Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e36342e302f31382d3234203d3e203137343239.roa
File:                     3138302e37392e36342e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier:          gFku7JSptQptf0uUZ2v8IXW55Kk2eh3KfBwO295QhOk=
Subject key identifier:   6B:27:B8:EE:21:F2:98:BD:49:0E:9C:43:C1:0E:F7:CB:AF:E8:B2:95
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       0CEF4EC6A22D69034054D8EF442C31BAA721F9F0
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e36342e302f31382d3234203d3e203137343239.roa
Signing time:             Mon 13 Apr 2026 03:31:36 +0000
ROA not before:           Mon 13 Apr 2026 03:26:36 +0000
ROA not after:            Mon 12 Apr 2027 03:31:36 +0000
asID:                     17429
IP address blocks:        180.79.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:4e:c6:a2:2d:69:03:40:54:d8:ef:44:2c:31:ba:a7:21:f9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 13 03:26:36 2026 GMT
            Not After : Apr 12 03:31:36 2027 GMT
        Subject: CN=6B27B8EE21F298BD490E9C43C10EF7CBAFE8B295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3a:74:ec:dc:06:37:64:5c:39:42:11:e5:eb:
                    ca:01:26:52:c4:e8:5f:6f:c7:53:bb:1d:c3:ea:53:
                    16:68:75:10:f1:fb:fa:96:1f:06:47:1f:67:fd:bf:
                    9d:bb:13:dd:c8:fa:b5:6e:d4:63:b2:7a:53:af:d9:
                    10:ca:50:78:b1:37:77:cc:4e:f6:a8:fa:b6:66:40:
                    f1:1b:7d:f3:c0:d6:21:78:05:c9:de:f4:e7:0f:df:
                    7d:8d:8f:23:74:d7:13:75:ca:00:00:79:81:eb:af:
                    71:f4:62:db:c0:8f:b7:04:fc:03:15:dc:85:f8:cc:
                    2b:56:d0:db:d3:00:ee:5e:41:44:79:a2:f5:b6:37:
                    10:09:00:ea:bf:a5:5d:33:70:60:b4:f4:11:8c:45:
                    da:f6:0c:be:e2:8d:11:d4:0a:b2:af:08:65:2f:fb:
                    4c:f5:e7:22:d9:d5:9b:0f:f6:ff:f8:8a:9e:2b:27:
                    5b:9b:b8:cb:e7:c3:1f:31:40:89:95:14:08:ed:bc:
                    cf:47:b3:18:9f:7b:30:d9:10:2a:08:f3:f4:68:0d:
                    bb:08:b3:28:59:cc:84:f4:c0:0f:14:dc:37:88:a7:
                    c6:23:dc:a7:e7:e0:3d:3b:a8:f7:87:96:ae:29:47:
                    bd:7f:b6:2a:57:54:22:26:e8:37:a3:0f:c2:39:84:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:27:B8:EE:21:F2:98:BD:49:0E:9C:43:C1:0E:F7:CB:AF:E8:B2:95
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37392e36342e302f31382d3234203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.79.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:da:50:36:3f:03:0c:54:bc:31:17:46:0b:43:c4:14:e6:0f:
         51:00:c7:a8:58:0b:3f:a2:04:32:9a:b2:81:94:6e:42:be:59:
         ec:3e:8d:21:f0:7b:e9:cf:ea:5c:7f:b4:26:c4:10:28:1e:9f:
         53:ca:31:2a:aa:48:cf:b7:56:db:96:eb:d6:f6:2d:42:fa:11:
         84:35:15:df:45:4d:b7:39:5c:a4:2e:22:40:9b:66:1e:f6:36:
         76:f2:72:3e:ca:46:e9:ff:f9:72:75:f8:30:c4:03:8e:4e:e8:
         f0:4d:04:fd:74:1b:72:31:84:d1:d9:e5:ab:6a:a6:64:fe:65:
         5b:13:cf:eb:46:fe:fc:ce:28:5a:02:b3:fd:07:97:64:2d:51:
         3a:dc:2a:2b:be:19:81:76:7b:9a:bd:26:c9:c4:b4:67:ff:87:
         2f:3c:71:a4:87:b5:2a:fb:59:a4:ac:ac:a3:b6:8b:29:f2:3b:
         c0:6d:c7:f9:c6:81:52:60:4c:7b:37:b1:95:c6:8f:da:f8:cd:
         bb:9b:28:e6:01:e0:b6:2c:0b:3c:b3:3b:e0:07:6e:11:74:46:
         5b:72:e5:ff:b7:9c:85:db:17:56:84:60:09:e1:87:e1:fc:38:
         51:0c:81:f7:a1:b3:f3:fc:03:b7:f9:16:4b:14:5e:ad:38:71:
         2c:8a:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:12 2026 by rpki-client