Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e36342e302f31382d3138203d3e2034383038.roa
File:                     3132342e3230342e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          vkQfUL0mXAC/9FyuHnBme+E2nrOi2fxgtTMjJv3v8xk=
Subject key identifier:   E4:07:5D:80:E1:BD:C8:F7:E1:D2:97:F8:A3:4D:94:D3:A1:F5:44:EA
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       26F153A405BD541BF01112EA8735BE85427DAD95
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e36342e302f31382d3138203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:20 +0000
ROA not before:           Fri 05 Jun 2026 05:53:20 +0000
ROA not after:            Fri 04 Jun 2027 05:58:20 +0000
asID:                     4808
IP address blocks:        124.204.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f1:53:a4:05:bd:54:1b:f0:11:12:ea:87:35:be:85:42:7d:ad:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:20 2026 GMT
            Not After : Jun  4 05:58:20 2027 GMT
        Subject: CN=E4075D80E1BDC8F7E1D297F8A34D94D3A1F544EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:46:8a:99:74:7e:0b:87:bd:3e:a1:bc:e2:
                    9f:e0:ed:b6:cc:40:33:ea:c4:b7:59:13:56:bd:be:
                    99:ea:fe:c1:a6:83:b2:b4:56:54:27:e0:7b:45:46:
                    c1:84:1b:00:38:af:7c:c1:53:36:72:b5:45:e3:96:
                    95:10:58:ba:7b:a1:d0:57:d7:d7:09:7f:66:de:b5:
                    ce:fd:bd:44:cb:86:75:64:5a:aa:14:9f:70:11:eb:
                    94:33:8d:63:4f:53:98:26:08:56:60:5a:a3:14:bf:
                    c3:5e:1b:34:d1:dd:0c:2b:89:1e:0e:62:4b:ba:20:
                    4d:73:20:27:22:03:9f:8b:c1:5b:c0:f8:12:e3:7e:
                    6a:44:bf:bb:5b:6f:73:e4:03:ba:4e:ee:ba:ca:b0:
                    e9:7d:6f:73:31:b8:0a:31:59:00:29:0a:48:41:a3:
                    1b:74:94:54:9b:49:50:28:df:03:ec:ac:b6:dc:7e:
                    00:2a:0c:3b:cb:39:e6:1d:92:36:3e:26:43:da:f8:
                    bb:37:86:6c:a0:2a:0b:6b:e6:8e:1f:8c:b5:18:2e:
                    e6:64:bb:aa:c0:62:59:6f:97:41:da:38:c9:14:42:
                    f3:62:20:14:aa:9a:c6:23:db:c8:8d:4f:48:a3:29:
                    22:00:ca:cd:f2:a4:24:75:f2:02:95:e2:42:30:57:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:07:5D:80:E1:BD:C8:F7:E1:D2:97:F8:A3:4D:94:D3:A1:F5:44:EA
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e36342e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.204.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:63:b9:d8:dd:78:32:20:59:66:a9:c2:74:fc:16:10:95:b2:
         51:a1:e4:60:02:e4:fc:58:2c:22:33:2f:cc:7f:bf:3b:02:bc:
         a8:a4:1e:46:0f:f7:e2:45:a8:54:f5:60:3a:f8:26:3f:a3:91:
         3b:5e:06:a8:6e:ba:4f:36:18:3e:94:10:a3:ad:48:da:38:4f:
         fc:99:a3:3d:5b:c3:d5:28:07:e9:ad:0f:ae:ab:71:fb:5d:df:
         5b:35:91:32:4d:3c:c1:b5:a8:90:c8:b0:cf:f4:2b:61:38:04:
         88:90:db:ff:2f:9b:85:3f:c7:8e:5f:24:db:4e:96:f0:ed:c2:
         bc:22:ea:f1:04:24:ce:ae:df:00:c6:0c:50:73:23:53:b7:6b:
         fd:09:b0:89:2e:03:c5:2e:95:86:67:dd:75:21:9d:56:cf:bf:
         a2:65:bf:62:d8:09:cb:e5:ae:f5:4d:65:54:97:e9:61:6a:fa:
         5d:a3:63:65:dd:7e:7a:20:4d:d1:46:1c:48:a3:c8:c4:32:09:
         cb:8d:f7:41:96:7b:3b:2a:07:99:14:d5:ca:03:de:95:84:7b:
         7b:22:a1:9c:4a:8a:e1:d4:c1:71:3a:2e:5e:de:f4:8a:ac:97:
         88:68:a7:d2:82:45:cd:5c:58:54:b9:60:48:7a:ee:b6:85:54:
         16:44:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:39 2026 by rpki-client