Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e3139322e302f31382d3234203d3e203137343239.roa
File:                     3138302e37372e3139322e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier:          JoiImIIIJHTrY6sNR98RoE1vqm7HHxR0RMXvXrLDI2A=
Subject key identifier:   FE:E2:9A:9F:51:E6:8C:A7:C2:23:36:91:24:06:AE:64:61:82:F7:C3
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       1A74B51DCD0F0D3DAFA4216D53C6B55F01C086F2
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e3139322e302f31382d3234203d3e203137343239.roa
Signing time:             Mon 13 Apr 2026 03:31:36 +0000
ROA not before:           Mon 13 Apr 2026 03:26:36 +0000
ROA not after:            Mon 12 Apr 2027 03:31:36 +0000
asID:                     17429
IP address blocks:        180.77.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:74:b5:1d:cd:0f:0d:3d:af:a4:21:6d:53:c6:b5:5f:01:c0:86:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 13 03:26:36 2026 GMT
            Not After : Apr 12 03:31:36 2027 GMT
        Subject: CN=FEE29A9F51E68CA7C22336912406AE646182F7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:c4:84:f9:30:d4:fa:7f:3e:2f:26:28:f0:
                    0d:be:1c:36:24:8d:5b:8d:4d:55:89:74:8b:7a:34:
                    6d:be:75:3b:af:c4:cb:4d:20:3c:4c:8f:c9:ed:1c:
                    6f:af:0c:3c:9d:d0:98:8a:c3:d1:40:fd:fa:87:b9:
                    6c:dc:be:56:ca:2f:74:92:46:e5:cf:12:db:ae:71:
                    45:94:7e:03:5e:70:dd:63:e4:0c:e8:1a:8c:8a:20:
                    d8:e1:c5:30:b3:4d:ac:12:a1:1f:9f:64:7d:36:0d:
                    f2:d5:39:1a:c8:3c:1d:e6:8f:58:91:0a:46:da:42:
                    ca:49:97:24:57:0a:c3:e5:46:55:dd:a4:07:35:a8:
                    ec:94:cd:c8:eb:8b:02:15:77:33:a6:c3:15:9e:a7:
                    97:65:9f:71:dc:ec:c3:0e:bd:6e:04:fa:3e:a4:18:
                    25:9a:79:38:8b:a9:b8:f7:93:b5:3d:c6:12:15:9e:
                    e6:a6:e0:ba:1a:ef:50:9a:ea:db:50:09:c8:b6:b9:
                    be:56:a7:fb:65:3f:5c:75:38:96:a6:af:a5:06:50:
                    2e:59:a6:7e:43:17:ce:c5:43:3a:8c:eb:31:d3:11:
                    51:db:7e:b1:ec:ee:93:fb:46:4d:90:09:58:44:a6:
                    12:f9:61:ae:ec:45:cb:b2:3d:87:f6:b3:b7:f5:67:
                    d8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:9A:9F:51:E6:8C:A7:C2:23:36:91:24:06:AE:64:61:82:F7:C3
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e3139322e302f31382d3234203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.77.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:66:91:55:8f:41:d2:68:a3:b7:cd:41:07:05:42:19:85:d1:
         56:9b:5e:8c:e0:b1:cb:13:1a:e0:fa:9d:27:f5:ba:e3:81:36:
         f6:18:9e:dd:25:4a:1c:f2:d4:28:57:73:61:59:66:a0:47:a4:
         8b:b3:a9:53:04:26:96:1a:5a:4c:c0:5b:f3:bd:5e:f1:5c:60:
         2a:de:92:31:a2:8b:0a:76:ca:bc:a6:f5:4d:9d:02:35:dc:ca:
         da:16:78:e5:0a:f0:29:51:8f:12:f2:4d:58:60:31:20:21:9c:
         9e:4f:79:43:53:ae:1d:00:f8:f4:21:11:42:bc:50:5e:e4:0a:
         91:b5:b1:0a:49:11:ac:80:fe:1c:ec:9a:d7:1a:cb:c4:12:7e:
         0b:0b:e4:f0:9d:d8:89:ff:d7:a1:d0:a5:16:df:a8:3c:81:ad:
         cb:f4:56:17:1c:45:6c:ff:97:91:d2:d1:d6:28:36:b9:da:ea:
         69:66:3e:b8:5e:f1:27:8d:f1:88:da:41:e0:23:6c:19:0d:a6:
         74:00:9b:88:ea:76:ee:82:9a:63:3a:19:30:45:75:dc:56:01:
         4c:d4:a8:f4:61:b0:a8:91:cf:26:be:49:fa:21:fc:60:e8:eb:
         a5:ae:7c:e2:50:3e:6d:93:79:3a:ee:b6:10:5a:60:59:7e:74:
         4e:ce:bc:56
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGnS1Hc0PDT2vpCFtU8a1XwHAhvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3
MjE5QjU5NDAeFw0yNjA0MTMwMzI2MzZaFw0yNzA0MTIwMzMxMzZaMDMxMTAvBgNV
BAMTKEZFRTI5QTlGNTFFNjhDQTdDMjIzMzY5MTI0MDZBRTY0NjE4MkY3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEsSE+TDU+n8+LyYo8A2+HDYk
jVuNTVWJdIt6NG2+dTuvxMtNIDxMj8ntHG+vDDyd0JiKw9FA/fqHuWzcvlbKL3SS
RuXPEtuucUWUfgNecN1j5AzoGoyKINjhxTCzTawSoR+fZH02DfLVORrIPB3mj1iR
CkbaQspJlyRXCsPlRlXdpAc1qOyUzcjriwIVdzOmwxWep5dln3Hc7MMOvW4E+j6k
GCWaeTiLqbj3k7U9xhIVnuam4Loa71Ca6ttQCci2ub5Wp/tlP1x1OJamr6UGUC5Z
pn5DF87FQzqM6zHTEVHbfrHs7pP7Rk2QCVhEphL5Ya7sRcuyPYf2s7f1Z9hxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/uKan1HmjKfCIzaRJAauZGGC98MwHwYDVR0j
BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE
Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzMxMzgzMDJlMzcz
NzJlMzEzOTMyMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzNzM0MzIzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBrRNwDANBgkqhkiG9w0BAQsFAAOCAQEAFmaRVY9B0mijt81BBwVCGYXR
VptejOCxyxMa4PqdJ/W644E29hie3SVKHPLUKFdzYVlmoEeki7OpUwQmlhpaTMBb
871e8VxgKt6SMaKLCnbKvKb1TZ0CNdzK2hZ45QrwKVGPEvJNWGAxICGcnk95Q1Ou
HQD49CERQrxQXuQKkbWxCkkRrID+HOya1xrLxBJ+Cwvk8J3Yif/XodClFt+oPIGt
y/RWFxxFbP+XkdLR1ig2udrqaWY+uF7xJ43xiNpB4CNsGQ2mdACbiOp27oKaYzoZ
MEV13FYBTNSo9GGwqJHPJr5J+iH8YOjrpa584lA+bZN5Ou62EFpgWX50Ts68Vg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:10 2026 by rpki-client