Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3230322e3138312e3132342e302f32322d3234203d3e203338323833.roa
File:                     3230322e3138312e3132342e302f32322d3234203d3e203338323833.roa (raw, json)
Hash identifier:          uvvsqOfgg0dwFwO5dlDfHVcJ4P07FsbUVT78tN9QqgU=
Subject key identifier:   7B:FE:72:7C:0C:62:B2:5F:8F:A5:DE:7D:17:D6:21:B3:89:0B:BC:F4
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       43362A5A67E007E6EE34591CAC702E852635621E
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3230322e3138312e3132342e302f32322d3234203d3e203338323833.roa
Signing time:             Sun 19 Apr 2026 09:44:17 +0000
ROA not before:           Sun 19 Apr 2026 09:39:17 +0000
ROA not after:            Sun 18 Apr 2027 09:44:17 +0000
asID:                     38283
IP address blocks:        202.181.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 01:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:36:2a:5a:67:e0:07:e6:ee:34:59:1c:ac:70:2e:85:26:35:62:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: Apr 19 09:39:17 2026 GMT
            Not After : Apr 18 09:44:17 2027 GMT
        Subject: CN=7BFE727C0C62B25F8FA5DE7D17D621B3890BBCF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:70:33:b2:9a:38:1e:62:e5:59:be:6b:d4:
                    08:27:22:38:84:a5:b2:45:16:fd:af:95:13:23:ec:
                    69:da:07:3b:15:76:d4:91:72:94:41:59:5f:d3:83:
                    87:dd:f7:e1:ba:06:da:4b:b3:bd:0f:76:f1:df:48:
                    37:39:c7:6d:34:a9:bd:a6:d5:37:02:44:84:3a:e3:
                    c1:10:81:cb:a6:e8:d2:38:b1:3f:4b:ef:2f:9f:34:
                    a1:80:af:82:82:72:24:c9:4c:96:ec:41:e6:63:fa:
                    30:0d:70:30:70:80:84:f6:ea:2a:f5:b4:d6:c6:fc:
                    55:0e:98:9e:15:57:b5:96:b4:ea:85:12:70:9d:55:
                    f5:9f:c6:ae:7b:47:a0:14:30:34:b2:02:3c:74:20:
                    25:a3:a3:1f:43:50:e1:35:a2:73:83:30:81:cf:a5:
                    7d:8b:c1:da:2b:8a:97:1d:fc:ec:c4:2b:18:23:ff:
                    fd:6e:83:db:2f:c3:fa:5a:20:1c:96:f0:5f:21:c8:
                    e8:ae:bc:fe:36:21:51:4c:f1:77:e2:51:a9:ac:49:
                    45:82:58:dc:df:80:f4:34:51:c8:15:60:97:3f:3a:
                    41:bb:94:8e:c0:55:22:af:13:93:43:c8:75:82:88:
                    2d:f5:bd:c5:26:85:37:5f:f0:47:ee:4d:87:3f:d8:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:72:7C:0C:62:B2:5F:8F:A5:DE:7D:17:D6:21:B3:89:0B:BC:F4
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3230322e3138312e3132342e302f32322d3234203d3e203338323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:1e:ab:61:31:3f:c1:36:29:0e:4b:bf:2b:2e:5f:78:6f:
         3d:a4:3a:e2:e6:95:57:48:47:22:77:08:ec:8c:9c:21:83:e2:
         9d:56:16:b2:f5:89:44:da:14:eb:04:f2:77:95:b1:71:fd:e0:
         48:91:21:1f:d3:ad:ee:fe:9a:b7:db:ce:e3:8e:a4:de:3e:35:
         0a:1f:a0:3a:de:91:24:e5:61:b6:80:23:bd:61:d8:40:98:65:
         4a:11:7d:34:4a:6c:d1:82:9b:34:49:2f:98:b5:d0:8e:be:09:
         49:6c:71:ec:50:7a:05:3c:83:9e:c3:77:83:34:45:b6:56:d5:
         64:92:34:6c:95:54:3f:43:50:58:fe:81:23:73:2a:2b:be:58:
         5d:d0:5b:a8:e6:40:c3:a7:a2:a6:99:fd:fd:2b:ce:d9:5c:06:
         cc:31:ba:07:f2:65:1a:0d:ed:ad:d5:45:c3:2e:cc:04:95:0a:
         23:43:c3:cd:bb:6d:b4:ab:4a:a3:8c:27:b5:84:e5:4b:3c:f4:
         99:37:82:10:b0:f3:d7:2a:4e:63:c1:5a:b2:a0:85:be:70:8a:
         66:e1:9b:7e:c1:32:57:30:eb:f0:9d:d1:7a:da:34:9d:b7:f8:
         da:d8:2a:98:c9:06:02:79:5b:e5:9c:28:aa:25:b8:92:6b:43:
         96:0c:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:39 2026 by rpki-client