Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20323135353935.roa
File:                     3131322e37332e302e302f31362d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=
Subject key identifier:   18:80:FB:29:3A:18:15:5C:0C:32:56:41:E8:AE:6A:BF:09:C0:D8:DE
Certificate issuer:       /CN=18841C63CD89383303F1BA048085C2212B03B0BD
Certificate serial:       6C91859775D0D11E73EB35B20FD7AE84855A1E48
Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20323135353935.roa
Signing time:             Wed 06 May 2026 02:40:10 +0000
ROA not before:           Wed 06 May 2026 02:35:10 +0000
ROA not after:            Wed 05 May 2027 02:40:10 +0000
asID:                     215595
IP address blocks:        112.73.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:91:85:97:75:d0:d1:1e:73:eb:35:b2:0f:d7:ae:84:85:5a:1e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Validity
            Not Before: May  6 02:35:10 2026 GMT
            Not After : May  5 02:40:10 2027 GMT
        Subject: CN=1880FB293A18155C0C325641E8AE6ABF09C0D8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:53:42:4e:0f:e9:1f:91:65:3e:e3:b0:e2:
                    b5:9d:a4:60:fb:f9:48:1f:c3:5f:3a:ab:cc:7d:a5:
                    4c:69:ef:bb:0e:43:b4:03:a6:74:51:e1:8c:81:23:
                    28:a1:76:f8:60:1f:57:b1:bf:79:ea:df:c1:7a:6c:
                    b5:20:55:7a:9b:bb:0f:97:73:ac:7a:2d:99:2c:71:
                    41:21:19:e2:cd:a7:0c:5a:4a:80:85:1b:56:6d:63:
                    2a:0a:73:c8:b9:30:b6:99:e6:8e:dc:c9:6d:7f:72:
                    5e:73:aa:bc:e7:f2:8f:20:28:c7:a7:a0:8b:80:dc:
                    3d:82:d1:0d:35:27:b1:22:41:fc:16:69:d6:d5:9f:
                    7e:9b:e8:32:c6:c2:aa:0b:6e:07:bd:45:c2:65:3c:
                    43:ee:4a:71:2e:e9:b3:d3:0d:3d:38:8a:74:95:4e:
                    a6:22:e4:35:79:40:9f:a7:2d:1f:2c:88:27:53:33:
                    6f:df:16:4b:53:d5:d9:49:c5:83:d4:0c:9b:9a:72:
                    97:6e:b3:0d:f0:13:1f:e3:33:24:10:ae:b2:a7:95:
                    a9:be:6b:6b:fb:82:43:0f:fc:ec:b9:a3:c8:2c:08:
                    05:9a:95:f6:e4:12:60:f1:52:47:7d:2d:08:3b:f6:
                    00:9b:96:85:76:1e:e5:2a:44:17:14:b6:91:d3:fe:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:FB:29:3A:18:15:5C:0C:32:56:41:E8:AE:6A:BF:09:C0:D8:DE
            X509v3 Authority Key Identifier:
                keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3131322e37332e302e302f31362d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:c6:e1:f6:ee:b7:65:99:b2:7b:3a:63:27:ba:f4:a1:d9:40:
         d2:10:57:48:d6:cc:cb:57:48:59:b1:20:79:df:7f:7e:3f:f6:
         bc:50:21:79:c0:d4:86:2d:94:c2:5f:76:bc:d8:76:16:4f:9a:
         70:be:84:12:17:25:5d:b1:d1:bc:be:20:27:f1:74:dc:82:5f:
         32:1e:1b:12:b4:03:4f:d3:00:01:70:f6:03:da:10:ef:88:bf:
         ba:1e:79:af:99:22:e3:f3:ea:f6:b8:d3:61:dd:8e:20:81:3b:
         dd:f4:1a:c6:32:eb:89:ac:f7:fe:6d:e3:e0:50:3e:55:40:fc:
         f0:83:e7:4d:80:47:50:43:36:0d:6f:8d:b8:c1:5f:c7:28:dd:
         33:e5:16:03:0a:b0:ef:93:b0:50:da:7e:b1:34:0f:86:0f:7d:
         d4:2e:67:30:61:6d:07:fb:82:20:e2:78:0a:5a:40:69:b8:4f:
         35:f1:95:4a:d0:4a:a7:67:fb:0b:dd:7b:6b:c5:4b:9b:83:8c:
         5f:52:56:e0:be:10:15:b2:b5:b1:1c:10:6d:41:ef:90:c7:76:
         fa:ce:59:06:d8:bd:00:ef:57:24:c9:5a:5b:52:5a:32:55:9c:
         8e:8a:5a:37:ff:8f:50:ce:31:eb:bc:8c:58:e5:79:73:66:5b:
         33:06:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:27:36 2026 by rpki-client