Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa
File:                     36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (raw, json)
Hash identifier:          /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=
Subject key identifier:   FE:A1:8E:05:CB:5E:34:AC:87:40:99:17:5B:79:C2:4D:FB:87:F3:79
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       38FA575AE7B641B720B4749A7236693E968D8837
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa
Signing time:             Tue 03 Mar 2026 08:54:28 +0000
ROA not before:           Tue 03 Mar 2026 08:49:28 +0000
ROA not after:            Tue 02 Mar 2027 08:54:28 +0000
asID:                     135629
IP address blocks:        69.230.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 07:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fa:57:5a:e7:b6:41:b7:20:b4:74:9a:72:36:69:3e:96:8d:88:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Mar  3 08:49:28 2026 GMT
            Not After : Mar  2 08:54:28 2027 GMT
        Subject: CN=FEA18E05CB5E34AC874099175B79C24DFB87F379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:af:da:05:d0:8d:a9:13:d0:7b:16:d3:cb:
                    36:a6:c6:8e:c9:e9:7a:6b:78:54:e6:f1:1f:d1:5a:
                    f3:72:68:f4:c4:e0:5b:8a:ac:3b:1f:b2:f2:ce:6f:
                    29:93:df:55:60:76:f1:c1:96:b6:44:e6:9e:d6:9f:
                    5d:e0:8b:d8:78:92:b0:d8:3d:80:35:ac:81:25:71:
                    ed:2c:d8:9a:17:76:f2:18:32:f7:54:43:e3:bb:17:
                    78:39:74:ac:96:66:82:55:a5:43:34:9c:d8:8e:ba:
                    4a:3a:5b:f7:e8:52:e5:c7:87:08:b2:20:ba:04:cb:
                    53:0c:bb:3e:5f:a6:66:d5:07:6e:fe:e2:87:fd:f8:
                    c1:d0:b9:65:34:31:f9:b1:55:43:a7:77:a3:6d:1d:
                    95:8b:7f:d2:15:1b:09:96:35:84:3d:b3:f3:93:5b:
                    75:8b:08:f9:14:3d:c4:29:f3:b7:a4:9d:95:12:13:
                    03:8d:17:a3:59:80:a1:45:c0:07:82:a3:5c:4e:38:
                    61:7f:c3:e7:29:71:d1:d2:7b:6e:93:7d:0f:c0:bb:
                    ea:3e:b8:02:6f:8c:fd:f8:62:0c:cf:07:db:10:71:
                    3e:6a:72:37:93:f9:29:3f:86:cd:fc:7f:2e:cb:4b:
                    f8:c7:16:fd:d1:e9:37:6e:b1:8c:eb:5d:4e:6b:12:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:8E:05:CB:5E:34:AC:87:40:99:17:5B:79:C2:4D:FB:87:F3:79
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.230.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:1f:33:b6:1a:d8:ce:d7:06:cb:e3:6e:c1:1a:9a:93:10:
         18:ba:53:58:ca:6a:a5:c4:f3:ab:79:a3:1b:3b:31:5d:11:b5:
         57:2e:de:76:5b:0d:3c:ee:c2:84:19:1c:e3:ac:16:48:1a:8c:
         b6:6c:bc:92:8d:41:21:54:7d:51:45:25:e1:a7:59:17:5f:fc:
         c3:7e:fe:d0:a6:bb:a7:d2:bb:7d:80:d7:50:35:b6:02:b1:64:
         18:88:c6:78:e1:8b:5e:3b:84:4c:e5:03:6c:42:b0:c6:d9:b8:
         69:b7:02:0c:66:79:49:e4:8c:0b:f2:54:36:01:c5:2f:9c:13:
         78:13:8f:dc:00:0b:ab:93:94:b7:30:3f:8b:ad:fd:06:6e:b3:
         3f:c7:66:f1:67:0c:65:0b:bb:67:b3:62:39:9e:de:15:03:48:
         26:6c:2a:05:0d:4f:17:80:db:0d:09:a7:dd:8c:bf:94:56:7c:
         82:fa:ba:96:a9:56:7e:27:d1:5f:b8:e8:6c:30:e2:fb:f7:d8:
         76:96:8a:47:81:1c:af:7f:07:4d:4b:8b:1c:da:9a:62:63:69:
         bb:b9:9c:51:97:29:9b:49:59:0e:bb:48:6a:1d:8b:c2:93:5f:
         11:ce:81:48:52:3c:d2:ae:ba:35:25:29:a2:7f:5c:ca:ae:3b:
         bd:be:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:45:44 2026 by rpki-client