Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38627.roa
File:                     AS38627.roa (raw, json)
Hash identifier:          nFp+8yml9hkEza1wgfZStNJI0UTaVHYBZwksHuv4bH0=
Subject key identifier:   63:46:38:E8:18:F8:01:05:B0:AA:6C:C4:15:6E:35:00:D7:42:C7:5D
Certificate issuer:       /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial:       12D4879676AE094D8D0EE3D0F25376A95ED882E1
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38627.roa
Signing time:             Sun 17 May 2026 10:45:35 +0000
ROA not before:           Sun 17 May 2026 10:40:35 +0000
ROA not after:            Sun 16 May 2027 10:45:35 +0000
asID:                     38627
IP address blocks:        180.76.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d4:87:96:76:ae:09:4d:8d:0e:e3:d0:f2:53:76:a9:5e:d8:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
        Validity
            Not Before: May 17 10:40:35 2026 GMT
            Not After : May 16 10:45:35 2027 GMT
        Subject: CN=634638E818F80105B0AA6CC4156E3500D742C75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:05:f5:34:69:34:1f:06:7f:ad:8e:c6:0f:50:
                    36:e2:64:cf:0d:a5:d0:b8:b7:7d:89:35:49:57:17:
                    dc:02:fc:fd:f6:17:87:25:18:f4:17:21:29:f4:63:
                    ae:22:d9:41:a5:bd:de:79:28:55:11:43:25:0f:06:
                    3f:e5:4f:d8:76:9e:73:56:f5:58:eb:52:18:bb:99:
                    45:ff:3c:00:86:97:7a:f8:a4:69:6c:94:4b:58:6e:
                    a6:5b:ba:a2:55:9f:51:fb:5b:a8:93:96:28:86:cc:
                    12:f0:d7:2f:9d:b7:1a:79:51:db:9e:3e:d6:bf:19:
                    4a:68:be:b6:8d:05:09:c4:35:8e:01:0c:9a:66:14:
                    3e:c9:90:02:56:55:2a:42:e4:9d:f2:fd:a0:19:0a:
                    2b:d1:9d:65:3b:04:b5:88:eb:63:01:d0:ab:0a:88:
                    77:fb:be:30:e1:4f:31:c4:8f:bc:b7:90:af:2d:98:
                    a2:2f:ee:57:e4:9d:7d:33:ec:3b:50:7a:ad:a7:16:
                    9e:9a:da:9a:a7:f9:f7:b0:5c:29:68:c4:67:68:a5:
                    20:25:c8:e0:1e:93:38:b5:47:87:61:b8:24:ee:5b:
                    eb:0f:29:36:9d:cd:a1:d5:fa:1e:55:71:58:a7:10:
                    e5:9b:35:78:8b:76:36:21:ce:a0:c0:1b:93:5a:47:
                    47:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:38:E8:18:F8:01:05:B0:AA:6C:C4:15:6E:35:00:D7:42:C7:5D
            X509v3 Authority Key Identifier:
                keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/AS38627.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.76.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:a7:82:1c:c8:ff:b8:74:50:89:6f:b3:34:c5:4c:bc:8c:
         9f:2d:e3:15:22:9f:6b:da:a2:3d:1d:8c:42:25:36:36:86:74:
         c0:66:5f:42:9a:18:9f:79:ff:54:66:38:5c:77:8e:a1:e8:fc:
         20:c6:2f:7f:9a:f0:36:19:f6:dd:f7:c2:cd:84:67:2b:fe:e6:
         c2:e5:2d:0f:d9:5d:fa:a9:2a:bc:c4:ce:cc:f5:e4:e5:12:d5:
         19:2e:63:4c:60:c5:71:72:3c:a9:38:aa:e6:aa:cf:21:d0:46:
         b5:c2:76:e1:f0:64:ba:31:be:d1:20:05:1f:0a:1b:88:c9:40:
         f4:a3:48:62:85:40:7e:c7:87:f2:fc:f7:b9:df:d1:6d:38:ea:
         a8:51:f8:9e:b4:33:61:98:54:60:f1:8b:20:b8:1d:b9:92:68:
         78:e6:e6:1e:68:72:c7:fc:7c:ff:a5:c8:77:0e:94:00:c3:90:
         25:fd:82:87:4f:7b:1a:d6:f5:a0:c8:60:22:94:ec:b2:b0:c4:
         83:d8:db:80:ed:98:2b:e0:2a:71:57:62:89:05:62:3f:ae:39:
         e2:00:12:6c:25:f2:bd:a6:3e:e3:cc:b2:41:4c:57:3a:56:d6:
         ee:05:7a:de:a4:fc:4f:15:19:af:ca:cd:17:d2:6f:ed:b8:02:
         67:45:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:22 2026 by rpki-client