Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e36342e302f31382d3138203d3e2034383038.roa
File:                     3132342e3139332e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          yOL3v5raG61yTJc+2zvKdi/a3F/xDODybdY1B0eDvbo=
Subject key identifier:   3E:68:01:75:D2:F2:1E:8E:21:E3:77:AB:84:ED:5C:D3:AB:51:8E:71
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       77FA2B598A401E76F73094D5A592242B9EAC4941
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e36342e302f31382d3138203d3e2034383038.roa
Signing time:             Mon 18 May 2026 02:28:00 +0000
ROA not before:           Mon 18 May 2026 02:23:00 +0000
ROA not after:            Mon 17 May 2027 02:28:00 +0000
asID:                     4808
IP address blocks:        124.193.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fa:2b:59:8a:40:1e:76:f7:30:94:d5:a5:92:24:2b:9e:ac:49:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 18 02:23:00 2026 GMT
            Not After : May 17 02:28:00 2027 GMT
        Subject: CN=3E680175D2F21E8E21E377AB84ED5CD3AB518E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:13:6d:a7:43:eb:90:ba:20:b1:46:a3:17:
                    a1:7e:38:30:ee:58:1a:c1:66:b9:9e:64:2c:1d:1c:
                    77:b4:41:d9:22:52:a8:15:de:16:2b:df:4f:50:0f:
                    e9:27:f4:dc:18:32:ff:14:b8:6f:39:89:96:87:60:
                    d0:13:3d:10:55:5a:91:9a:0e:8b:22:a9:0e:c2:32:
                    64:58:76:61:63:02:de:3f:60:aa:d5:ec:be:6e:46:
                    af:16:bb:50:2f:ca:fd:83:a8:19:13:86:7c:3d:f6:
                    e4:7b:7b:ca:a7:4c:31:a2:f3:4a:f9:53:1c:71:07:
                    04:f6:d5:ce:d4:8b:b0:ef:3d:1b:04:aa:bb:ce:c3:
                    e6:ca:92:cb:d0:78:87:91:ad:6a:57:04:21:a4:a7:
                    e5:8e:67:a9:3d:a2:c7:37:a7:09:c8:db:3f:19:f6:
                    96:a6:7b:85:38:d4:8e:d3:18:11:e2:42:d9:56:c2:
                    ca:85:c8:e6:06:03:d8:e3:ad:e3:bd:e6:2c:66:4d:
                    50:f2:38:d3:6a:93:60:5f:46:71:4c:4b:cb:b6:76:
                    3e:9b:73:83:34:44:fa:31:f5:9e:60:46:4a:7d:52:
                    5a:41:2e:5a:52:fc:b7:c4:91:f5:d5:af:ff:57:25:
                    65:e9:c4:14:4c:5b:1d:dc:f2:5e:b4:61:38:9e:6f:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:01:75:D2:F2:1E:8E:21:E3:77:AB:84:ED:5C:D3:AB:51:8E:71
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e36342e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.193.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:89:df:b8:ea:0a:06:ff:f9:8b:1d:ff:1a:23:89:73:8d:9b:
         c0:2d:7e:db:c8:38:66:28:4c:e6:67:3d:d6:ef:3f:30:8f:f3:
         4c:e3:1d:92:73:69:76:8a:2a:11:48:ad:9e:4a:a7:39:a3:e8:
         79:2e:5f:6e:56:2c:8d:24:62:4c:83:0c:72:00:fa:89:72:54:
         cd:8a:d7:e5:f8:e2:3c:2a:1b:e1:aa:c4:87:ed:a6:22:c2:a0:
         37:6a:63:fe:5e:81:df:48:e8:2b:30:71:c3:0d:36:63:4f:58:
         f0:16:f9:f3:69:01:fb:10:85:dc:ca:31:89:4a:be:17:dd:d6:
         59:47:51:3e:cd:b5:ee:c4:ee:c5:34:f6:37:00:03:bc:1d:b0:
         01:e3:5b:13:88:2a:5b:21:fc:36:45:2a:24:7c:64:a7:b2:44:
         85:b1:b7:e6:f4:01:60:ae:d4:ac:07:0a:13:6d:79:15:b1:2a:
         f1:84:46:cf:da:b7:ce:95:a5:12:e9:c6:2b:cd:c6:9c:bf:b2:
         cd:28:ea:15:37:dd:fe:12:06:25:3b:d6:c9:b1:74:60:44:43:
         d8:41:31:9c:f5:7e:1b:d2:78:05:cb:7f:cf:80:80:d2:bf:65:
         4c:cd:b5:16:20:64:b8:7f:2d:d1:8c:0b:a9:62:60:aa:7b:82:
         08:2f:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client