Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34382e302e302f31362d3234203d3e203338333635.roa
File:                     3132302e34382e302e302f31362d3234203d3e203338333635.roa (raw, json)
Hash identifier:          CQp0ofiZYlUu26GjTgOmHyjbm6KY1mae4kFqq0miXrY=
Subject key identifier:   59:F3:84:74:66:CF:24:4D:9C:35:04:9D:CA:6A:98:EE:08:8B:C9:0F
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       728A91AA35F75A6D24A093ABF36661C549566874
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34382e302e302f31362d3234203d3e203338333635.roa
Signing time:             Thu 09 Apr 2026 14:31:59 +0000
ROA not before:           Thu 09 Apr 2026 14:26:59 +0000
ROA not after:            Thu 08 Apr 2027 14:31:59 +0000
asID:                     38365
IP address blocks:        120.48.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:8a:91:aa:35:f7:5a:6d:24:a0:93:ab:f3:66:61:c5:49:56:68:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr  9 14:26:59 2026 GMT
            Not After : Apr  8 14:31:59 2027 GMT
        Subject: CN=59F3847466CF244D9C35049DCA6A98EE088BC90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:44:7a:68:a4:a5:2e:10:ab:a0:3e:ea:b2:
                    76:b4:d9:5f:76:3a:11:07:ca:cf:c2:32:a4:95:75:
                    ab:60:58:55:53:c7:44:36:48:24:e5:20:50:d5:d4:
                    1b:52:51:7f:aa:2c:91:8f:8b:52:94:23:e1:30:60:
                    d7:d2:4c:51:65:df:08:34:7d:43:0e:09:24:21:f1:
                    f5:62:05:e8:e2:44:97:c8:9b:be:8a:79:72:bf:1b:
                    d2:f3:e2:33:18:2c:69:fa:f9:bc:f0:15:31:ca:87:
                    77:76:55:c6:71:f5:cd:4a:ab:0d:9d:c9:f9:41:4f:
                    b1:5d:1f:a9:ef:8c:d7:a3:be:84:e8:51:0a:c5:4d:
                    86:fb:34:63:3e:b0:66:36:45:98:8f:99:02:ef:35:
                    54:79:e5:27:ce:ba:00:13:3c:fb:d0:38:99:a4:b8:
                    3d:de:f6:51:77:e6:c3:04:5d:a2:f3:e2:b3:76:9e:
                    39:69:82:39:01:7a:70:96:77:0a:d7:be:a3:39:31:
                    4f:77:0a:ed:af:a4:12:5a:ea:37:f4:68:08:81:f7:
                    79:28:47:e1:1d:0f:8c:21:a8:30:28:21:73:1e:12:
                    fd:0a:6c:59:25:75:d1:f5:49:44:af:78:0f:d4:26:
                    0f:80:ef:bd:df:36:9a:65:2b:00:18:f4:db:99:30:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F3:84:74:66:CF:24:4D:9C:35:04:9D:CA:6A:98:EE:08:8B:C9:0F
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3132302e34382e302e302f31362d3234203d3e203338333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:e8:45:47:a1:ab:d9:44:ef:b1:03:a6:62:8a:53:b2:1b:91:
         7a:ef:06:30:73:c5:59:c2:1e:d5:4b:57:ca:0f:09:70:b6:9e:
         57:1a:32:a2:2f:df:89:11:5c:71:b3:61:7c:68:15:d3:5c:a5:
         b1:cd:15:4b:42:34:ca:c3:91:ae:88:08:94:77:bc:b4:42:8c:
         43:1a:1a:42:4d:e7:20:62:15:b8:72:3c:37:39:eb:34:45:04:
         24:a7:19:51:d4:75:e7:a6:45:ff:a3:0c:14:19:e5:ea:f4:cb:
         60:6e:74:40:59:33:5b:9c:d5:61:6e:99:5f:d5:86:6c:c7:97:
         4c:9e:c4:d7:2c:c2:4f:bc:a6:d0:f8:52:a7:88:e1:3b:39:cd:
         34:8d:ad:33:41:45:1f:78:8f:7e:ef:ee:d4:02:ea:cb:4f:eb:
         51:37:b4:ca:9d:79:28:f6:45:45:d1:22:89:e8:8f:1d:65:f9:
         a5:f9:32:0f:ae:63:9b:84:a8:9b:e1:19:06:9d:6e:e8:60:7d:
         ca:99:35:da:9e:b7:4b:a1:7c:38:45:0a:89:57:28:0c:ca:8c:
         c0:4e:38:31:1a:7e:9e:80:f6:66:1b:62:16:c1:c0:49:11:d4:
         66:b2:55:50:f6:a3:5f:40:c4:71:ad:a3:c1:e4:16:97:50:36:
         ab:66:be:fa
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUcoqRqjX3Wm0koJOr82ZhxUlWaHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MDkxNDI2NTlaFw0yNzA0MDgxNDMxNTlaMDMxMTAvBgNV
BAMTKDU5RjM4NDc0NjZDRjI0NEQ5QzM1MDQ5RENBNkE5OEVFMDg4QkM5MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgER6aKSlLhCroD7qsna02V92
OhEHys/CMqSVdatgWFVTx0Q2SCTlIFDV1BtSUX+qLJGPi1KUI+EwYNfSTFFl3wg0
fUMOCSQh8fViBejiRJfIm76KeXK/G9Lz4jMYLGn6+bzwFTHKh3d2VcZx9c1Kqw2d
yflBT7FdH6nvjNejvoToUQrFTYb7NGM+sGY2RZiPmQLvNVR55SfOugATPPvQOJmk
uD3e9lF35sMEXaLz4rN2njlpgjkBenCWdwrXvqM5MU93Cu2vpBJa6jf0aAiB93ko
R+EdD4whqDAoIXMeEv0KbFklddH1SUSveA/UJg+A773fNpplKwAY9NuZMAvvAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUWfOEdGbPJE2cNQSdymqY7giLyQ8wHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTEzOTIyLzAvMzEzMjMwMmUzNDM4
MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzgzMzM2MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwB4MDANBgkqhkiG9w0BAQsFAAOCAQEADuhFR6Gr2UTvsQOmYopTshuReu8GMHPF
WcIe1UtXyg8JcLaeVxoyoi/fiRFccbNhfGgV01ylsc0VS0I0ysORrogIlHe8tEKM
QxoaQk3nIGIVuHI8NznrNEUEJKcZUdR156ZF/6MMFBnl6vTLYG50QFkzW5zVYW6Z
X9WGbMeXTJ7E1yzCT7ym0PhSp4jhOznNNI2tM0FFH3iPfu/u1ALqy0/rUTe0yp15
KPZFRdEiieiPHWX5pfkyD65jm4Som+EZBp1u6GB9ypk12p63S6F8OEUKiVcoDMqM
wE44MRp+noD2ZhtiFsHASRHUZrJVUPajX0DEca2jweQWl1A2q2a++g==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:50 2026 by rpki-client