Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e20313532313739.roa
File:                     3138302e3232332e302e302f31392d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          L5EwjHN3JooAiDzNuN+i1LAP7BWKDpgfJAMVIefGeLg=
Subject key identifier:   68:3F:66:D6:84:C1:35:4F:8B:63:78:25:88:32:EA:A7:44:EE:97:B3
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       4F5E62710D232245C7D86B3E8883F45C318D7841
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e20313532313739.roa
Signing time:             Wed 27 May 2026 02:54:46 +0000
ROA not before:           Wed 27 May 2026 02:49:46 +0000
ROA not after:            Wed 26 May 2027 02:54:46 +0000
asID:                     152179
IP address blocks:        180.223.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 10:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5e:62:71:0d:23:22:45:c7:d8:6b:3e:88:83:f4:5c:31:8d:78:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 27 02:49:46 2026 GMT
            Not After : May 26 02:54:46 2027 GMT
        Subject: CN=683F66D684C1354F8B6378258832EAA744EE97B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:6c:d8:0f:77:2f:b5:3d:61:7d:f0:44:3b:
                    1e:73:4d:c7:ba:6a:2d:76:2f:9e:fe:4b:ba:92:f1:
                    2d:f4:7a:c1:3f:cb:61:6c:52:79:3e:61:ba:b1:43:
                    81:ee:37:5f:4b:37:1e:5c:c7:d0:ec:de:58:1c:ec:
                    cb:3b:80:3d:d1:73:55:bd:82:7f:03:7b:93:3c:ec:
                    05:3e:c6:41:9f:a7:f8:f5:9f:93:36:3c:1f:09:63:
                    a8:95:eb:89:37:b2:24:aa:a1:b5:a0:c1:f9:ad:72:
                    dd:d5:5c:6c:d4:5c:d3:6f:3f:c7:b1:2f:3e:c7:c2:
                    05:6c:15:ca:c4:06:f4:69:74:8e:58:cf:4a:93:ac:
                    c1:62:e4:dd:aa:f7:8d:c6:70:83:2d:58:12:1d:4e:
                    cf:63:97:1f:7d:cb:de:22:e4:bf:14:05:48:a4:99:
                    3a:ba:d3:14:0d:eb:f9:c7:c1:d1:a6:9c:18:f7:76:
                    33:d7:9e:b1:55:6c:06:cd:84:84:b6:e6:0e:78:53:
                    f6:26:bb:df:02:e7:4c:17:0b:05:61:bd:74:f8:f8:
                    85:40:39:95:32:ed:88:b7:c2:2f:59:0e:ee:2b:da:
                    65:4f:ce:fe:ce:0e:f6:01:8a:6d:6d:e7:bf:02:7b:
                    d4:a2:b9:fb:6a:b2:50:c5:46:66:ca:72:68:22:4e:
                    9d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:66:D6:84:C1:35:4F:8B:63:78:25:88:32:EA:A7:44:EE:97:B3
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:0a:09:1d:33:97:17:59:04:86:b4:20:8b:71:f1:6e:45:f3:
         d4:90:41:e9:53:df:b5:ed:ae:c5:ed:43:ae:f6:b0:81:36:04:
         3e:85:67:86:62:0a:3f:5e:1b:42:41:c6:6e:cf:73:bd:d4:fb:
         a0:54:8e:7b:6a:69:09:52:88:ba:a0:81:1e:4a:e1:4d:ad:14:
         60:7f:95:d3:1c:b5:62:48:b8:84:93:66:34:78:4f:c6:7e:a9:
         20:bd:35:d2:2f:8d:69:2f:4c:58:28:c1:41:d2:5a:c7:25:d1:
         a7:ef:88:d4:71:9f:df:51:af:d3:ba:c9:42:70:4f:31:aa:65:
         ca:a2:c8:d2:b9:fb:8b:f5:37:9a:c3:31:48:16:9d:b3:e2:29:
         a1:90:ac:21:7b:23:4b:c7:e1:69:a5:a0:11:c8:ef:dd:1e:0f:
         4e:4a:03:1c:62:e4:55:9c:0a:b9:3c:01:5b:3f:53:02:f5:1a:
         0e:1f:c8:d9:47:8b:1d:f4:4e:ba:e3:31:7b:d2:8d:38:6f:38:
         2e:90:4a:0a:eb:c4:a3:22:40:16:e4:10:40:05:86:b6:2f:15:
         c1:57:ab:9a:c3:67:c8:d8:01:53:55:f5:c0:40:f4:dc:b9:a5:
         66:32:ee:19:ee:9b:0a:b3:c9:9f:93:e0:57:56:52:e0:3c:38:
         15:cb:ab:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:23 2026 by rpki-client