Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa
File:                     3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          +d9P+V3G5sTLZcX3O027aMRCCx2RtHNSuFPtmq5GEhU=
Subject key identifier:   03:E0:BF:E2:35:1B:11:C0:E4:5A:F3:57:6F:45:8F:53:99:AE:EE:A5
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       3EAB0C196C1EFACF895D73B8D5A3E283B97BE8D8
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa
Signing time:             Tue 16 Jun 2026 01:43:54 +0000
ROA not before:           Tue 16 Jun 2026 01:38:54 +0000
ROA not after:            Tue 15 Jun 2027 01:43:54 +0000
asID:                     23650
IP address blocks:        180.210.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 16:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ab:0c:19:6c:1e:fa:cf:89:5d:73:b8:d5:a3:e2:83:b9:7b:e8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Jun 16 01:38:54 2026 GMT
            Not After : Jun 15 01:43:54 2027 GMT
        Subject: CN=03E0BFE2351B11C0E45AF3576F458F5399AEEEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:25:8a:52:a6:1a:83:ca:2c:9b:96:05:12:
                    a0:7d:3a:fb:59:e7:11:e2:ea:28:41:d8:03:7d:e3:
                    45:19:77:77:5a:ea:28:a8:89:f6:af:d2:1e:ed:7b:
                    e6:b8:bf:30:b3:9f:ac:61:94:d8:00:78:d6:ff:b2:
                    36:e1:55:d4:53:c5:47:c3:99:8f:e1:f9:f0:dc:db:
                    2d:9e:47:81:8c:a7:2d:04:b1:f8:e7:05:2c:80:4d:
                    9a:a9:58:7f:da:ea:dc:57:e9:c2:0a:d2:be:10:1c:
                    6b:f6:d3:65:10:1f:04:b5:a6:bf:b9:f9:2b:70:ef:
                    22:d4:f0:2e:bc:dd:e6:fd:4e:19:1c:b1:67:8a:95:
                    67:df:dd:34:75:2b:59:b1:2f:64:4d:e7:fc:e0:c0:
                    69:ce:1f:6b:a9:85:51:13:f2:ba:a6:85:08:98:a7:
                    9f:41:c9:54:2e:3f:c8:1f:b1:11:10:98:7a:0c:d8:
                    ed:79:96:86:34:f2:ab:a4:da:63:c8:46:d5:d0:49:
                    e1:81:8f:2e:d1:fc:f8:a4:cd:2b:5c:e0:a3:04:14:
                    76:e6:41:23:df:6f:18:1e:8f:02:c0:3b:e0:bf:33:
                    cb:03:ff:5f:53:b5:0c:2a:30:21:e9:66:ad:53:1f:
                    28:70:59:a8:57:e0:34:85:36:95:31:2f:34:72:b7:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:BF:E2:35:1B:11:C0:E4:5A:F3:57:6F:45:8F:53:99:AE:EE:A5
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:8d:56:a2:55:f5:50:25:ac:c9:1b:c0:33:2d:dd:c0:89:67:
         43:dc:15:84:a3:83:36:b2:49:24:1f:86:91:38:7b:31:04:b7:
         7c:31:76:b7:49:df:47:e7:58:ee:17:59:a2:9d:4c:6e:9a:71:
         90:d2:8c:ab:c1:8e:d2:9d:5b:f2:dd:70:03:71:e2:79:ca:17:
         d2:31:e4:cb:ba:11:73:bf:eb:7f:8d:4b:62:4c:09:9b:df:29:
         53:26:b4:89:c7:13:54:de:e8:e3:65:6b:16:48:57:08:8f:c7:
         3f:eb:7d:3f:40:7f:ac:20:03:44:99:22:69:d9:69:b0:ea:aa:
         13:b6:fb:c2:1b:03:a6:44:59:11:1b:be:29:32:da:a1:4d:9a:
         b1:c3:33:a1:c5:6b:f7:5f:9c:86:38:f4:39:46:85:43:f4:ab:
         d4:70:47:4b:d3:b3:5d:d4:fa:94:15:b6:0e:91:5a:1d:e7:6f:
         5e:46:f7:de:7b:81:e5:b5:89:dc:da:11:3c:78:1a:a1:38:c5:
         3e:78:89:17:d6:09:30:00:16:10:99:a8:fc:bd:b6:ad:a3:fa:
         78:03:08:3b:2e:97:26:63:c5:d7:5b:68:57:39:af:da:27:41:
         ed:6b:d1:f2:86:d9:54:31:87:72:a7:b0:9c:44:a9:ff:16:ef:
         c2:70:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:51 2026 by rpki-client