraY59UaR1fu3oP0O8IRfLsutJibHjVyJxX8kM+pvVuI
gDf5ddPIS5UIMUQFCwgoTXndLsqYjbeC77frZHUdPAGiwIn8GB8cNTlFPNQhAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUe3Tb0P7V69AkXkFvx7SjO8QsM4wwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzgzMjJlMzYz
MTJlMzEzNDM0MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBLY9kDANBgkqhkiG9w0BAQsFAAOCAQEAAv05nwjmQZXR556yU9QTwJ3X
YkVKaAqYE3khoB+z/qhsnstbhKMRlHMePshNgoTcv2q+n6TpATJDGEvAXd4xGl9u
bMJSMGCYofIDc6kEi4eMwiqIfLVuRlZochy2S3hd6NZkfM21Aqu6st1b/rhB7i5w
Y1tVqQokCpzNTZawzwaEb/Fq5SMyeAxzALTuLSAEARWQqGeTyQq4p2XjjCF6yjoU
8MncVzL0jajl8tJv549NPPCIu2Q2836xVisRkcjBQbS5cEJHhBzYxBuUb57e+sAc
Ji7INnLSq9Q4XQWeXPb9mN7l6AfyvRhGLrZpf/6wPCEKGmfkHj6whlTp6adQSg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:01 2026 by rpki-client