Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37382e36342e302f31382d3234203d3e203137343239.roa
File:                     3138302e37382e36342e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier:          /cNVyVbJSdRCnqNiexmLChpxP6Iee+eb5xD/1Oos7ag=
Subject key identifier:   FC:21:C0:D5:63:9C:12:A7:FD:87:D4:A6:66:06:37:07:6B:B9:4D:DB
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       5B35611CF5ADEF2FA5037E3109D1BFA4BD506EBF
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37382e36342e302f31382d3234203d3e203137343239.roa
Signing time:             Mon 13 Apr 2026 03:31:36 +0000
ROA not before:           Mon 13 Apr 2026 03:26:36 +0000
ROA not after:            Mon 12 Apr 2027 03:31:36 +0000
asID:                     17429
IP address blocks:        180.78.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:35:61:1c:f5:ad:ef:2f:a5:03:7e:31:09:d1:bf:a4:bd:50:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 13 03:26:36 2026 GMT
            Not After : Apr 12 03:31:36 2027 GMT
        Subject: CN=FC21C0D5639C12A7FD87D4A6660637076BB94DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:e9:d5:f2:d0:22:e5:97:2a:d2:18:cb:de:
                    3e:d7:a0:ae:5c:85:6f:11:3c:94:7d:f2:c9:fe:ed:
                    8e:4c:6f:91:72:f4:f8:cb:43:3e:06:bb:52:e4:1a:
                    5d:d7:2e:e0:70:e7:b3:3a:65:b3:92:22:5a:85:15:
                    b7:e1:f4:7a:48:b8:da:de:1b:7a:00:5a:be:07:6e:
                    5d:a4:9b:43:72:94:de:56:eb:f4:c5:78:83:64:b4:
                    31:49:73:51:89:c5:e5:04:8a:59:16:8b:77:92:f0:
                    be:26:7e:c0:1a:51:d3:de:c5:c3:de:ab:43:f4:59:
                    7a:14:9d:87:ca:36:e5:ee:a2:c2:51:fb:af:9c:0f:
                    5d:97:97:5b:c1:e2:ed:0c:84:92:d5:cd:06:59:df:
                    ee:04:09:0e:26:b1:4f:be:3e:76:12:79:fd:1c:c0:
                    d5:79:cb:74:ef:fb:5c:0f:92:42:d1:0e:d3:3a:8a:
                    66:f6:06:5f:b0:21:07:33:c8:77:6e:4d:f7:09:88:
                    ff:9c:82:25:58:dd:06:fb:bb:6c:37:8a:28:89:cb:
                    55:64:5f:29:90:9b:c5:a6:c9:69:4c:81:7f:07:fe:
                    24:47:e6:0c:0a:c0:b4:3e:d8:56:17:96:d9:b4:1c:
                    0a:72:33:36:3f:d0:d6:30:c8:85:2e:e1:bc:59:ac:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:C0:D5:63:9C:12:A7:FD:87:D4:A6:66:06:37:07:6B:B9:4D:DB
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37382e36342e302f31382d3234203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.78.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:fb:4a:34:3d:19:08:7d:d3:f6:02:ec:04:8e:92:0f:2c:16:
         96:67:ba:64:54:db:1d:8b:e4:33:ef:06:c3:e2:ef:d5:d0:23:
         b8:8d:c0:d5:be:82:6a:97:b5:46:b9:74:f3:50:b5:e3:b6:f8:
         eb:eb:63:86:dd:68:20:7b:ff:7d:e6:90:0a:d6:e7:4a:aa:61:
         48:d3:46:21:c8:80:13:d1:6c:c3:a1:ae:3d:9c:83:8a:6e:16:
         cd:5f:a3:2f:fd:84:ec:2c:70:d2:50:40:10:1c:cc:e6:ee:27:
         fe:9f:2e:b1:d0:af:28:27:ed:33:82:89:1a:d5:7e:9d:57:de:
         85:50:71:8a:3c:ae:42:8a:b7:76:56:6a:54:b8:43:7e:6b:83:
         ac:79:8a:99:7f:13:32:68:84:af:6f:aa:ea:43:4d:ed:ed:6b:
         66:bd:c6:40:ab:6d:6b:88:d1:1e:04:6e:39:c9:8c:64:dc:86:
         01:9b:62:55:aa:4a:ed:dc:10:ff:26:57:dc:4a:ee:2d:f0:53:
         5d:b9:25:f0:c9:a8:b9:3f:cd:e9:62:f6:53:80:88:1f:22:5d:
         6b:92:43:c9:bb:a6:ef:15:04:49:bd:11:de:71:a4:ac:47:0a:
         b7:05:01:36:c5:0c:7b:c1:ab:68:45:22:b4:7c:2e:f8:3a:92:
         d0:ac:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:15 2026 by rpki-client