Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203338333635.roa
File:                     3138322e36312e3139342e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier:          zY2hyYdtwdvqfCj0IYu3sonJQtSxyIHqzJkwlXx4iJ0=
Subject key identifier:   BB:B0:06:D1:7D:2B:1F:CE:2B:63:47:DE:F5:52:80:87:8C:33:34:A5
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       31E5D0A9392E5914768AE889097027AFB68CE87C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 11:15:02 +0000
ROA not before:           Sun 19 Apr 2026 11:10:02 +0000
ROA not after:            Sun 18 Apr 2027 11:15:02 +0000
asID:                     38365
IP address blocks:        182.61.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e5:d0:a9:39:2e:59:14:76:8a:e8:89:09:70:27:af:b6:8c:e8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:10:02 2026 GMT
            Not After : Apr 18 11:15:02 2027 GMT
        Subject: CN=BBB006D17D2B1FCE2B6347DEF55280878C3334A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:2a:aa:f3:ec:72:89:f3:f1:85:67:73:6f:
                    45:41:2e:c0:f4:d4:a7:55:1e:84:45:11:0b:7f:91:
                    af:e6:81:5c:d4:93:0b:83:5d:ab:71:27:4a:c9:3e:
                    3a:3d:ca:55:97:75:aa:ff:04:fe:0c:36:ca:1a:46:
                    e7:7a:15:ca:63:02:ff:23:6b:e4:ae:ab:09:db:ef:
                    61:31:69:91:8e:85:e7:a3:52:93:40:ec:e6:cc:a3:
                    43:af:28:c6:0e:f6:b5:85:a9:ce:41:81:5d:10:bb:
                    62:43:96:66:14:aa:bd:31:0a:9e:7f:2f:13:20:ba:
                    12:cd:b0:8c:6b:55:54:b3:cd:61:f6:fb:9f:ff:a3:
                    18:f9:d8:9b:2a:dd:04:d4:e8:e1:07:d8:ec:ba:c6:
                    59:b6:35:e7:2f:85:ad:63:af:00:c1:f5:e5:4a:79:
                    45:c4:1d:14:0b:d5:ed:e2:9c:f3:2f:35:e7:6d:16:
                    79:3b:75:45:2d:10:fc:42:5b:40:8b:58:b8:ec:a0:
                    91:fa:32:8b:df:2a:11:e9:79:4f:e6:fe:b8:9f:ca:
                    d0:ad:dc:fd:ff:6d:2e:91:d2:c0:7b:64:88:c3:7f:
                    bb:87:67:ef:c8:39:74:ad:15:b1:9e:88:eb:81:06:
                    00:ff:2a:2e:93:fb:ff:c7:18:22:2d:84:2d:40:96:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:06:D1:7D:2B:1F:CE:2B:63:47:DE:F5:52:80:87:8C:33:34:A5
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:0b:33:41:5b:65:f6:b3:fd:bf:39:ba:66:94:e2:18:6f:74:
         24:d0:3f:87:05:39:c3:72:70:87:aa:c0:ab:43:d7:90:1f:5e:
         de:74:08:4a:b9:aa:47:93:ed:d2:55:b7:7c:ad:16:30:b7:1a:
         5f:46:3b:88:51:6b:cc:9a:65:06:62:25:d9:d5:9d:d1:e0:e6:
         dc:19:b9:a7:f6:2d:06:f7:68:25:c5:9b:be:c7:96:8c:d0:66:
         6c:95:f3:e6:73:f4:56:e5:f3:0d:49:c3:18:19:57:60:41:4d:
         b8:a1:0c:ed:e6:10:68:5e:4b:8a:af:3e:c2:91:bf:ac:62:33:
         cb:dc:58:6c:ae:da:54:9e:66:05:ad:f7:fc:04:fc:f8:75:b9:
         0a:ea:14:59:0d:86:ff:d1:3b:f0:9d:00:8b:22:a6:97:e5:b3:
         c0:ce:e5:a0:b1:d0:52:78:96:7d:21:f1:e3:85:0a:77:6d:7d:
         a1:00:51:8a:1f:45:a5:de:f4:fe:f5:ae:c4:c6:22:ac:30:a0:
         c4:14:a8:dc:ca:0c:30:6d:c8:c4:3c:91:c7:b1:d7:d6:1b:19:
         ad:71:aa:24:15:71:2a:84:ad:0b:a2:fa:7a:05:f2:14:a0:f3:
         dd:65:97:d3:36:41:0d:fc:05:ac:51:33:2d:06:29:81:08:e9:
         3d:55:09:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:26 2026 by rpki-client