Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3232342e302f32302d3234203d3e203338333635.roa
File:                     3130362e31332e3232342e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier:          n/rBbLEGTTprd8JaCdGxGHvFpdrmU6TZQJrVvWcsvCQ=
Subject key identifier:   A6:94:8E:C7:44:3D:55:EB:99:53:63:BC:88:92:34:7A:A7:E2:47:A9
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       020F3D414D1F6ACE93227B07F058F09A04CE29D1
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3232342e302f32302d3234203d3e203338333635.roa
Signing time:             Fri 10 Apr 2026 00:26:33 +0000
ROA not before:           Fri 10 Apr 2026 00:21:33 +0000
ROA not after:            Fri 09 Apr 2027 00:26:33 +0000
asID:                     38365
IP address blocks:        106.13.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:3d:41:4d:1f:6a:ce:93:22:7b:07:f0:58:f0:9a:04:ce:29:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 10 00:21:33 2026 GMT
            Not After : Apr  9 00:26:33 2027 GMT
        Subject: CN=A6948EC7443D55EB995363BC8892347AA7E247A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:2d:64:85:9e:fd:e2:90:7a:77:81:89:08:
                    41:3c:9f:c4:8c:96:3f:d0:b5:66:1d:af:d3:02:c6:
                    50:ad:20:ae:4f:39:6b:ba:5e:61:2c:3e:33:68:ff:
                    80:2f:ff:76:c5:c8:0f:ec:c5:4f:d1:3d:9b:ec:d9:
                    4f:da:c0:12:d5:5b:5f:a6:bd:f8:ae:3e:60:d3:5d:
                    b7:1f:d5:2e:dc:c9:fa:54:cb:62:bf:14:c3:dd:8a:
                    f2:d4:49:f8:6f:9b:f5:78:1d:30:d2:1c:cb:af:96:
                    3d:4c:98:b1:68:db:c3:73:3d:3e:38:11:be:5c:75:
                    60:96:68:f4:c1:ed:90:2e:9c:6d:57:ef:90:e1:53:
                    b9:af:0f:d7:12:68:77:49:f7:6b:0f:8e:65:40:3f:
                    80:d3:b3:b1:79:55:6b:8e:a7:06:58:1b:f5:e8:e6:
                    6e:f9:89:5a:3c:5a:28:45:1c:b6:61:43:9a:47:47:
                    9b:02:01:34:8f:1c:62:54:81:47:fc:68:22:15:60:
                    7a:36:fc:aa:23:ed:15:0c:fa:d9:a7:e1:d8:7f:71:
                    69:56:6e:7f:9f:26:2f:52:0f:a2:e1:1b:a5:19:5c:
                    59:5a:77:55:b7:2c:4e:0e:c3:77:df:96:df:78:4e:
                    bb:ff:f8:3d:cc:92:df:85:95:61:56:53:64:36:5e:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:94:8E:C7:44:3D:55:EB:99:53:63:BC:88:92:34:7A:A7:E2:47:A9
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3232342e302f32302d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.13.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:73:58:6b:ec:71:59:27:81:40:98:34:a1:03:23:9b:a5:
         02:b1:57:a5:10:86:0a:0e:73:0a:45:43:24:a9:93:42:30:96:
         30:b8:88:82:c2:97:23:65:7d:4f:dd:8a:1b:46:ad:b6:bf:62:
         46:d4:77:eb:c2:4a:34:de:dc:57:b6:00:0d:9e:d9:54:cb:e4:
         3f:a9:9a:24:97:93:d3:64:70:94:65:79:c3:6c:0d:ff:62:fa:
         ed:3b:12:6e:ae:75:61:2b:23:2c:35:59:21:ea:f8:49:10:62:
         21:71:d6:62:cd:21:07:f9:49:ab:a0:d9:e1:ea:c0:56:28:25:
         1e:17:46:7f:bd:f2:4c:0d:27:d6:f4:fc:7e:84:26:9c:3f:04:
         02:61:dc:f5:be:76:cc:71:ac:b1:d1:55:c7:60:c7:7f:97:e8:
         47:cb:54:65:3d:81:f7:c1:a8:ef:a1:ca:0c:75:2e:f0:79:22:
         98:c4:4c:97:8a:b1:7e:90:cf:17:81:e7:da:a6:6d:b8:53:c3:
         c8:81:eb:7a:68:19:36:17:70:14:b7:0c:37:80:65:fe:4b:7c:
         04:0b:89:25:ff:5d:22:a6:f0:2a:a5:e4:66:26:62:4c:b9:c3:
         bf:81:15:f5:6c:52:7f:34:d3:e0:0e:5d:ed:c1:00:7a:5e:47:
         ff:11:99:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:51 2026 by rpki-client