Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3139322e302f31392d3234203d3e203338333635.roa
File:                     3130362e31332e3139322e302f31392d3234203d3e203338333635.roa (raw, json)
Hash identifier:          +2vUuPzDoW3FQaGr5Xe+Twtj+brfngezWskGzaEHMPo=
Subject key identifier:   0B:D1:B9:BC:2B:35:87:9C:9E:96:DA:45:5F:62:6F:8C:99:64:3D:9A
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       20A6431CD7A868F5C2F673CF2327F39E1C777427
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3139322e302f31392d3234203d3e203338333635.roa
Signing time:             Fri 10 Apr 2026 00:26:33 +0000
ROA not before:           Fri 10 Apr 2026 00:21:33 +0000
ROA not after:            Fri 09 Apr 2027 00:26:33 +0000
asID:                     38365
IP address blocks:        106.13.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a6:43:1c:d7:a8:68:f5:c2:f6:73:cf:23:27:f3:9e:1c:77:74:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 10 00:21:33 2026 GMT
            Not After : Apr  9 00:26:33 2027 GMT
        Subject: CN=0BD1B9BC2B35879C9E96DA455F626F8C99643D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:db:47:75:52:c9:41:cb:46:08:5a:82:80:
                    9a:51:17:15:51:dc:ed:79:da:ad:4f:f0:73:1c:80:
                    ed:64:11:c0:20:98:fc:a4:fc:73:98:fc:5e:20:bc:
                    2b:fe:97:db:61:56:46:5c:89:c9:53:dc:c3:8c:23:
                    a8:79:f9:d4:13:fc:7b:2b:2a:9b:4e:20:da:bb:92:
                    2c:51:96:8d:bb:2b:9b:4e:5e:c9:3d:2c:10:92:ae:
                    8b:fd:86:15:54:4b:07:4f:af:68:c8:83:4f:90:af:
                    99:bf:06:44:b1:80:9d:88:02:3c:fe:91:49:0f:0f:
                    85:3a:4f:6b:e3:1c:28:1c:1b:46:a3:84:c6:e5:e6:
                    02:d3:9b:55:ed:17:5f:30:68:71:8e:12:b8:b3:2d:
                    db:8c:40:80:02:ea:ad:70:af:31:ee:27:b0:93:f5:
                    e6:8e:6b:c6:b1:63:fd:af:70:b2:f6:f3:b2:a7:8c:
                    74:a3:2a:10:de:8c:68:72:eb:8d:40:6f:32:f9:c8:
                    0f:0a:b6:98:43:dc:66:1c:07:1c:92:be:dd:a4:d5:
                    4b:13:05:4a:b3:ae:55:ae:22:35:f9:c6:ba:78:85:
                    25:55:2c:eb:93:99:12:e2:7f:2d:1d:57:0d:9b:d9:
                    0b:ce:6e:bc:bf:35:2e:7c:b2:70:ac:6a:77:c1:0f:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D1:B9:BC:2B:35:87:9C:9E:96:DA:45:5F:62:6F:8C:99:64:3D:9A
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3139322e302f31392d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.13.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:a1:fb:11:78:df:83:4c:0e:c0:78:cc:5e:8b:ba:e5:ea:
         27:52:5f:6c:34:9b:10:47:b1:99:21:f5:58:61:12:30:2f:70:
         7d:b2:0b:9e:d1:1e:cb:f2:a8:14:b7:c7:48:a5:ee:30:0e:d1:
         48:45:07:da:83:cb:61:52:39:e4:53:85:d7:f2:3f:ad:d2:dd:
         51:0e:ca:8e:d1:10:c2:f2:33:c4:6d:18:17:fd:15:9f:53:7f:
         6a:f4:56:15:4f:2c:c8:ac:66:1d:25:47:ef:19:08:a2:00:08:
         32:f9:f4:08:42:37:c4:3d:e4:55:eb:c2:0d:97:ea:38:7e:a7:
         73:59:d9:e7:8d:11:72:a0:7b:cc:22:95:f3:85:75:c7:34:0d:
         f1:32:95:82:c5:e8:89:68:0d:f1:7f:66:54:a1:57:92:7e:d3:
         66:1d:cb:9e:e1:85:b4:c4:ba:6e:d2:31:b9:e2:e5:75:9a:04:
         7c:2d:00:e1:51:71:6d:45:c3:6d:05:54:c7:95:76:f8:44:7c:
         77:a8:46:eb:fb:1e:62:18:eb:1a:07:eb:87:76:b6:31:6c:8c:
         98:ae:90:f5:ac:fc:80:01:21:5a:05:f7:4c:66:ae:a4:a5:5c:
         c6:ea:fb:c6:be:d0:66:8c:de:0d:83:c0:12:23:cf:34:33:7a:
         55:74:e4:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:58 2026 by rpki-client