Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3231362e302f32312d3234203d3e203338333635.roa
File:                     3138322e36312e3231362e302f32312d3234203d3e203338333635.roa (raw, json)
Hash identifier:          c0ppgctsPmCaDQTV/esVU1g+nhgAGroaJ3LRQLQGrG0=
Subject key identifier:   17:39:E0:86:A2:14:CC:53:08:47:85:B7:D0:89:22:6D:EC:F0:41:46
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       37210BAFBC6AF6CB6B78D6519C1FF79B6B447AB9
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3231362e302f32312d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 11:22:16 +0000
ROA not before:           Sun 19 Apr 2026 11:17:16 +0000
ROA not after:            Sun 18 Apr 2027 11:22:16 +0000
asID:                     38365
IP address blocks:        182.61.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:21:0b:af:bc:6a:f6:cb:6b:78:d6:51:9c:1f:f7:9b:6b:44:7a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:17:16 2026 GMT
            Not After : Apr 18 11:22:16 2027 GMT
        Subject: CN=1739E086A214CC53084785B7D089226DECF04146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:c4:44:87:7a:24:dd:a1:31:25:27:58:f0:
                    1a:d5:fe:e2:92:18:2a:03:f4:71:47:ff:62:d8:e2:
                    74:31:09:18:68:ff:c7:eb:ea:bc:58:09:04:d2:75:
                    bf:ee:47:f9:d0:33:7e:dc:4a:82:48:03:ac:76:de:
                    e7:a3:64:d3:5f:4a:d8:68:90:8f:30:3d:3a:82:b6:
                    ad:32:32:11:da:f0:be:a0:c6:94:75:65:5d:7f:7e:
                    7b:25:2a:46:b0:b8:28:97:3a:13:a8:2a:7d:14:20:
                    1f:c3:32:e6:fd:4f:ea:45:5e:59:60:fc:ea:19:d8:
                    cb:ce:6a:51:43:ac:2f:40:c4:e7:34:fd:9d:6d:68:
                    52:88:9d:2f:1d:1b:be:8a:63:2d:f1:19:a8:28:60:
                    46:ee:39:cb:02:e4:ae:4d:c7:32:c9:ba:b7:eb:57:
                    30:cc:e2:4a:79:ad:35:9f:75:be:fe:36:5d:b1:38:
                    9d:6c:0d:da:cc:0d:e2:2c:8f:31:05:94:a0:91:29:
                    af:a4:01:93:45:bf:1c:3a:23:e2:cb:d0:61:4d:84:
                    63:4c:29:86:ac:87:dc:f5:cd:32:af:f3:28:bb:ed:
                    14:a0:81:d9:32:99:5a:c0:f8:18:a8:24:ff:aa:97:
                    b7:f0:79:f6:ac:e5:f7:71:14:3b:e2:66:08:86:8f:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:E0:86:A2:14:CC:53:08:47:85:B7:D0:89:22:6D:EC:F0:41:46
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3231362e302f32312d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:e5:6b:6b:a6:98:71:8a:4b:a6:16:af:dd:85:1a:93:28:
         56:a3:e5:d4:c8:b8:23:5e:b9:b1:d2:25:39:be:3a:05:b5:1c:
         3b:a8:de:31:f3:a2:d0:59:65:d0:9d:16:e6:53:f7:96:1c:ad:
         13:5c:da:09:6a:02:75:65:96:ce:18:09:72:fa:1a:46:b8:36:
         4e:40:a6:01:88:b0:4c:d0:16:5d:2d:1a:8e:3e:b7:73:c4:d5:
         56:61:02:0e:ea:cf:91:a4:e0:02:fb:1a:87:b7:12:06:9f:f0:
         f4:87:87:8f:ac:4b:55:a9:c0:80:72:05:91:a5:17:c4:3c:df:
         fd:62:42:8a:65:d4:d1:eb:46:57:1b:8c:cb:42:cd:71:e0:4d:
         3a:d8:98:38:cb:e1:44:d5:99:b0:69:48:98:3e:ec:ed:fa:c1:
         17:0c:25:7c:04:fd:cc:bb:3c:56:14:f4:ab:79:6d:33:32:6a:
         4a:2c:fa:71:d8:7f:a2:e2:7d:8f:b0:84:ea:40:c3:85:c2:2b:
         5a:5d:a5:65:c2:e2:0a:bc:50:43:db:97:6c:7b:91:bb:81:19:
         d2:4d:09:8c:ef:d6:cc:31:2a:c3:92:8b:72:ac:77:6f:81:32:
         62:49:2a:3e:b7:e7:35:67:83:4f:da:69:d9:7b:ce:87:42:13:
         1c:15:cf:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:25 2026 by rpki-client