Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e302e302f31382d3138203d3e2034383038.roa
File:                     3132342e3230322e302e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          Ymlao8h+kXO9xOkdIZ4opZTW/waQ80mquaAOyYPh48U=
Subject key identifier:   1B:AD:15:D3:40:C0:62:40:45:57:04:B9:14:C3:EE:1F:3B:D5:8B:5E
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       361D283C489D8779499256BAC7ECEDA2FBB95987
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e302e302f31382d3138203d3e2034383038.roa
Signing time:             Mon 18 May 2026 03:06:25 +0000
ROA not before:           Mon 18 May 2026 03:01:25 +0000
ROA not after:            Mon 17 May 2027 03:06:25 +0000
asID:                     4808
IP address blocks:        124.202.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1d:28:3c:48:9d:87:79:49:92:56:ba:c7:ec:ed:a2:fb:b9:59:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 18 03:01:25 2026 GMT
            Not After : May 17 03:06:25 2027 GMT
        Subject: CN=1BAD15D340C06240455704B914C3EE1F3BD58B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:ed:7c:5f:56:91:3f:1e:29:c9:41:c3:46:
                    61:43:4b:08:17:ea:89:ed:b0:e9:db:5e:26:c1:84:
                    4c:ae:bb:0c:ed:10:f6:2d:d9:8e:bb:6d:22:e7:a8:
                    fe:fb:74:36:16:8d:94:2c:10:cf:24:51:fe:90:c1:
                    e5:70:38:da:a9:56:98:3f:2e:99:1e:56:76:98:40:
                    16:77:93:ca:f2:44:24:81:8c:f0:80:67:68:5f:b1:
                    48:67:3e:91:a4:92:47:4f:f5:ce:8f:d8:a6:cf:81:
                    f6:4f:5f:ac:31:52:73:15:07:31:2a:fb:da:b8:18:
                    03:a3:54:ba:56:63:1f:df:13:28:99:fb:49:7e:cf:
                    68:1c:5e:9e:48:30:74:67:a3:74:e8:3a:e6:57:18:
                    88:a7:6e:30:2c:c0:e2:74:be:dc:02:84:97:99:d1:
                    ca:21:2b:94:79:a3:01:20:ce:86:9d:33:ed:a4:a6:
                    8b:ee:f3:27:da:92:ac:15:d7:d1:b8:77:f1:ee:6e:
                    84:e7:5e:00:7f:b5:2b:92:6d:e0:0a:da:c0:b8:4d:
                    bf:af:6b:a6:c0:b6:51:df:35:5d:64:32:2d:c3:96:
                    14:7a:27:1c:1d:64:28:e3:08:d9:47:85:87:52:93:
                    6c:a1:ce:bf:35:f3:83:b6:fd:b5:13:c9:a0:09:ad:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AD:15:D3:40:C0:62:40:45:57:04:B9:14:C3:EE:1F:3B:D5:8B:5E
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e302e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.202.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         62:95:65:de:cb:15:a1:11:15:b3:ce:c3:ca:7a:e9:14:63:f3:
         10:6e:87:a9:d4:35:40:91:d0:9d:22:95:40:5d:94:15:b2:2e:
         32:5a:4e:45:62:55:19:58:3d:be:23:c9:dd:23:48:5e:a7:e0:
         74:49:ba:3d:8c:e7:7b:13:8e:f6:77:1b:a3:22:31:3f:a1:2a:
         8c:05:2f:d0:26:95:c5:1d:2c:e3:e3:15:b8:b1:d6:46:78:e2:
         a2:8b:50:bc:0d:9b:0c:f9:fb:4f:68:98:81:38:b1:69:3b:6e:
         83:35:09:e2:61:6f:a6:d7:3a:f3:02:26:f2:1d:61:c2:02:8a:
         61:f4:cb:10:d2:ed:46:a2:b9:a0:41:2e:e7:11:c0:ee:92:f0:
         12:b6:d9:09:40:55:52:94:f5:34:5d:49:2c:8a:5d:48:b5:db:
         28:7b:d7:e1:e8:4d:e4:49:92:d0:6d:83:4d:e3:10:ed:99:9f:
         82:d3:83:42:bf:0a:1b:01:d4:04:79:1c:1c:cb:61:f1:a7:56:
         31:92:68:d9:01:e9:b6:9a:22:00:fb:f1:c5:0f:d9:2d:75:d7:
         12:2e:14:ca:8e:10:2f:e6:35:b5:a6:cb:a8:ff:d4:64:3f:6b:
         72:ee:9e:2e:f5:bb:a2:4e:7f:94:1e:7c:88:23:ba:08:1c:8e:
         a9:55:ef:49
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUNh0oPEidh3lJkla6x+ztovu5WYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA1MTgwMzAxMjVaFw0yNzA1MTcwMzA2MjVaMDMxMTAvBgNV
BAMTKDFCQUQxNUQzNDBDMDYyNDA0NTU3MDRCOTE0QzNFRTFGM0JENThCNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhu18X1aRPx4pyUHDRmFDSwgX
6ontsOnbXibBhEyuuwztEPYt2Y67bSLnqP77dDYWjZQsEM8kUf6QweVwONqpVpg/
LpkeVnaYQBZ3k8ryRCSBjPCAZ2hfsUhnPpGkkkdP9c6P2KbPgfZPX6wxUnMVBzEq
+9q4GAOjVLpWYx/fEyiZ+0l+z2gcXp5IMHRno3ToOuZXGIinbjAswOJ0vtwChJeZ
0cohK5R5owEgzoadM+2kpovu8yfakqwV19G4d/HuboTnXgB/tSuSbeAK2sC4Tb+v
a6bAtlHfNV1kMi3DlhR6JxwdZCjjCNlHhYdSk2yhzr8184O2/bUTyaAJrTiZAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUG60V00DAYkBFVwS5FMPuHzvVi14wHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMjMw
MzIyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZ8ygAwDQYJKoZIhvcNAQELBQADggEBAGKVZd7LFaERFbPOw8p66RRj8xBuh6nU
NUCR0J0ilUBdlBWyLjJaTkViVRlYPb4jyd0jSF6n4HRJuj2M53sTjvZ3G6MiMT+h
KowFL9AmlcUdLOPjFbix1kZ44qKLULwNmwz5+09omIE4sWk7boM1CeJhb6bXOvMC
JvIdYcICimH0yxDS7UaiuaBBLucRwO6S8BK22QlAVVKU9TRdSSyKXUi12yh71+Ho
TeRJktBtg03jEO2Zn4LTg0K/ChsB1AR5HBzLYfGnVjGSaNkB6baaIgD78cUP2S11
1xIuFMqOEC/mNbWmy6j/1GQ/a3Luni71u6JOf5QefIgjuggcjqlV70k=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:34 2026 by rpki-client