Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e36342e302f31382d3138203d3e2034383038.roa
File:                     3132342e3230322e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          lOjftjJhXkVxtKqY++WARFPTkF8jfdkfGQHQw2do8JE=
Subject key identifier:   A5:F1:5E:3B:BC:C8:23:4F:4A:97:53:0F:6D:11:9C:E6:98:0D:E4:9B
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       1537BCE4ECA022F6862EFD6D2A0581F7BF54A3AD
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e36342e302f31382d3138203d3e2034383038.roa
Signing time:             Mon 18 May 2026 03:06:25 +0000
ROA not before:           Mon 18 May 2026 03:01:25 +0000
ROA not after:            Mon 17 May 2027 03:06:25 +0000
asID:                     4808
IP address blocks:        124.202.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:bc:e4:ec:a0:22:f6:86:2e:fd:6d:2a:05:81:f7:bf:54:a3:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 18 03:01:25 2026 GMT
            Not After : May 17 03:06:25 2027 GMT
        Subject: CN=A5F15E3BBCC8234F4A97530F6D119CE6980DE49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:1f:f9:94:1b:a7:a0:9e:1a:0a:e7:51:d3:
                    76:ab:34:c3:80:5b:63:9a:5b:f4:12:83:80:fe:0e:
                    be:c7:c3:ed:54:17:8d:54:15:49:6f:a8:1f:9d:b1:
                    56:13:a5:96:60:cf:a4:84:e0:72:ed:bc:ca:bd:2f:
                    6f:c2:dd:e0:4e:46:45:c4:db:6f:39:53:d2:63:c9:
                    b7:64:ed:38:92:ac:ac:d1:e9:84:52:41:44:5f:79:
                    b2:9e:5f:36:8d:0a:71:af:d2:31:2a:c7:ab:67:a2:
                    1f:b3:8c:58:b8:74:0d:41:d3:31:94:d9:92:c8:c0:
                    f0:cf:c5:e6:44:be:e6:7f:be:09:91:b7:85:62:c0:
                    44:83:6e:f4:a1:d1:da:b2:f0:58:ec:bc:94:c5:c6:
                    db:a9:e3:1d:7d:4a:e6:50:d1:e3:03:32:e9:0b:49:
                    d9:42:4d:fc:8e:e9:bb:29:d2:65:51:5c:09:bf:da:
                    7c:93:53:d8:fb:bc:6c:23:4e:90:fb:76:79:5a:5e:
                    af:25:76:14:53:ed:a3:e3:6e:4b:df:9b:c7:e6:d2:
                    52:45:ae:4b:35:3f:a0:b7:36:52:4c:41:c1:a9:72:
                    73:5e:7e:97:a3:e7:ed:96:4a:1b:c6:93:cf:b5:1d:
                    71:30:ce:1d:40:b2:fd:37:b5:7b:2d:f6:f0:d7:35:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:5E:3B:BC:C8:23:4F:4A:97:53:0F:6D:11:9C:E6:98:0D:E4:9B
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e36342e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.202.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:9d:10:60:d4:c8:91:be:44:31:90:13:d8:56:e7:5b:db:
         12:1f:b2:54:a1:ad:d0:99:c1:e3:44:09:5e:ce:34:10:73:0d:
         61:3d:24:76:68:a9:9a:63:35:b4:bf:b7:ec:e7:80:93:f1:b2:
         e8:cc:09:dc:3e:d1:d9:42:71:01:46:6c:9e:03:5a:a4:97:f9:
         76:6c:88:78:ea:5d:c4:90:79:30:84:a6:fc:ee:e0:ad:51:60:
         9b:3b:68:a8:67:9b:2d:3a:36:0f:56:42:cb:a1:58:cc:0b:08:
         66:9c:9e:46:f6:fc:90:77:95:8f:27:a1:1f:be:7e:c2:5a:82:
         57:82:7b:4a:34:7e:32:07:6c:3f:04:37:3c:a7:f0:9c:37:5d:
         e7:42:4f:b6:84:74:db:20:a7:14:2a:d0:57:83:fb:df:00:3a:
         d3:a5:04:84:98:67:20:0e:f8:79:89:f5:26:13:80:95:a9:c1:
         6e:79:3d:32:47:f5:20:16:4d:68:79:29:2d:3c:05:41:99:dc:
         ab:d2:8f:63:36:6f:de:9c:23:da:41:ad:fe:1b:65:72:4f:c5:
         03:94:49:a1:03:cc:e7:d1:69:f5:e5:45:e9:f7:4b:da:62:dc:
         4e:c8:e9:2d:9d:89:4b:60:7d:13:a8:ed:7a:2d:27:e8:85:9a:
         62:9a:1d:e9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUFTe85OygIvaGLv1tKgWB979Uo60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA1MTgwMzAxMjVaFw0yNzA1MTcwMzA2MjVaMDMxMTAvBgNV
BAMTKEE1RjE1RTNCQkNDODIzNEY0QTk3NTMwRjZEMTE5Q0U2OTgwREU0OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmx/5lBunoJ4aCudR03arNMOA
W2OaW/QSg4D+Dr7Hw+1UF41UFUlvqB+dsVYTpZZgz6SE4HLtvMq9L2/C3eBORkXE
2285U9Jjybdk7TiSrKzR6YRSQURfebKeXzaNCnGv0jEqx6tnoh+zjFi4dA1B0zGU
2ZLIwPDPxeZEvuZ/vgmRt4ViwESDbvSh0dqy8FjsvJTFxtup4x19SuZQ0eMDMukL
SdlCTfyO6bsp0mVRXAm/2nyTU9j7vGwjTpD7dnlaXq8ldhRT7aPjbkvfm8fm0lJF
rks1P6C3NlJMQcGpcnNefpej5+2WShvGk8+1HXEwzh1Asv03tXst9vDXNe2bAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUpfFeO7zII09Kl1MPbRGc5pgN5JswHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMjMw
MzIyZTM2MzQyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnzKQDANBgkqhkiG9w0BAQsFAAOCAQEAsHydEGDUyJG+RDGQE9hW51vbEh+y
VKGt0JnB40QJXs40EHMNYT0kdmipmmM1tL+37OeAk/Gy6MwJ3D7R2UJxAUZsngNa
pJf5dmyIeOpdxJB5MISm/O7grVFgmztoqGebLTo2D1ZCy6FYzAsIZpyeRvb8kHeV
jyehH75+wlqCV4J7SjR+MgdsPwQ3PKfwnDdd50JPtoR02yCnFCrQV4P73wA606UE
hJhnIA74eYn1JhOAlanBbnk9Mkf1IBZNaHkpLTwFQZncq9KPYzZv3pwj2kGt/htl
ck/FA5RJoQPM59Fp9eVF6fdL2mLcTsjpLZ2JS2B9E6jtei0n6IWaYpod6Q==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:52 2026 by rpki-client