Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3136302e302f31392d3234203d3e203535393637.roa
File:                     3138322e36312e3136302e302f31392d3234203d3e203535393637.roa (raw, json)
Hash identifier:          uRXy4RkioCRxhl2bU8QD6hw9s/83oZSyw3JpReRd9Q0=
Subject key identifier:   A4:1E:CC:B0:5E:B9:5C:E8:C6:31:87:B8:E8:E8:23:20:09:A3:92:46
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       2E8B7DDF3FBB176099A01AFB9AEF1C2A01AD4B69
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3136302e302f31392d3234203d3e203535393637.roa
Signing time:             Sun 19 Apr 2026 10:46:52 +0000
ROA not before:           Sun 19 Apr 2026 10:41:52 +0000
ROA not after:            Sun 18 Apr 2027 10:46:52 +0000
asID:                     55967
IP address blocks:        182.61.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8b:7d:df:3f:bb:17:60:99:a0:1a:fb:9a:ef:1c:2a:01:ad:4b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 10:41:52 2026 GMT
            Not After : Apr 18 10:46:52 2027 GMT
        Subject: CN=A41ECCB05EB95CE8C63187B8E8E8232009A39246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:14:61:d5:6e:7b:e9:b7:ba:ef:ad:69:3f:
                    56:ba:b9:32:8e:99:ef:b9:15:9f:ea:61:4e:62:02:
                    b0:05:8c:b4:7a:b6:b0:e7:2a:c1:27:a8:a2:f7:48:
                    b7:72:70:ef:db:f2:ae:cc:3e:4e:22:76:ad:96:4d:
                    44:f2:a5:7e:a9:9e:46:58:66:ff:f6:26:b4:b5:f4:
                    c7:1b:3f:5f:45:c8:e2:f0:9a:b6:a6:a7:0a:45:12:
                    61:2d:cf:5a:aa:04:1e:c1:93:ce:e8:dd:fa:1c:37:
                    68:9c:42:f2:7a:6e:34:09:e1:2b:01:da:1d:9e:33:
                    04:f9:e8:89:d5:64:4b:37:1a:10:ba:fa:4c:6d:64:
                    4b:ff:35:d1:5f:66:a3:48:52:c1:b3:1d:91:ec:49:
                    93:07:db:68:e0:d5:77:8c:d6:71:57:81:fd:a6:98:
                    32:77:3d:11:10:70:2a:f6:90:32:28:6c:4d:27:03:
                    0c:ac:1f:07:54:7b:97:66:29:d8:c4:2c:c8:4c:95:
                    ff:d5:e8:11:09:a3:6f:18:5b:2b:d6:9b:f9:46:ec:
                    59:be:d5:93:b0:53:1f:aa:d8:4c:cf:4b:41:4f:05:
                    03:d8:02:c9:9c:f7:47:39:a3:58:24:9a:9a:b8:66:
                    b2:1f:0a:21:d4:e1:1a:da:b8:77:4d:2a:f9:28:fd:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1E:CC:B0:5E:B9:5C:E8:C6:31:87:B8:E8:E8:23:20:09:A3:92:46
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3136302e302f31392d3234203d3e203535393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:66:ca:5a:cc:2e:b7:a6:c5:6e:ca:59:e9:84:af:a5:ba:05:
         48:c6:37:e0:9b:1e:f0:cd:04:03:28:94:1c:37:b3:99:c7:84:
         c0:c2:e1:b1:26:e3:78:4c:d1:ea:a4:07:27:4b:e5:84:6b:7b:
         a2:51:11:24:8c:a9:26:ed:c7:2a:07:8e:4e:61:21:8c:5d:6d:
         c3:0f:00:8b:39:aa:19:17:7a:6f:1b:c2:4e:8b:5c:d3:dd:9d:
         4d:4f:59:40:1a:94:c1:dd:5e:a1:2c:1e:f6:a4:fa:71:ad:68:
         8d:14:b0:c6:78:bb:da:dd:af:fd:02:c5:33:ae:6d:96:67:62:
         fd:7d:ec:44:17:b3:84:4b:61:01:8f:13:bd:2b:49:3c:64:99:
         68:0c:6d:4d:96:ca:05:ba:2d:b9:15:9d:b0:ec:2c:fd:c5:ba:
         de:7f:90:bc:4f:ed:d3:e2:7f:d8:2a:35:dd:72:23:a1:70:69:
         1d:0c:2e:e7:ab:86:e1:e1:08:c8:92:36:25:ee:18:11:c5:a1:
         fb:2b:92:2e:ba:42:11:d5:27:ee:ad:0e:15:c8:f5:df:c1:f2:
         7e:e9:6e:06:ca:1f:4f:38:3e:0c:ae:f3:c0:46:ae:64:7f:14:
         cf:82:a9:8f:eb:fb:0e:da:c2:37:79:a5:28:60:61:d2:2e:d2:
         64:cb:d9:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:25:03 2026 by rpki-client