Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e36342e302f31382d3138203d3e2034383038.roa
File:                     36302e3139352e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier:          thvFRfExYNXNfkCA1ChZpF0ebyhdqsN9G13iZBBf4sE=
Subject key identifier:   E2:3B:4C:13:D9:47:94:69:00:06:F6:16:4D:4A:F8:24:28:FC:DB:25
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       5D122D49711EC54AACCC257CDB71D884C07C7E5D
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e36342e302f31382d3138203d3e2034383038.roa
Signing time:             Fri 05 Jun 2026 05:58:35 +0000
ROA not before:           Fri 05 Jun 2026 05:53:35 +0000
ROA not after:            Fri 04 Jun 2027 05:58:35 +0000
asID:                     4808
IP address blocks:        60.195.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:12:2d:49:71:1e:c5:4a:ac:cc:25:7c:db:71:d8:84:c0:7c:7e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:53:35 2026 GMT
            Not After : Jun  4 05:58:35 2027 GMT
        Subject: CN=E23B4C13D94794690006F6164D4AF82428FCDB25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:51:00:e9:5e:f2:e8:08:d0:94:4a:93:75:
                    0c:c2:dd:c8:36:a8:2b:ef:cd:d8:9f:83:77:64:63:
                    80:a8:fe:6c:29:1e:e4:b6:47:f9:7b:b3:b8:df:e5:
                    95:1d:41:46:76:be:a9:ac:8f:81:84:ee:b3:80:36:
                    fd:1d:65:a6:db:dd:78:6a:7e:56:45:c9:4c:72:9a:
                    7f:15:8c:ff:72:b4:6a:f1:f1:9c:97:6a:9d:63:12:
                    dd:64:9f:5f:c1:fc:59:58:f8:5f:d0:79:33:70:3f:
                    2a:32:0c:a0:26:c1:69:a1:47:91:a0:3c:a5:af:69:
                    73:e2:04:f0:53:c7:b4:c1:ff:ad:2b:57:15:3f:86:
                    78:40:23:b3:ee:18:7e:06:1d:a6:e3:8b:c1:cf:26:
                    7a:9f:59:29:20:4f:6b:da:36:4e:a2:80:89:7a:de:
                    cf:a1:0b:86:1a:68:4f:13:3b:a6:75:dc:58:78:07:
                    08:d4:5e:54:16:0b:d5:45:5d:72:d8:52:b4:6c:9e:
                    f8:f2:87:ee:ac:bc:ea:c7:68:3a:20:a6:ae:8b:cd:
                    36:55:91:9d:ba:4b:2e:e9:a1:41:8b:62:75:e3:43:
                    d1:3b:3e:85:9a:f3:b5:3b:d4:26:5a:f0:ba:1e:e8:
                    94:4e:71:29:06:5c:fa:c8:f9:64:af:10:6e:b3:66:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3B:4C:13:D9:47:94:69:00:06:F6:16:4D:4A:F8:24:28:FC:DB:25
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e36342e302f31382d3138203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.195.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:90:51:92:ce:29:46:6a:59:6d:5f:9e:39:da:96:66:5d:1f:
         1f:6c:da:4a:23:55:52:7e:f2:60:73:40:23:c4:43:6b:2f:7f:
         60:7a:2b:19:91:e6:fa:d1:a1:d2:d6:24:30:8c:35:4c:51:7b:
         00:ff:b3:11:09:87:09:7d:29:91:0c:60:e6:71:5b:69:08:b3:
         90:47:31:43:7c:11:5a:3a:e0:47:04:ee:32:f1:14:53:a9:d9:
         a2:20:18:53:0c:5c:a6:b3:47:30:00:58:8e:15:09:32:fb:16:
         9e:d3:bc:c7:ef:35:19:34:9c:f0:73:22:83:a0:8e:d9:da:96:
         0b:58:e9:7d:e3:a9:36:c2:8c:fe:50:2a:19:bc:c7:b7:22:98:
         b5:ba:b7:1b:1f:14:c2:a9:f9:36:d2:e0:8e:cc:7e:61:c8:29:
         04:06:eb:e0:00:6a:29:35:1b:50:98:03:fb:f8:34:d3:38:cf:
         65:7e:4e:8e:72:e7:b5:bc:a3:fd:a2:11:3d:43:19:91:a6:69:
         38:73:d2:06:d3:41:0d:66:c6:b9:01:22:e8:c6:9c:6e:eb:bd:
         a3:60:d3:4d:4a:12:43:f7:8e:52:84:4b:e1:1b:48:c8:91:d4:
         b8:3e:c3:92:49:52:73:4b:e3:52:04:59:ea:cd:48:df:84:37:
         89:c8:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:14 2026 by rpki-client