Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139362e302f32332d3234203d3e203538353430.roa
File:                     3138322e36312e3139362e302f32332d3234203d3e203538353430.roa (raw, json)
Hash identifier:          IqNt+UY9nLBNRqG5VhptazXdBn+RIaKjel7xOaeHFxo=
Subject key identifier:   61:E8:79:D7:93:A2:4D:A1:3C:88:42:19:E0:F9:27:61:33:72:41:91
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       4798DFED2C0C1C572DEEF38D19C4B85DF80E80AD
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139362e302f32332d3234203d3e203538353430.roa
Signing time:             Sun 19 Apr 2026 11:17:04 +0000
ROA not before:           Sun 19 Apr 2026 11:12:04 +0000
ROA not after:            Sun 18 Apr 2027 11:17:04 +0000
asID:                     58540
IP address blocks:        182.61.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:df:ed:2c:0c:1c:57:2d:ee:f3:8d:19:c4:b8:5d:f8:0e:80:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:12:04 2026 GMT
            Not After : Apr 18 11:17:04 2027 GMT
        Subject: CN=61E879D793A24DA13C884219E0F9276133724191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:ba:cc:bf:fe:0f:66:ed:8c:3c:60:5b:3d:
                    84:19:db:8e:d1:08:e5:3e:5f:68:aa:31:a4:c8:56:
                    37:b9:9d:64:c9:cb:17:13:ce:65:2a:63:b9:c4:c7:
                    4e:78:db:ee:08:f4:c8:08:89:32:be:7b:e1:e4:23:
                    b5:f2:c4:92:3d:3b:9f:1d:b5:0f:ae:e6:75:69:b0:
                    a8:55:e8:e9:96:7d:76:96:dc:d3:8d:01:9c:4c:1c:
                    0b:99:f4:a1:f0:60:a9:f1:5b:cc:e4:05:e4:4d:9b:
                    59:a1:8c:a4:27:cc:f3:86:4f:d4:bf:c7:e1:28:f1:
                    11:57:6f:11:49:cd:fd:5f:f9:b1:67:91:1a:ea:6e:
                    3d:44:53:63:ef:07:20:e9:f3:66:99:ee:6c:c9:0a:
                    60:a9:60:5e:39:d6:54:5c:88:2f:a0:0f:da:65:cb:
                    5d:0c:0d:75:6c:8f:51:34:96:43:66:7d:6e:4b:e7:
                    f1:9a:ee:dd:dd:b2:2b:06:d4:8f:16:ef:42:86:d3:
                    17:d2:41:39:c2:c2:72:f7:5b:91:8c:51:46:6b:8e:
                    6a:1f:95:5b:8e:64:52:29:6b:34:c3:39:9e:bd:ec:
                    22:cc:c8:6c:65:93:1f:36:bf:8a:49:35:09:51:73:
                    dd:f2:8e:f7:4e:14:8f:d5:04:e3:87:6d:f5:83:70:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:79:D7:93:A2:4D:A1:3C:88:42:19:E0:F9:27:61:33:72:41:91
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139362e302f32332d3234203d3e203538353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f6:81:eb:6b:f9:4b:f0:dc:1f:a5:ec:b1:5d:53:f1:91:ff:
         bb:e1:8e:6f:54:79:33:55:c4:8d:b4:40:05:5e:32:06:59:e6:
         20:4f:94:40:5c:08:05:8a:f2:60:d9:e6:09:ca:75:46:3c:c1:
         46:63:aa:c8:96:94:4d:75:c7:48:b9:15:7a:8b:ff:a1:b5:c3:
         f1:d4:45:66:8a:e0:96:bd:5b:74:d2:ce:0a:c6:f5:6c:86:85:
         09:c7:41:66:e3:34:e8:eb:13:37:1d:a9:8d:38:8a:3f:8c:3f:
         19:75:b7:5e:c6:de:4e:66:2c:c1:51:c4:0a:62:d4:fe:4f:eb:
         8e:c4:69:d8:9d:6f:f4:55:de:ef:4a:0e:7c:ee:92:75:ca:f9:
         ea:e2:34:45:c5:8f:05:31:42:04:ac:b0:1d:0b:c5:e3:88:32:
         a5:50:fb:ce:d1:66:79:0e:2b:c1:49:5f:31:22:b2:71:98:5b:
         92:9c:9a:ba:a2:71:9d:f1:1b:13:9b:7e:5c:04:e7:c8:36:72:
         85:db:d7:0f:06:f2:a9:d7:9e:27:d7:84:11:bf:67:1c:29:b9:
         fc:25:e4:a6:d7:4d:ad:34:3a:88:a9:a5:f6:f1:1d:d4:d3:cd:
         85:6c:dd:54:39:98:e9:5c:81:fe:4c:45:51:f1:df:46:89:b8:
         d2:67:f1:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:35 2026 by rpki-client