Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e362e302f32342d3234203d3e20313334373030.roa
File:                     3138322e35302e362e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier:          ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=
Subject key identifier:   D6:4F:9C:3D:C0:12:00:36:D6:E5:C2:E7:47:31:B1:B5:55:F9:5B:C9
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       7E64DB40659F8BE5153FBC0185F701B9EC5F629F
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e362e302f32342d3234203d3e20313334373030.roa
Signing time:             Mon 27 Apr 2026 10:24:24 +0000
ROA not before:           Mon 27 Apr 2026 10:19:24 +0000
ROA not after:            Mon 26 Apr 2027 10:24:24 +0000
asID:                     134700
IP address blocks:        182.50.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:64:db:40:65:9f:8b:e5:15:3f:bc:01:85:f7:01:b9:ec:5f:62:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: Apr 27 10:19:24 2026 GMT
            Not After : Apr 26 10:24:24 2027 GMT
        Subject: CN=D64F9C3DC0120036D6E5C2E74731B1B555F95BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:14:0c:93:68:b6:da:52:9a:d6:7d:ee:05:
                    46:7f:0c:79:40:81:ed:29:d1:7e:8f:78:b1:16:e1:
                    80:c1:8c:4c:38:85:64:c8:af:2c:13:06:64:f5:45:
                    38:4f:22:94:f5:58:ff:4b:9e:c2:26:35:7d:dc:da:
                    a7:a7:60:4f:a2:fd:63:76:b1:34:67:fb:f8:d6:ae:
                    44:b9:72:3b:4a:25:3b:d0:1f:13:b3:05:62:9d:59:
                    de:5f:55:56:e4:c0:da:0d:15:80:5e:dd:14:97:f7:
                    b8:09:68:a0:5a:ed:f8:4b:f0:56:ab:79:3e:b7:a7:
                    ca:54:49:21:60:cb:0d:b9:5c:cb:8b:46:20:fa:c2:
                    09:f5:e6:b9:8b:7d:2c:e5:b2:b1:e5:89:d9:70:da:
                    ba:27:a6:2d:db:d3:09:f1:9f:4f:48:cb:fc:7a:db:
                    ab:a6:40:e1:91:21:a9:b3:75:00:6c:69:25:ef:a4:
                    36:cb:22:0a:b6:c8:fa:53:05:f5:bb:2b:76:65:09:
                    37:e5:c9:ec:94:f7:81:e6:9b:0b:61:05:8a:1a:32:
                    3c:39:11:65:d9:f6:b2:72:b3:42:7d:61:37:90:d2:
                    6f:3b:80:fa:6d:05:bd:01:87:27:80:77:47:46:62:
                    1d:7e:88:57:4e:83:ba:9a:84:f0:00:ed:94:13:58:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:9C:3D:C0:12:00:36:D6:E5:C2:E7:47:31:B1:B5:55:F9:5B:C9
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138322e35302e362e302f32342d3234203d3e20313334373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:a7:98:1a:05:bc:72:a4:24:7d:df:58:57:da:dc:04:b1:
         49:55:cd:ca:0e:23:67:b0:8d:a6:07:b2:7d:b2:25:c2:e2:83:
         f1:88:5e:7c:b2:fa:1e:a6:41:7c:ff:24:85:6c:19:3a:c0:29:
         43:79:42:af:91:84:f6:c9:b7:28:ab:d2:c2:f0:f2:05:45:e8:
         76:43:45:91:85:fd:f6:fd:60:54:45:06:d8:ce:bc:40:96:ea:
         6f:19:26:64:1b:80:7a:87:76:14:02:41:05:d6:d8:a0:ad:e0:
         62:f3:3c:e4:2e:26:f7:ac:51:87:f3:83:a5:47:9f:b8:32:05:
         6d:5a:a6:46:da:67:af:ad:d8:25:7c:6a:ba:c6:e3:da:06:d5:
         fa:2e:03:6a:d8:40:e4:e7:26:74:09:54:2f:24:b2:54:68:d7:
         d9:85:54:49:99:f2:f1:51:b6:10:40:cc:cf:9d:77:f7:6f:79:
         42:87:e9:91:ef:e6:e2:4b:4e:a7:f9:e3:7a:d1:b0:3d:bc:39:
         8c:ff:3b:78:c2:fe:83:5c:e6:96:1d:fa:7e:1d:60:09:5e:a8:
         cf:2d:33:39:c4:2a:e7:22:47:8a:d4:c6:11:17:c5:19:9e:59:
         66:26:69:34:93:f4:b9:ac:64:7a:30:e3:87:96:d4:bf:ec:93:
         bd:cc:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:30 2026 by rpki-client