Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e36342e302f31382d3234203d3e203137343239.roa
File:                     3138302e37372e36342e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier:          u0ZBnfS04Agfe3TyMUJ8KUCGcXD8KiYPRqKhACcnYmM=
Subject key identifier:   8A:44:66:60:A6:88:04:80:0E:57:80:C3:8B:F6:3C:44:EC:E1:52:4E
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       212E760B468F56A4F3E157B7588B6DB609E79334
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e36342e302f31382d3234203d3e203137343239.roa
Signing time:             Mon 13 Apr 2026 03:31:36 +0000
ROA not before:           Mon 13 Apr 2026 03:26:36 +0000
ROA not after:            Mon 12 Apr 2027 03:31:36 +0000
asID:                     17429
IP address blocks:        180.77.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2e:76:0b:46:8f:56:a4:f3:e1:57:b7:58:8b:6d:b6:09:e7:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 13 03:26:36 2026 GMT
            Not After : Apr 12 03:31:36 2027 GMT
        Subject: CN=8A446660A68804800E5780C38BF63C44ECE1524E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:d3:b2:f0:c5:ca:b3:4a:bd:28:67:94:78:
                    7b:ba:36:8c:ed:db:b9:0b:4d:a2:d9:c5:76:cf:a7:
                    ad:20:40:b8:56:b9:0e:ba:c7:e3:05:3f:4b:08:6e:
                    54:49:50:33:88:af:87:dd:6a:d8:64:41:c2:e8:9f:
                    4e:04:52:07:0e:1a:ca:f8:39:3e:13:df:fc:9d:34:
                    29:a5:c6:f5:6d:e2:06:a7:be:65:a4:ff:71:f8:66:
                    e0:36:12:dc:ff:99:b9:e9:ba:df:32:bf:e7:4e:4e:
                    db:c9:93:6c:a1:bb:6b:1d:a0:b2:4a:8f:ce:fa:9b:
                    a9:e2:dd:16:db:84:a8:e1:4b:38:45:8a:81:39:15:
                    0a:57:f8:e0:8c:33:29:19:8f:e4:cb:a0:6f:08:ac:
                    83:c6:e3:7d:c8:65:a3:dc:ed:04:d3:a2:67:e9:c5:
                    ba:4c:76:dc:5d:63:aa:67:b3:09:c7:99:24:f7:58:
                    0e:9a:5e:8a:53:d5:db:d9:3e:07:39:e6:3b:89:01:
                    5d:4a:97:3d:27:7b:d6:14:1a:5e:bf:1a:e4:57:23:
                    70:05:59:3e:08:e4:22:c4:21:1e:f7:e8:66:e0:3b:
                    2e:dd:e9:9f:c5:f4:b2:4d:4a:04:e4:59:30:d6:ff:
                    25:5a:ee:d7:c2:45:63:e2:8a:ae:be:41:61:59:a6:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:66:60:A6:88:04:80:0E:57:80:C3:8B:F6:3C:44:EC:E1:52:4E
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37372e36342e302f31382d3234203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.77.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:c1:58:51:2b:a0:2c:02:24:66:e2:0a:1c:e6:5c:0c:01:
         68:bc:b9:47:88:e1:e3:76:29:dc:f7:e3:9b:3b:95:8d:7b:1e:
         7a:38:db:18:dd:a4:1e:40:19:31:aa:ae:9f:3e:98:2b:1e:19:
         3a:62:30:0e:48:41:aa:2e:d1:b0:6e:a7:f9:b3:1a:dc:78:4a:
         26:fc:96:4c:ba:ea:b2:ad:03:1f:61:31:1a:3f:0d:3c:77:30:
         ce:14:00:5f:0e:43:e0:2c:4a:63:d4:27:f1:64:0e:cb:82:2f:
         9b:de:28:0e:c7:00:16:9b:37:7f:54:0a:37:31:ec:44:ff:0f:
         b8:12:07:04:42:a5:b4:09:cb:bd:4b:0f:64:94:21:c0:8e:2e:
         87:d7:6f:98:91:a5:89:3e:2d:9f:1a:6e:41:3b:0c:ce:a9:c4:
         33:36:d3:b8:60:da:5d:de:9c:a5:56:cf:a2:a1:98:05:89:4d:
         15:29:3c:fd:b6:9b:8c:03:9a:af:a3:68:73:4c:59:da:02:df:
         53:2d:35:72:b9:e6:21:95:71:2c:90:d3:21:69:02:04:41:fe:
         dd:1d:47:cb:74:2f:6d:66:bf:ab:44:56:0a:f1:8b:a5:5b:48:
         1c:b8:82:5c:6a:01:b4:2c:16:34:b4:ec:0c:8b:78:66:69:11:
         c1:19:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:21 2026 by rpki-client