Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31382d3234203d3e20333938373034.roa
File:                     3138302e3232332e302e302f31382d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          JkJhNEMggUAmRbatO/RbCah4WXgyFdi9SOviX65CsH0=
Subject key identifier:   11:33:49:53:19:66:A8:DB:44:6D:1C:03:F4:6B:33:5D:56:51:D9:82
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       521F0D04715BA71A6EBBC725BE24B5B2238E53C6
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31382d3234203d3e20333938373034.roa
Signing time:             Fri 06 Feb 2026 10:27:03 +0000
ROA not before:           Fri 06 Feb 2026 10:22:03 +0000
ROA not after:            Fri 05 Feb 2027 10:27:03 +0000
asID:                     398704
IP address blocks:        180.223.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 12:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1f:0d:04:71:5b:a7:1a:6e:bb:c7:25:be:24:b5:b2:23:8e:53:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Feb  6 10:22:03 2026 GMT
            Not After : Feb  5 10:27:03 2027 GMT
        Subject: CN=113349531966A8DB446D1C03F46B335D5651D982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:fd:46:45:08:33:f0:e4:17:d8:4d:71:14:
                    59:69:35:cd:8a:75:83:3c:e5:8f:e1:81:41:a3:3a:
                    40:57:47:45:ca:ec:64:db:80:35:9a:23:bb:23:70:
                    b4:f9:b7:ff:fb:3f:32:9c:ed:75:67:36:0a:2a:aa:
                    48:3a:8d:6b:a7:cf:a8:5d:82:cb:2a:63:fb:3c:47:
                    49:c2:f9:21:47:71:41:58:7a:33:8a:b2:a7:19:f6:
                    70:d9:5c:5d:11:d2:68:6b:86:4d:53:7e:4a:5b:1d:
                    43:47:57:a2:d4:78:79:92:97:73:6a:b0:49:c1:1b:
                    c6:f6:ae:f7:c1:5d:66:bd:72:d7:d5:17:79:26:63:
                    e9:f4:0d:8d:18:ef:4a:d1:6f:90:64:2c:18:b2:06:
                    b4:ac:73:47:a4:0b:cd:c8:e1:bc:f5:21:52:d9:85:
                    fa:34:77:ee:48:56:94:99:88:89:3d:fa:71:fc:b9:
                    10:41:1e:a2:83:f9:44:c2:91:01:96:5c:06:c0:90:
                    6a:30:8c:f4:b8:91:b3:60:d6:cf:c3:40:63:10:9f:
                    6a:4d:f0:8f:e2:8f:a6:19:7d:24:1b:2e:7e:06:a7:
                    2b:b6:c1:bd:90:98:c8:9c:22:d0:61:b2:b9:ce:d1:
                    47:63:66:fa:54:ac:e7:80:92:ba:3c:0d:71:b4:42:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:33:49:53:19:66:A8:DB:44:6D:1C:03:F4:6B:33:5D:56:51:D9:82
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31382d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:4c:7c:1e:8b:a0:55:33:a5:f5:8e:e5:34:0a:fe:27:f1:
         20:1d:76:3b:64:b5:e2:41:7e:89:4a:1b:37:77:68:b9:43:26:
         83:7e:7d:f2:4b:1a:8a:72:1a:b6:ca:a1:34:56:c9:a1:76:d2:
         e7:0a:42:ca:d0:1f:1d:dc:45:44:b9:4f:ad:89:4b:b3:61:3e:
         2c:dc:a1:0c:65:09:ac:60:3f:c9:e5:b8:dc:d3:96:62:6d:39:
         be:47:7b:1e:fb:c2:67:c8:af:f4:7c:59:58:a6:76:0d:29:85:
         55:98:f1:05:e8:13:a6:63:ea:4a:8b:87:32:ca:d3:9b:84:7e:
         f3:03:0e:5f:52:3c:12:00:9e:7c:46:df:34:64:35:68:cf:a7:
         88:f7:cf:ab:26:b8:d2:87:8b:f9:99:7e:b0:9b:89:b4:e5:b3:
         5e:47:00:e8:b2:9c:94:fe:e4:38:73:77:6e:c5:4e:14:40:81:
         e1:85:ca:4a:aa:d7:48:b4:3b:b4:99:92:a5:1e:44:48:13:e1:
         f0:e3:e4:bc:ec:88:84:8d:57:00:02:66:d1:18:78:38:a4:05:
         83:d5:cf:22:d9:c7:fd:63:b2:d5:a0:e9:b5:41:b0:d4:1c:19:
         79:77:e8:8a:55:f9:9b:74:48:8f:aa:bd:b6:ab:08:33:b6:4e:
         a4:e1:4c:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 17 02:42:12 2026 by rpki-client