Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e36342e302f31382d3138203d3e2034383038.roa
File:                     3132342e3139322e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          tK+HWhcjVdHEEioObdoTg6UTI5uMAs6KAyr4Boof1Ms=
Subject key identifier:   0F:5A:F9:BB:6C:23:E4:2E:57:0D:BD:D2:50:DE:91:74:CF:E0:51:78
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       70549D03F454AFBF3073F9A5EEF223C81349F569
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e36342e302f31382d3138203d3e2034383038.roa
Signing time:             Mon 18 May 2026 02:14:11 +0000
ROA not before:           Mon 18 May 2026 02:09:11 +0000
ROA not after:            Mon 17 May 2027 02:14:11 +0000
asID:                     4808
IP address blocks:        124.192.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:54:9d:03:f4:54:af:bf:30:73:f9:a5:ee:f2:23:c8:13:49:f5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 18 02:09:11 2026 GMT
            Not After : May 17 02:14:11 2027 GMT
        Subject: CN=0F5AF9BB6C23E42E570DBDD250DE9174CFE05178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:26:cf:64:94:16:b8:21:e9:55:6e:02:25:
                    89:ec:8b:1b:89:45:ba:f8:28:c5:41:cd:20:7a:45:
                    1f:c2:16:28:03:3b:a5:8d:a0:09:95:59:5a:15:b0:
                    83:f6:58:bb:a5:40:17:1c:b5:d4:a1:27:64:cb:17:
                    a6:00:44:a9:b3:e6:bf:04:b5:2d:17:fa:86:5e:44:
                    ea:68:81:c8:73:00:47:ad:c1:21:be:e5:1c:a1:8b:
                    9f:08:95:bc:ad:62:19:a8:9b:fc:56:29:7e:34:83:
                    99:ce:6b:ac:a3:f7:63:af:c7:e4:34:f9:78:3d:db:
                    bd:38:70:65:bb:94:97:cd:8e:c8:2e:ee:23:3a:1d:
                    21:63:0c:f7:3a:e3:26:fa:10:4a:c9:67:2a:26:23:
                    d3:8f:1d:c5:f3:e3:63:37:3c:e6:d0:18:5b:9a:f9:
                    2e:46:c6:23:d8:71:e0:f7:f7:d1:e3:4c:70:32:e3:
                    aa:d3:05:31:ce:36:80:b7:91:ba:0b:72:0a:ab:5d:
                    bd:53:d3:00:48:5d:59:da:96:73:d4:f5:f9:98:6b:
                    21:ac:bd:c0:01:09:5c:25:42:44:be:96:0f:f3:b1:
                    f0:50:1c:06:bc:a9:56:fa:de:71:c5:90:ad:83:58:
                    52:83:45:26:bb:09:40:a2:bc:53:da:12:d0:99:20:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:F9:BB:6C:23:E4:2E:57:0D:BD:D2:50:DE:91:74:CF:E0:51:78
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e36342e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.192.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:c2:ce:bf:78:14:12:93:4c:cf:7c:11:aa:70:b2:00:9a:5a:
         1d:1b:5f:d1:2c:93:19:62:16:8e:60:d7:22:b4:f1:52:4b:0b:
         a0:91:98:9f:52:7f:35:23:4d:f6:f6:3c:c0:bb:98:94:67:e3:
         14:12:d4:bc:e8:18:43:e6:7d:9e:17:43:a0:3f:d1:ae:2b:df:
         31:7d:34:a0:3b:da:f9:3e:e7:c8:f6:3b:4c:88:3d:99:5d:af:
         04:fe:46:65:13:bb:08:7d:c4:5d:8b:73:76:92:be:a5:82:28:
         6a:00:b9:25:17:7b:df:74:ed:dd:3c:4a:35:aa:89:83:2f:cf:
         07:10:f3:a6:24:d2:61:71:bf:ae:e8:78:be:c4:90:dd:0c:d7:
         e3:01:18:9f:cc:10:32:11:f2:a2:22:66:42:77:1b:3c:bd:75:
         6d:61:26:bd:86:35:85:ba:85:7e:d6:ae:49:54:79:5b:49:98:
         52:90:81:d2:d7:d9:c2:23:d8:20:61:b8:d9:eb:89:69:73:e3:
         96:ec:eb:bf:44:c8:63:db:c4:f6:94:cf:16:74:84:63:77:25:
         c5:21:2f:77:df:75:70:3e:d6:bc:f3:8a:6e:30:27:ef:24:3a:
         77:82:c5:67:1e:73:63:68:bf:f1:f4:b9:43:dc:d4:73:6d:3d:
         55:39:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:35 2026 by rpki-client