Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3234302e302f32312d3234203d3e203338333635.roa
File:                     3130362e31322e3234302e302f32312d3234203d3e203338333635.roa (raw, json)
Hash identifier:          CB5CjRJZbzwi2BuReBMC/SRYgxe3xi97dsw+1PMXKqg=
Subject key identifier:   17:37:A5:4D:BA:AA:21:F8:F1:0E:5B:84:AB:88:9E:91:41:BD:2F:11
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       4127850A1934D637962DD4A3EA9CBBF8D35E149E
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3234302e302f32312d3234203d3e203338333635.roa
Signing time:             Thu 09 Apr 2026 15:59:54 +0000
ROA not before:           Thu 09 Apr 2026 15:54:54 +0000
ROA not after:            Thu 08 Apr 2027 15:59:54 +0000
asID:                     38365
IP address blocks:        106.12.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:27:85:0a:19:34:d6:37:96:2d:d4:a3:ea:9c:bb:f8:d3:5e:14:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr  9 15:54:54 2026 GMT
            Not After : Apr  8 15:59:54 2027 GMT
        Subject: CN=1737A54DBAAA21F8F10E5B84AB889E9141BD2F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:69:91:83:9a:6e:b4:bf:2f:6c:68:2f:5c:
                    b5:95:dd:69:21:40:ee:17:a2:99:82:66:7a:c4:88:
                    fd:02:67:5b:d6:8b:09:a5:c3:d1:71:ed:b1:c8:39:
                    df:5f:db:9d:ea:c1:05:ee:af:9c:79:b6:d6:26:6c:
                    2d:93:90:39:ed:e2:76:c4:f2:6b:61:9b:47:31:d4:
                    fa:4b:b4:3b:13:e4:3f:1c:c1:44:6e:f5:ef:b7:45:
                    2c:8d:0e:50:70:7a:97:2c:0e:eb:1c:f1:90:fa:51:
                    2c:ed:77:45:a0:dd:b9:6e:11:20:0b:38:45:93:c1:
                    5c:73:da:68:d9:34:35:56:99:1a:ec:01:c2:5a:18:
                    5f:a5:4d:8a:67:43:74:92:c9:75:aa:d1:ac:da:c1:
                    6d:51:41:6d:b7:da:6d:cc:7d:d9:83:ce:4c:18:a3:
                    ec:73:8c:0c:fd:67:f4:82:c1:ef:51:d0:b8:e3:34:
                    d1:0c:a3:81:35:3d:d9:1b:57:41:c8:a1:ac:29:46:
                    ac:69:34:9c:c6:d5:36:87:56:35:81:37:c1:67:ff:
                    81:f1:0e:1f:b8:82:df:bc:1e:ee:50:b8:ec:81:60:
                    ec:2f:d8:91:d4:7d:4f:2d:86:c7:8a:ab:fb:3a:4d:
                    a3:1d:97:6b:1b:c6:ff:2e:f4:96:ff:8d:f3:59:aa:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:37:A5:4D:BA:AA:21:F8:F1:0E:5B:84:AB:88:9E:91:41:BD:2F:11
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3234302e302f32312d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.12.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:ef:ef:d7:8a:05:f4:39:46:26:8c:94:b7:0b:98:6d:e6:
         d1:d4:85:19:79:71:f7:04:d0:3b:cf:cc:fb:05:ba:7e:f2:45:
         8e:54:75:27:0e:5d:f5:12:db:65:10:f3:4b:9d:a3:5b:03:01:
         94:28:b1:80:6e:29:bf:b5:44:84:7c:b2:d6:bf:23:a2:fa:a2:
         24:6b:78:8d:8d:1c:94:98:94:2d:f2:31:4c:16:4e:61:8f:e3:
         5e:e6:c3:6e:3b:a6:a3:72:e5:4f:19:19:a7:f1:c1:ea:a2:64:
         52:fb:66:cd:9e:00:e1:3e:12:36:1d:90:c2:56:46:98:50:11:
         34:a6:92:0e:65:06:c5:ad:c6:fa:df:22:4b:13:81:ac:e4:e3:
         95:07:13:bf:df:d1:f7:42:e9:ae:59:78:78:22:6c:5f:8b:34:
         65:f8:37:1c:c5:7c:f9:7b:a6:24:71:8e:1f:43:cb:e1:49:13:
         0f:6e:84:e4:17:d8:e9:d5:13:ab:c4:6e:4f:56:01:f5:27:63:
         51:00:a3:9c:4e:56:cf:97:78:c5:7c:e2:12:17:d0:9b:76:8d:
         c0:a6:3a:4d:f3:bb:c4:ec:ce:6d:0e:8d:45:c4:46:6b:1b:47:
         8b:57:1a:63:51:ff:ec:67:b9:9f:05:b5:87:1c:59:63:03:63:
         8e:46:86:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:56 2026 by rpki-client