Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203538353430.roa
File:                     3138322e36312e3139342e302f32332d3234203d3e203538353430.roa (raw, json)
Hash identifier:          3pNnByXBgFlnQhoxIMbCqCjM0Yvm9XIKvZoP00IWpjI=
Subject key identifier:   D4:93:7F:38:B8:F5:9A:C4:74:B4:50:1A:C4:80:39:BA:76:EE:F5:0E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       6483C701D788B808C346B6BE85D141D96F44A3AD
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203538353430.roa
Signing time:             Sun 19 Apr 2026 11:15:02 +0000
ROA not before:           Sun 19 Apr 2026 11:10:02 +0000
ROA not after:            Sun 18 Apr 2027 11:15:02 +0000
asID:                     58540
IP address blocks:        182.61.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:83:c7:01:d7:88:b8:08:c3:46:b6:be:85:d1:41:d9:6f:44:a3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:10:02 2026 GMT
            Not After : Apr 18 11:15:02 2027 GMT
        Subject: CN=D4937F38B8F59AC474B4501AC48039BA76EEF50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:04:17:de:77:6b:a1:dc:3b:2e:90:2b:f7:
                    1b:a2:f0:f0:2c:c9:fd:16:be:5c:c0:bd:92:09:e6:
                    8f:5a:ae:81:34:19:07:92:0b:3e:9e:f6:e3:97:bf:
                    80:c5:b8:a4:b0:85:1e:da:25:bb:2c:04:92:55:40:
                    80:d2:d2:f3:43:7d:03:b6:a6:a5:06:59:2f:2e:d9:
                    e5:c3:87:a7:c6:60:23:b9:81:7b:64:b4:e8:96:5a:
                    d3:1e:e2:69:6d:10:bf:b4:c8:b9:ac:9b:8e:c5:0c:
                    a4:eb:9f:7f:7d:ca:9b:28:b7:17:72:ca:a1:be:6d:
                    42:84:24:f1:8c:a3:01:7a:af:08:04:cd:a4:86:d2:
                    a1:19:b7:7f:52:da:42:50:1d:43:b0:87:b7:c3:9a:
                    2d:40:ec:7e:e5:8c:f9:e4:04:d3:e7:e9:42:99:c9:
                    52:e2:0c:65:ad:bc:cc:61:d4:f2:76:0a:de:38:36:
                    d2:52:46:22:a3:bb:07:df:43:28:12:1f:a4:e3:c4:
                    12:c7:50:16:6f:08:9a:e7:3d:b6:8e:bd:ba:18:0e:
                    8c:f0:63:37:f3:80:63:17:a9:bd:b9:94:9b:58:00:
                    5b:69:fd:73:66:ba:50:00:8b:03:4e:e7:17:47:ff:
                    f1:27:da:8d:b3:cf:24:35:5a:be:d4:e7:ad:bf:cd:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:7F:38:B8:F5:9A:C4:74:B4:50:1A:C4:80:39:BA:76:EE:F5:0E
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203538353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:49:3e:40:be:2b:ae:0a:df:d5:77:1b:c1:76:9f:ea:cc:09:
         6d:57:38:bf:52:e5:ba:09:35:c3:99:43:4d:c7:2a:08:7a:73:
         e7:c8:da:d4:00:8b:0a:55:09:ef:83:b5:e1:22:34:96:69:23:
         e4:ce:f8:16:f4:c8:28:41:12:62:12:68:82:9f:18:9e:e6:37:
         74:e8:6f:ba:ba:8c:6d:56:2c:40:00:10:15:0d:d1:bf:99:41:
         c8:93:56:3a:0d:65:45:37:2f:a1:2c:55:91:99:48:81:5f:a0:
         5b:e5:57:b9:a2:22:08:87:06:e9:d2:37:d0:62:12:59:5a:80:
         99:33:72:dd:72:5b:19:60:2a:6f:17:f9:17:ec:69:32:59:bf:
         7f:37:43:5f:b5:52:22:b5:c1:d0:47:cb:f5:75:c0:a6:c8:e3:
         6e:88:74:77:89:92:03:47:bd:7e:17:11:ba:ba:4d:26:9a:2f:
         c8:63:94:85:dc:62:ee:46:a0:d2:2a:91:d8:13:55:80:f0:1e:
         7d:22:3f:85:46:fa:4c:cc:a8:a8:3d:3b:fa:17:ae:76:ed:03:
         1b:4f:ed:68:d2:02:c3:54:1b:48:d7:dc:a2:26:16:0f:fa:ee:
         23:90:00:4a:b7:08:fd:66:4c:3c:b3:f9:6c:5f:31:dc:cf:44:
         c7:89:39:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:58 2026 by rpki-client