Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e20313337373138.roa
File:                     3138322e3233392e302e302f31392d3234203d3e20313337373138.roa (raw, json)
Hash identifier:          bqJrmy1FbcIMUwf28/NfknutSp/p5m/VZli+bUjexRE=
Subject key identifier:   F2:94:C2:2E:57:6F:57:4A:A5:53:2A:A3:81:9D:BA:5E:8D:22:47:77
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       227B91AAC76308F7D7DDCFA79890D6BE5EC26A34
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e20313337373138.roa
Signing time:             Fri 05 Jun 2026 07:38:32 +0000
ROA not before:           Fri 05 Jun 2026 07:33:32 +0000
ROA not after:            Fri 04 Jun 2027 07:38:32 +0000
asID:                     137718
IP address blocks:        182.239.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7b:91:aa:c7:63:08:f7:d7:dd:cf:a7:98:90:d6:be:5e:c2:6a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jun  5 07:33:32 2026 GMT
            Not After : Jun  4 07:38:32 2027 GMT
        Subject: CN=F294C22E576F574AA5532AA3819DBA5E8D224777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:15:c5:80:84:a7:d7:e5:31:27:f0:08:b2:
                    05:b8:5a:a4:eb:a7:66:6c:d6:fb:2f:dc:a1:3c:55:
                    91:f0:2e:a4:20:b0:de:32:b4:17:c0:4a:07:57:23:
                    e0:3a:50:c7:f7:4c:f5:2d:04:31:82:bf:ad:33:71:
                    90:bb:f7:10:29:0e:10:03:95:7c:77:41:c8:a6:0e:
                    4a:39:12:17:85:35:c6:cb:b9:ba:19:63:cf:03:d3:
                    68:89:bb:64:aa:08:d7:a4:80:59:ac:de:3f:c4:07:
                    ea:a8:7b:e9:31:ff:c3:f5:8f:01:31:35:b8:98:09:
                    54:25:a6:62:45:5f:60:a2:53:af:d9:29:41:ff:94:
                    ec:b1:91:10:29:66:c2:b2:3a:48:60:c9:00:bc:15:
                    d3:2e:6f:a8:1a:66:cd:72:4f:69:e7:cd:be:95:e7:
                    e8:b2:66:d7:99:fd:a2:6d:bf:bd:a5:3b:61:d9:7f:
                    09:4d:14:f6:25:0c:38:3f:fb:91:4e:d9:b9:18:f7:
                    10:fc:6f:31:4b:01:90:60:01:d5:20:47:4c:7e:9f:
                    3b:35:f7:af:fb:b1:45:19:dd:ea:49:d5:b7:94:ff:
                    f4:85:94:74:9a:f4:1d:fe:64:8b:69:57:54:a2:56:
                    89:f0:d6:34:33:26:c2:36:5e:ac:26:86:5f:17:aa:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:94:C2:2E:57:6F:57:4A:A5:53:2A:A3:81:9D:BA:5E:8D:22:47:77
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138322e3233392e302e302f31392d3234203d3e20313337373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.239.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:17:88:13:1a:34:1f:ca:6d:b2:81:50:f1:c0:11:16:e4:
         d8:a9:81:72:12:57:0e:f0:5b:81:ef:4a:48:53:34:84:3a:a9:
         0c:c8:bd:41:b0:d7:1d:e1:f7:6b:48:98:9d:f5:3f:0e:0b:95:
         71:8b:9d:db:b0:97:db:60:cb:31:83:ec:b3:0f:28:b4:ab:94:
         f4:fe:d4:06:3a:4f:46:b4:0c:92:3f:c0:99:28:89:6d:7f:aa:
         7b:17:56:8b:12:ff:ad:78:9f:8a:39:77:cb:1f:02:b1:e5:84:
         61:f0:03:9c:a4:32:49:96:03:84:f2:b7:e3:b5:1d:ed:08:0b:
         85:f0:c1:e6:c7:0c:4c:c3:57:89:2b:5b:f6:c6:0f:41:61:82:
         0a:2f:e8:f7:b8:15:56:16:38:c4:56:21:e8:fa:6a:bd:97:03:
         4e:8e:7d:48:da:29:04:a5:fe:0f:f4:c3:cd:d0:22:be:c0:1a:
         9a:f4:a5:ba:97:7b:86:9e:ce:23:7c:66:33:65:0e:49:6b:3a:
         c6:23:a7:94:be:16:95:38:14:3f:2d:9b:06:9e:05:d4:40:af:
         f2:56:5b:d7:88:0e:53:80:e4:43:27:62:8c:c6:53:8b:14:b8:
         b9:44:6c:f6:9a:63:63:51:0a:d8:e9:6a:17:87:30:33:85:d6:
         63:e5:00:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:38 2026 by rpki-client