Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3232342e302f31392d3234203d3e203338333635.roa
File:                     3138322e36312e3232342e302f31392d3234203d3e203338333635.roa (raw, json)
Hash identifier:          S5yjH5gV8f7FUvSVKDiboBjyLAhZr0jtxwqhiy4mA7Q=
Subject key identifier:   6B:3B:12:CE:3B:3E:50:21:A0:61:49:99:D3:68:6E:FE:42:4B:09:6E
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       2B6129D206A97AE647A1729994970E4E93EF7ADC
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3232342e302f31392d3234203d3e203338333635.roa
Signing time:             Sun 19 Apr 2026 11:22:16 +0000
ROA not before:           Sun 19 Apr 2026 11:17:16 +0000
ROA not after:            Sun 18 Apr 2027 11:22:16 +0000
asID:                     38365
IP address blocks:        182.61.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:61:29:d2:06:a9:7a:e6:47:a1:72:99:94:97:0e:4e:93:ef:7a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 11:17:16 2026 GMT
            Not After : Apr 18 11:22:16 2027 GMT
        Subject: CN=6B3B12CE3B3E5021A0614999D3686EFE424B096E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:97:0e:d9:56:9a:4d:7b:86:73:8e:87:c4:
                    49:15:a6:69:6a:33:89:6a:73:e2:a7:b9:1c:1b:99:
                    f8:d4:0d:fa:20:01:51:b9:2c:9d:f4:92:5a:0a:3b:
                    47:bb:1b:fa:b7:80:2b:79:69:8b:14:18:26:93:b6:
                    86:5f:74:5e:f8:a3:8d:0a:93:b1:23:28:30:48:40:
                    46:ce:83:ee:15:19:f4:57:e4:ad:54:24:9b:0b:8e:
                    36:e9:26:97:d4:97:c4:14:1f:bd:af:bd:e0:53:88:
                    a2:10:70:ce:13:7c:dc:d0:3b:0c:83:63:e7:f2:4e:
                    ca:12:9b:e8:a8:5f:21:4b:a6:c5:1e:74:1b:1d:cf:
                    a9:fc:a7:a6:5f:db:0a:8d:d5:0f:21:b3:1e:7c:8a:
                    97:39:2d:29:ba:98:38:b6:bb:6d:40:91:ac:a8:27:
                    3b:93:28:e8:b3:1e:71:be:e3:f4:80:6f:b8:f5:65:
                    bf:71:22:06:d9:d2:7f:55:c0:1b:da:a7:45:28:ad:
                    9e:42:28:44:94:28:17:0d:43:c8:a2:ca:f6:39:f4:
                    62:6a:6d:d0:f2:0f:75:d2:57:38:e4:6e:81:f8:0e:
                    b1:66:4c:26:14:25:b4:64:52:98:77:36:c3:f4:0d:
                    1c:cf:3e:e8:f3:fe:71:1b:0e:7f:d3:59:6e:e0:01:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:12:CE:3B:3E:50:21:A0:61:49:99:D3:68:6E:FE:42:4B:09:6E
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3232342e302f31392d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.61.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:29:b2:46:8b:52:0b:2e:e4:de:e6:a3:25:c9:91:13:36:5b:
         d1:74:2e:c1:94:13:c3:9c:b8:fb:ce:1d:fb:3b:66:b5:79:7b:
         18:60:62:e4:2b:a0:b6:de:88:ce:ff:cb:57:27:da:ab:3c:68:
         eb:23:7d:48:9b:b7:ba:52:f9:cf:0e:08:cc:60:6c:d9:2c:04:
         41:bc:31:60:1d:d8:61:b3:60:3b:c6:50:18:11:52:f9:77:9f:
         da:1d:89:b3:b7:5c:86:24:fd:2e:d5:22:d6:1a:19:17:3f:64:
         7f:ea:f3:3e:14:07:9c:a0:f0:2f:6b:0e:eb:dd:18:44:6e:65:
         df:7f:06:3f:36:4a:9f:45:66:b0:f4:2e:b3:7a:14:bb:0b:80:
         db:e7:95:52:da:f2:05:d4:62:fe:dc:69:f8:20:73:80:92:9f:
         00:ff:98:3a:21:4a:ce:9b:5b:8f:4e:7d:12:09:44:fd:88:7a:
         dd:cf:0a:5a:57:cd:82:dc:60:da:3a:c1:50:41:69:7e:03:a9:
         d6:2e:ab:23:36:fd:ec:86:91:e0:27:8d:14:ca:dd:8f:4e:5b:
         99:97:75:61:59:0c:6c:92:30:b6:a9:3f:df:ea:35:13:8e:3c:
         c1:97:cf:38:72:0a:c6:25:22:56:6a:d2:5b:dc:c5:2a:70:02:
         97:10:dd:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:27 2026 by rpki-client