Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa
File:                     3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          2tdu5c1uUbadXJyUpnqrgfKWk2m1g6RSna+eoQnIR4E=
Subject key identifier:   40:28:19:A3:D5:5C:57:06:73:DF:A9:8B:F1:E3:EF:C8:37:B9:66:1C
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       168DD5C13D52FF76774F79018D935425E5980040
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa
Signing time:             Tue 19 May 2026 03:01:17 +0000
ROA not before:           Tue 19 May 2026 02:56:17 +0000
ROA not after:            Tue 18 May 2027 03:01:17 +0000
asID:                     4808
IP address blocks:        203.207.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8d:d5:c1:3d:52:ff:76:77:4f:79:01:8d:93:54:25:e5:98:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 02:56:17 2026 GMT
            Not After : May 18 03:01:17 2027 GMT
        Subject: CN=402819A3D55C570673DFA98BF1E3EFC837B9661C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:0d:a4:2b:b0:5a:21:6d:a5:e4:68:17:e7:
                    8e:05:82:09:35:33:62:a7:a6:2a:a8:e5:f2:b0:9b:
                    49:f9:a0:05:5b:d0:00:5e:b5:a6:73:68:3a:37:b6:
                    5c:95:43:aa:2a:cf:da:20:b4:37:69:9a:22:22:e5:
                    42:4e:5e:e8:71:bb:18:d5:d9:0a:64:9c:e5:85:36:
                    ef:3e:ad:cb:65:f8:92:ba:39:ac:bc:c7:34:60:9f:
                    89:e1:90:2f:e8:a4:80:ce:2b:6e:89:5e:a6:4a:46:
                    d5:e8:0a:a3:81:77:a5:dd:41:6d:af:46:d6:9f:e0:
                    77:43:73:35:9a:2a:c1:9c:fa:86:70:95:36:ea:a9:
                    4a:9d:fc:c7:bc:6b:9c:db:73:fd:18:ac:93:d7:99:
                    5f:f4:99:f0:93:b6:eb:3e:c0:c9:b5:4a:ce:a7:ee:
                    03:d1:37:07:42:2e:cf:9a:74:75:c6:12:cc:c5:1e:
                    f1:22:c1:3d:f2:6f:69:fa:e8:9f:fe:59:6f:91:dc:
                    df:97:64:5f:5f:6e:0c:c0:0e:bb:ee:77:4b:d2:d8:
                    f9:b3:2e:a6:37:7a:f4:3d:c2:61:f3:d8:c6:5f:2c:
                    4d:7f:5a:b9:43:d7:da:27:39:e5:fd:91:54:ee:21:
                    06:b0:87:23:06:6a:5d:9a:50:d2:e0:86:5b:3b:5f:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:19:A3:D5:5C:57:06:73:DF:A9:8B:F1:E3:EF:C8:37:B9:66:1C
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:14:75:fe:f1:85:76:b3:1b:b3:cb:08:49:8d:ae:35:13:
         9c:8a:98:a2:61:fe:99:87:24:db:59:02:7b:f5:73:39:03:07:
         08:48:49:3f:21:62:70:f4:08:0a:c2:41:23:1a:52:fd:36:8b:
         65:b8:f1:a3:fb:d0:6b:c6:5f:c1:25:05:a1:30:15:f8:5d:f0:
         8e:a1:17:4c:e4:85:f1:db:80:2c:ba:db:3c:ed:7b:06:5f:52:
         dd:f7:fd:2d:69:c6:ad:35:2d:ec:d2:98:49:ed:6b:9e:6d:c0:
         cc:52:e8:b8:fd:64:b2:24:e8:e4:dd:34:5c:d5:e1:94:a4:d1:
         2e:42:4a:8f:1b:55:a8:5b:99:5f:33:b0:23:33:16:69:da:db:
         27:79:64:6b:40:f9:4a:be:e2:4e:cd:d8:da:6f:0a:42:47:aa:
         d9:1c:17:5a:c6:a6:c2:d1:3c:ab:a7:bd:f8:e4:da:19:77:be:
         44:38:36:a0:fe:90:55:ea:f2:f2:b8:b9:41:3d:64:0f:83:9b:
         3a:87:c4:da:ef:62:2e:87:48:c8:60:57:6d:f6:e5:1b:2b:e8:
         c8:90:30:51:89:67:9d:02:cf:a8:f8:ef:56:90:d0:b4:d1:e1:
         35:20:4a:22:1c:0a:30:7f:7a:ad:5b:ec:7b:77:f7:94:ea:46:
         1e:36:33:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:13 2026 by rpki-client