Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e302e302f31382d3234203d3e203137343239.roa
File:                     3138302e37392e302e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier:          h5k4zX8NfA64sGcp34sXrSFDX22tbn02yBKpkTE99ig=
Subject key identifier:   F4:27:76:2A:1C:6E:0C:ED:D0:2A:00:BA:4B:05:57:43:1D:49:2D:65
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       4E0F253C106A4611943F6B309A2F75DA94275BDC
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e302e302f31382d3234203d3e203137343239.roa
Signing time:             Mon 13 Apr 2026 03:31:36 +0000
ROA not before:           Mon 13 Apr 2026 03:26:36 +0000
ROA not after:            Mon 12 Apr 2027 03:31:36 +0000
asID:                     17429
IP address blocks:        180.79.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0f:25:3c:10:6a:46:11:94:3f:6b:30:9a:2f:75:da:94:27:5b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 13 03:26:36 2026 GMT
            Not After : Apr 12 03:31:36 2027 GMT
        Subject: CN=F427762A1C6E0CEDD02A00BA4B0557431D492D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:59:37:48:4b:4b:10:00:57:40:59:c9:53:
                    05:90:7d:bc:e5:98:92:7e:1f:ca:d5:ef:c9:ce:c8:
                    67:29:25:a0:49:0b:2c:c8:3c:9e:b3:37:f3:b0:fa:
                    cf:b5:4f:77:ab:b9:6a:91:eb:5b:bb:be:2c:64:3f:
                    e3:3a:1e:c2:7d:da:1e:2f:a1:35:09:38:b4:13:00:
                    da:a7:9d:65:33:24:4e:a6:ca:ca:15:45:bd:19:b9:
                    68:24:71:8d:c6:7e:4b:21:ed:7b:d0:4d:2e:16:fa:
                    69:df:ec:71:fe:48:bf:23:5a:ca:2e:97:e1:08:d2:
                    1e:04:68:fb:b6:8f:48:ed:91:da:b4:81:1a:32:8b:
                    00:55:aa:9b:c4:0d:1c:33:f0:53:83:e2:8c:e3:d0:
                    df:bc:ef:b1:c8:b6:4f:8d:dc:5c:f8:54:b8:6f:51:
                    cf:dc:79:b6:07:50:6d:64:17:97:b2:64:b3:6c:2d:
                    c5:77:45:0b:c8:de:6b:71:6f:43:e9:1b:a6:df:06:
                    3e:2a:39:50:d0:8b:32:e4:60:02:b0:53:2c:d7:d2:
                    c8:bc:51:cf:57:9d:e4:bf:92:d2:d5:5a:e3:4b:5a:
                    89:b2:2b:a7:5d:37:68:48:16:ea:03:bc:a0:56:1e:
                    c7:52:68:df:b1:32:5a:53:a1:9a:1d:5c:fb:03:aa:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:76:2A:1C:6E:0C:ED:D0:2A:00:BA:4B:05:57:43:1D:49:2D:65
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e302e302f31382d3234203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.79.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:45:3a:d0:f4:c1:41:4d:a5:5b:70:a8:fa:38:ca:d7:3a:
         95:f5:c9:ab:6a:63:73:cc:ce:3c:08:df:a7:93:71:2c:98:e0:
         04:52:95:ef:71:a1:9b:95:04:03:c0:57:de:e1:d5:82:26:fe:
         d7:2c:7c:ba:a9:43:97:11:f3:83:9d:e6:f7:8a:3d:4a:61:86:
         ee:5c:21:4d:23:12:ea:d7:be:c0:2c:48:d6:1a:12:19:94:1b:
         bf:26:3e:cf:7e:87:2f:bc:ee:00:71:b3:d3:67:f7:1d:7c:40:
         5d:6d:d5:a3:54:65:d2:75:51:47:17:12:49:af:10:cc:ba:97:
         00:66:be:54:ff:8d:5a:48:ff:2c:bd:d5:b5:bc:da:fa:9b:f3:
         db:a7:94:6b:53:3e:62:ef:78:ce:e9:15:a9:e4:ee:7e:37:d6:
         ed:a6:cd:43:c4:83:ab:e5:16:ae:1c:8d:04:50:a9:ad:28:60:
         b3:be:57:2f:67:a5:80:6c:12:52:6b:a7:66:f6:e9:4a:c3:9e:
         9c:21:6d:31:de:f8:c4:d7:62:be:fb:2a:22:9f:c8:39:ec:13:
         87:7f:d2:be:96:e9:7b:12:bc:ae:88:76:64:2a:91:f5:c5:c1:
         05:92:58:a9:ca:31:d1:88:eb:41:36:ac:22:9c:d7:68:15:9f:
         a3:c8:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:19 2026 by rpki-client