Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3230382e302f32312d3234203d3e203338333635.roa
File:                     3138322e36312e3230382e302f32312d3234203d3e203338333635.roa (raw, json)
Hash identifier:          N+qWVrtyoKTREL0643g4ahpDuRmDf40t8cE2VG4Vu1Q=
Subject key identifier:   27:7F:67:8D:8D:9F:62:F1:5C:D7:29:26:15:B9:44:9F:0C:08:32:54
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       218F796AE364BC984583B165FCFABA822DF79036
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3230382e302f32312d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 11:22:16 +0000
ROA not before:           Sun 19 Apr 2026 11:17:16 +0000
ROA not after:            Sun 18 Apr 2027 11:22:16 +0000
asID:                     38365
IP address blocks:        182.61.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8f:79:6a:e3:64:bc:98:45:83:b1:65:fc:fa:ba:82:2d:f7:90:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:17:16 2026 GMT
            Not After : Apr 18 11:22:16 2027 GMT
        Subject: CN=277F678D8D9F62F15CD7292615B9449F0C083254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:56:9a:bf:03:4b:2c:f1:ab:e4:0e:e5:e1:86:
                    af:67:26:70:ae:90:10:7c:c5:a0:1b:a0:4e:a9:ba:
                    e9:e6:e8:1c:3d:c6:c7:f2:dd:46:41:e2:b4:c2:45:
                    83:14:f5:72:4e:6a:0a:26:36:49:41:46:ce:d6:ae:
                    c2:0c:45:46:4a:0e:93:4e:56:fe:ee:d1:8c:ea:b7:
                    04:d8:f2:15:7f:48:1b:3f:1f:20:ed:d4:79:1d:83:
                    c3:cb:a4:7d:78:5a:f6:91:bd:fc:65:2a:50:4e:d7:
                    8c:80:3d:77:88:c3:14:75:30:a0:21:eb:e8:65:2c:
                    95:24:82:5e:4f:2a:34:88:c6:95:ea:79:4c:c2:41:
                    49:48:72:20:75:ea:4f:58:67:a4:f9:46:6f:9a:5d:
                    ad:50:76:ca:a8:f8:37:0e:b6:14:86:88:2e:e5:4c:
                    6a:cb:f7:c9:c5:f6:0c:8f:0d:cf:c8:a4:40:d2:42:
                    d8:ee:9f:22:fd:c4:5c:01:4a:57:d8:c8:5c:02:65:
                    93:3f:af:0a:bb:b3:54:86:a7:f1:38:a3:57:41:30:
                    2d:6f:c3:33:2b:1f:f5:7d:3a:5e:9d:9c:d2:50:27:
                    ad:8f:65:6f:49:f0:3c:22:01:ab:69:96:ea:8e:ee:
                    b9:70:75:e9:b7:b0:29:49:05:f4:af:94:2a:9c:2c:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:67:8D:8D:9F:62:F1:5C:D7:29:26:15:B9:44:9F:0C:08:32:54
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3230382e302f32312d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:b4:42:b7:f4:25:0a:c3:5c:fd:60:74:b6:7d:35:87:64:
         52:88:a7:60:fe:76:73:46:f8:3a:89:6c:d6:f5:2f:8a:87:c6:
         a7:8c:68:78:f1:ee:25:f4:70:80:62:eb:05:4d:26:b7:d3:7c:
         fe:ac:02:dd:30:55:ec:7f:a1:ac:8f:56:37:bc:4b:a2:0d:e0:
         c5:e3:ca:f3:a3:bb:94:76:0b:8a:32:e0:35:32:a2:dd:70:8f:
         0d:5a:33:2e:f3:7b:d5:70:8c:e2:ad:ef:a5:0e:56:66:7b:de:
         1b:66:26:8b:58:9e:c2:ba:9f:95:15:ca:02:c2:59:1e:09:c7:
         c7:95:54:41:32:4b:92:06:f1:62:82:df:85:a4:21:84:80:4d:
         1b:f1:c6:5e:8d:e4:e8:fc:44:1d:5c:88:23:14:a3:09:bc:72:
         e2:65:21:ca:6b:e5:7a:ac:a2:17:46:6b:b8:8f:ba:8a:33:8a:
         9a:6c:9c:df:49:5a:6a:82:78:d6:d0:87:2d:59:7d:54:a2:5d:
         e0:73:fe:be:6f:7e:c5:7b:78:46:ef:e4:20:04:be:2e:03:a3:
         c1:13:c9:12:dd:56:b4:d2:5f:16:25:69:9b:19:c2:b3:3b:55:
         a2:52:a4:3b:f6:f7:4f:67:81:99:92:7c:f8:ee:e7:fd:ad:5e:
         ff:53:79:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:57 2026 by rpki-client