Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e302e302f31382d3234203d3e203338333635.roa
File:                     3130362e31332e302e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier:          UI0GQKRX8JvpYqsGDPtRsOY9aOHxfJ5jSYo/v6u5wSk=
Subject key identifier:   39:87:34:B5:65:E7:D0:FB:7B:0C:C2:17:D1:62:73:1A:08:A7:56:EB
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       26D6F8AC19740574923FF883720887BAB801A236
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e302e302f31382d3234203d3e203338333635.roa
Signing time:             Fri 10 Apr 2026 00:26:33 +0000
ROA not before:           Fri 10 Apr 2026 00:21:33 +0000
ROA not after:            Fri 09 Apr 2027 00:26:33 +0000
asID:                     38365
IP address blocks:        106.13.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d6:f8:ac:19:74:05:74:92:3f:f8:83:72:08:87:ba:b8:01:a2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 10 00:21:33 2026 GMT
            Not After : Apr  9 00:26:33 2027 GMT
        Subject: CN=398734B565E7D0FB7B0CC217D162731A08A756EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:17:0d:ea:18:6f:b5:e5:75:42:8c:2f:40:
                    26:df:b9:ae:93:bb:2c:09:98:cc:a1:b5:4b:37:03:
                    2d:ca:bf:45:18:25:8d:b5:66:f1:92:ef:2e:1b:3e:
                    4c:01:44:5e:de:2b:9d:b9:06:59:94:3f:4e:b2:32:
                    31:4d:3f:d0:21:35:3e:54:07:1c:a6:a3:4f:17:6c:
                    97:ee:ed:55:18:6f:b7:d3:05:ee:44:63:d8:c2:a3:
                    fc:48:42:60:e5:fa:f1:b8:2c:cb:a5:85:1b:a4:9d:
                    c0:a8:da:39:2a:bd:ba:6e:07:23:0f:85:2b:bf:4c:
                    85:49:b6:00:99:50:18:a9:ea:1d:e8:10:61:73:83:
                    68:11:42:5b:6f:3c:7c:19:eb:42:f7:18:2a:c5:3c:
                    11:3b:7a:ff:cf:30:76:b3:25:c2:ad:be:62:17:1d:
                    40:56:fc:3f:8f:6b:6c:25:71:b1:ff:f3:b7:fc:76:
                    51:fa:8f:b9:c8:a5:61:f3:17:96:c3:f4:ae:a3:8c:
                    3a:36:9c:6b:6e:4b:25:b5:ab:f1:68:2e:d7:2f:16:
                    84:ec:65:72:6b:39:92:89:b1:c1:ee:5a:d4:c0:e1:
                    48:74:2d:0f:a3:43:06:9f:a4:40:e7:86:0c:8e:99:
                    10:a1:8b:4b:ae:86:9c:57:2f:59:ad:c2:b0:0e:11:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:87:34:B5:65:E7:D0:FB:7B:0C:C2:17:D1:62:73:1A:08:A7:56:EB
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e302e302f31382d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.13.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:65:60:5b:39:2d:15:08:49:07:46:71:ef:ea:20:67:68:
         4d:6f:f3:7e:d8:cb:1d:90:1f:f8:45:c7:42:24:8d:7b:87:55:
         e0:25:fa:c4:02:f6:18:bd:77:d0:87:c8:f3:42:a6:f9:e8:f8:
         68:e7:91:ea:1d:3c:f2:b6:96:ab:a4:8b:2b:2d:f7:08:39:73:
         c5:c4:c6:96:32:86:b3:23:bc:87:bc:3d:f4:8f:7b:7d:c8:ba:
         74:1a:63:b2:58:53:c6:8d:89:df:52:97:ce:50:f3:6f:37:fa:
         28:3e:45:0a:97:55:01:1a:8d:ea:e0:ed:9a:0b:0f:23:c6:76:
         75:27:b9:6e:16:8e:dd:24:c3:c9:83:a9:17:e3:de:1c:ff:05:
         1e:5e:ad:f4:37:cc:3c:95:ab:57:6a:62:d9:8e:2c:90:b7:fd:
         81:70:70:71:78:17:dc:4e:a1:54:a0:f9:44:2a:ec:0d:fe:b6:
         55:05:88:be:da:8a:61:5b:95:45:aa:63:1b:8f:26:72:5a:61:
         14:7a:14:72:06:ae:0b:64:bc:74:3c:ac:a3:e6:a0:91:a1:51:
         aa:48:71:8c:4c:33:23:9f:68:22:45:b7:9c:a1:0d:8a:e8:dc:
         42:c0:ac:74:13:46:5e:90:17:d2:81:a1:a6:26:01:7b:df:66:
         ee:19:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:50 2026 by rpki-client