Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3232342e302f32302d3234203d3e203338333635.roa
File:                     3130362e31322e3232342e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier:          jWnQmmstLGZeDoCi2r6DewmcR7hMNmybWURmP3U1LL8=
Subject key identifier:   1C:CF:20:97:97:3F:B3:64:6B:1D:70:92:7D:8F:56:61:8A:78:5D:0A
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       59E872C3F03416BD4B8C5FB10488990AD8895BC0
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3232342e302f32302d3234203d3e203338333635.roa
Signing time:             Thu 09 Apr 2026 15:59:55 +0000
ROA not before:           Thu 09 Apr 2026 15:54:55 +0000
ROA not after:            Thu 08 Apr 2027 15:59:55 +0000
asID:                     38365
IP address blocks:        106.12.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e8:72:c3:f0:34:16:bd:4b:8c:5f:b1:04:88:99:0a:d8:89:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr  9 15:54:55 2026 GMT
            Not After : Apr  8 15:59:55 2027 GMT
        Subject: CN=1CCF2097973FB3646B1D70927D8F56618A785D0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:e9:0b:32:05:88:fb:19:9f:da:0d:08:83:
                    cc:4f:ad:5e:7a:45:18:c4:62:a5:4b:94:d3:47:81:
                    bb:ba:02:de:c8:99:15:cd:65:5e:f3:2f:7d:d1:78:
                    85:5f:da:2d:48:c7:7c:53:29:cf:e9:10:22:1e:c7:
                    b4:77:49:92:16:bd:6c:a0:95:fd:c5:7d:9b:b0:db:
                    2b:fc:b5:45:18:15:f3:0d:11:fa:26:7d:ce:13:61:
                    45:c2:af:2f:17:fc:31:f5:f3:56:2c:23:f1:e5:ed:
                    d1:ac:11:45:0c:0a:ec:49:e4:23:10:16:07:31:2d:
                    dc:8d:20:1f:66:c1:3f:e4:df:31:05:97:9a:55:98:
                    d6:33:a2:f3:5c:90:68:f7:a5:eb:45:72:b5:8d:a1:
                    19:de:48:22:62:be:49:a6:96:b9:81:35:c9:44:61:
                    d4:d6:a0:79:ee:4f:a8:c3:70:d7:b9:d2:e1:54:4c:
                    10:22:84:39:4d:4d:6d:53:77:82:da:a2:60:d8:d2:
                    45:d5:68:bf:2e:a4:5a:14:a5:5d:01:ca:3a:10:21:
                    dd:9d:eb:bd:9b:2b:13:b5:e7:99:f0:f5:1b:9c:93:
                    a1:94:47:7d:82:03:8e:36:3e:03:e9:7d:b1:b4:12:
                    d8:85:89:f0:e8:2d:0a:3f:96:2a:e6:1b:15:44:f2:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:20:97:97:3F:B3:64:6B:1D:70:92:7D:8F:56:61:8A:78:5D:0A
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3232342e302f32302d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.12.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:f4:63:26:df:54:b6:f4:b0:77:0a:92:9f:c1:b2:3a:4a:
         9c:c7:8d:e9:9d:0f:8a:7e:ed:2d:67:3e:a2:20:d6:df:4d:25:
         c1:9b:80:27:5f:27:17:49:31:f5:00:3e:f7:35:89:19:9d:d1:
         24:9b:a3:b9:79:e0:71:e9:29:f3:40:79:47:fd:86:65:2b:ad:
         9d:42:f4:46:ab:c1:8e:e1:87:57:b8:0a:5a:1c:a1:9d:33:07:
         c4:66:f2:a4:66:54:2b:78:67:f4:cd:19:84:d8:83:71:0c:03:
         75:b9:04:d3:b4:75:fd:bd:d8:9a:cd:95:12:c7:c5:ea:de:63:
         98:b9:d9:a2:10:e0:65:25:cb:c9:07:f8:d8:61:e1:98:80:98:
         19:3c:f2:69:c9:a8:9c:5c:f9:06:76:bf:3b:8f:f7:ab:a3:f4:
         62:b8:52:45:66:52:a2:43:13:36:1c:d7:23:4b:4b:f4:8c:43:
         3e:6f:d5:97:94:d6:35:3a:1b:c6:f8:e9:f0:55:e8:37:5b:aa:
         01:d5:90:73:14:2e:c7:3d:86:37:dc:f4:31:3e:88:7a:da:a9:
         48:22:3d:ea:46:bc:d7:88:ff:09:1b:63:e4:ea:65:56:cb:5e:
         4c:1d:cf:50:85:c0:14:15:cf:b5:45:26:b8:70:e7:8e:d5:7a:
         33:91:73:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:51 2026 by rpki-client