Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3132382e302f31382d3234203d3e203338333635.roa
File:                     3130362e31322e3132382e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier:          gdnQ0MhAkG0eruJ4SOaUDbCl7vAmKhBWTrsRqhElqTE=
Subject key identifier:   DA:F2:24:4E:A8:76:B0:C7:C8:F3:8E:5A:FB:83:94:84:E0:B4:B2:30
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       091E7AA22B6A851BC5DA2D14DD4E7A30B57C809C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3132382e302f31382d3234203d3e203338333635.roa
Signing time:             Thu 09 Apr 2026 15:37:31 +0000
ROA not before:           Thu 09 Apr 2026 15:32:31 +0000
ROA not after:            Thu 08 Apr 2027 15:37:31 +0000
asID:                     38365
IP address blocks:        106.12.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1e:7a:a2:2b:6a:85:1b:c5:da:2d:14:dd:4e:7a:30:b5:7c:80:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr  9 15:32:31 2026 GMT
            Not After : Apr  8 15:37:31 2027 GMT
        Subject: CN=DAF2244EA876B0C7C8F38E5AFB839484E0B4B230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:f8:98:9f:29:e3:c9:d0:b8:49:59:c8:e4:
                    02:13:6c:4a:50:fc:79:0d:df:85:c5:6d:db:ac:6c:
                    00:f7:b5:5c:ab:c5:1c:c7:30:3f:c4:c0:08:c9:9d:
                    8a:e9:87:91:f6:3b:24:42:18:35:00:d6:77:e7:87:
                    86:32:49:e6:91:14:b2:c0:60:6e:64:e1:6a:4c:1b:
                    63:b8:48:40:ce:6c:45:87:e9:78:0e:72:8c:3b:fb:
                    0b:11:b5:8a:c3:d4:8b:2d:b5:ad:a7:06:8e:00:fc:
                    ea:01:fc:b5:3e:80:e6:4f:db:ca:98:01:c6:d0:48:
                    cd:5b:5e:22:5c:e0:f8:b0:e5:38:bd:9b:aa:ee:fa:
                    be:a2:e8:a6:cc:91:47:11:b6:ab:8d:31:d6:4f:d3:
                    57:eb:0c:c0:2a:52:8d:e0:11:18:b5:b5:9f:4f:c2:
                    ed:6e:5e:4d:ca:4a:65:63:28:c9:69:d9:fa:fc:23:
                    34:64:e4:84:1b:d1:c9:50:58:ff:5a:19:69:91:a7:
                    97:df:eb:ac:ed:8b:3b:61:60:40:ac:c8:40:be:64:
                    2f:70:5a:88:87:e4:78:f0:e9:5e:8d:6f:c0:0f:22:
                    73:56:eb:36:0b:a7:13:e2:1a:18:3f:d7:1a:7b:ec:
                    9a:1c:0f:5f:f3:51:65:75:83:0a:1f:2f:f0:50:3d:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F2:24:4E:A8:76:B0:C7:C8:F3:8E:5A:FB:83:94:84:E0:B4:B2:30
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3132382e302f31382d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.12.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:a9:f0:7b:e5:51:b5:21:82:cb:08:70:29:f0:f5:fe:30:
         f7:55:5b:a4:d0:b3:7e:ed:b8:90:c4:5b:89:64:b2:0b:7f:1d:
         14:2a:01:3b:b4:98:93:cb:39:8d:94:bc:c5:65:e3:06:8f:23:
         72:e1:82:db:b8:35:b9:5a:ef:99:9d:3a:5e:e8:3c:a2:a4:99:
         32:7a:da:44:75:ea:7c:80:0d:1b:de:a1:07:06:56:de:ce:b0:
         78:5c:d4:2b:03:58:94:ef:7d:08:9e:53:86:e3:ad:68:8f:f3:
         db:72:10:8e:0e:cb:24:02:eb:56:69:92:7a:09:6b:b1:ba:f5:
         f9:84:e1:14:d7:2c:4c:28:f1:8e:09:51:d9:cf:56:4c:3d:bf:
         f8:0d:5e:43:f9:70:b8:6c:a4:8c:b2:a2:8f:cc:ac:5c:74:fa:
         c6:4a:0d:0a:c0:9f:5b:8a:5f:a6:53:c2:bc:a7:5f:f8:5b:6b:
         81:1e:f2:c2:24:2f:3d:e8:9f:0f:de:38:db:20:87:df:47:34:
         26:b1:ef:fb:ec:68:fd:87:68:7e:36:4e:f7:81:a8:fe:87:23:
         2a:a3:ee:de:4d:57:7a:34:1e:ce:3a:eb:55:12:d3:c4:a7:40:
         6e:ab:b6:70:19:88:f5:bd:4f:74:7a:fa:c9:f9:6b:f0:ef:78:
         23:3c:24:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:57 2026 by rpki-client