Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e302e302f31382d3234203d3e203338333635.roa
File:                     3130362e31322e302e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier:          JFmA/sSfQAmdD4YLx5kDzomiqE/6ZhITJHPIYxDQpjw=
Subject key identifier:   20:13:83:75:5C:09:EA:8C:75:86:69:69:91:94:A6:AB:8B:F8:A6:9B
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       528EE6CAB46CFCB76F6F4DB431FC75A669CE26CC
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e302e302f31382d3234203d3e203338333635.roa
Signing time:             Thu 09 Apr 2026 15:37:31 +0000
ROA not before:           Thu 09 Apr 2026 15:32:31 +0000
ROA not after:            Thu 08 Apr 2027 15:37:31 +0000
asID:                     38365
IP address blocks:        106.12.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8e:e6:ca:b4:6c:fc:b7:6f:6f:4d:b4:31:fc:75:a6:69:ce:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr  9 15:32:31 2026 GMT
            Not After : Apr  8 15:37:31 2027 GMT
        Subject: CN=201383755C09EA8C758669699194A6AB8BF8A69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:cb:25:d3:9a:b8:31:4c:ba:4f:f5:f3:c4:
                    3b:9a:ed:ba:32:b2:b4:aa:56:e0:54:ab:db:18:4d:
                    ae:d0:76:20:3a:2a:e4:4f:2c:4d:7e:1f:5b:72:e4:
                    40:6b:52:17:a2:79:b7:60:02:4e:bb:6c:9a:ff:50:
                    16:18:ee:20:5c:68:65:0d:ae:2d:8b:8d:76:bb:9d:
                    28:d7:b9:5a:73:9d:c6:48:2f:76:ba:f4:8f:77:56:
                    cd:7c:c7:61:4d:87:6b:c1:29:38:29:89:05:b0:a6:
                    cd:75:6a:b3:ec:39:32:7a:ee:1b:df:72:81:41:2c:
                    34:06:cf:9f:75:20:8e:c0:70:27:29:2a:3b:04:46:
                    ae:f0:9b:6b:05:ac:8f:f5:03:33:b1:01:e6:60:59:
                    e5:ff:55:4e:f6:f1:32:17:49:c4:30:9b:6b:d2:e8:
                    b4:da:21:49:5a:f6:54:37:1a:fb:42:08:1d:99:8c:
                    18:78:a1:99:af:6a:43:5a:31:0f:65:db:37:cf:42:
                    08:99:20:c8:81:47:9e:d7:4d:14:c0:f2:2b:57:0c:
                    e8:c0:ca:02:23:03:b6:ca:26:fc:36:35:74:9f:60:
                    92:f1:fb:c5:82:3a:c9:6d:ee:2d:1c:29:25:dc:75:
                    40:a3:49:69:72:bc:a5:d4:9e:19:5a:a7:dc:94:f5:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:83:75:5C:09:EA:8C:75:86:69:69:91:94:A6:AB:8B:F8:A6:9B
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e302e302f31382d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.12.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         92:75:33:be:f4:eb:a0:89:44:2a:ef:6f:34:21:9a:0f:6e:9f:
         42:d5:3e:d5:f5:42:13:f2:a1:ef:21:bb:58:60:10:b2:ba:a7:
         6a:13:40:e1:25:04:11:95:6a:3a:23:ab:a1:c2:80:84:69:a5:
         67:1e:8d:a0:14:3b:0d:b5:89:ed:80:c5:76:b1:5e:8d:ec:ee:
         00:07:70:8e:06:1e:91:ca:40:0f:29:b1:f8:96:52:91:4f:49:
         ae:f1:d5:c4:5c:96:fd:aa:62:63:fd:ec:6d:61:a5:78:53:03:
         8a:85:d4:8c:ac:e7:c4:4a:0d:69:bd:44:d6:73:b6:37:98:4c:
         45:0a:9c:21:62:43:0d:f8:fc:1a:e2:c5:ee:7f:cf:e4:d0:1e:
         28:f1:9d:d1:a0:9d:2b:da:cb:31:46:d5:28:5f:22:00:01:00:
         52:d1:0c:2f:22:06:f0:01:1f:4d:e7:3a:60:69:eb:18:13:23:
         af:72:55:76:18:fd:8b:59:2d:a4:78:1c:2b:bb:fd:74:a0:a8:
         23:d0:32:a3:52:27:76:f9:a4:69:21:53:03:be:9a:e1:92:70:
         5f:6a:36:d7:6e:56:5e:e8:c2:95:8a:61:4e:4f:c8:42:3d:6a:
         15:aa:c1:09:ba:7b:8c:54:11:26:22:90:26:34:ef:77:2d:b7:
         aa:21:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:50 2026 by rpki-client