Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e20323037353530.roa
File:                     3138302e3232332e302e302f31392d3234203d3e20323037353530.roa (raw, json)
Hash identifier:          yzw9eOdGkLQzRR5YQoZifMcHENEwnV4Ya1xEWBk/rbo=
Subject key identifier:   AD:D9:ED:F9:81:28:34:FD:24:32:4E:6C:B3:95:E2:47:80:58:40:E2
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       2BADD4AAA037DF7C1820181C1072767B2DBD3CE4
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e20323037353530.roa
Signing time:             Tue 02 Jun 2026 10:39:22 +0000
ROA not before:           Tue 02 Jun 2026 10:34:22 +0000
ROA not after:            Tue 01 Jun 2027 10:39:22 +0000
asID:                     207550
IP address blocks:        180.223.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 11:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ad:d4:aa:a0:37:df:7c:18:20:18:1c:10:72:76:7b:2d:bd:3c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jun  2 10:34:22 2026 GMT
            Not After : Jun  1 10:39:22 2027 GMT
        Subject: CN=ADD9EDF9812834FD24324E6CB395E247805840E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:6d:cb:93:41:aa:d2:a7:14:56:bb:ef:8d:
                    20:a5:e9:3d:a7:51:98:41:7c:dc:3c:98:f7:e4:dc:
                    79:27:70:75:6c:a0:75:cf:10:3a:0f:74:cc:9a:31:
                    96:eb:08:39:c7:9c:a2:b9:00:25:3c:15:78:ed:be:
                    a4:8f:d3:1f:81:9b:4b:7f:e3:5d:cc:0e:5c:fb:59:
                    14:bf:ab:83:be:e6:58:e0:64:eb:55:dd:1f:e6:22:
                    9d:d5:3a:b1:80:27:a7:72:08:7a:e9:f3:96:e6:e1:
                    ac:34:7e:2c:56:ca:bd:a3:1e:b3:40:ea:11:a7:2c:
                    56:96:bb:73:5e:d0:7c:68:4a:64:87:9a:04:7e:10:
                    55:79:9b:45:64:38:87:e3:0f:63:48:f6:0d:62:cb:
                    49:16:b3:ce:af:d0:0a:74:e6:b4:ea:d4:91:d7:75:
                    86:58:a4:53:a3:44:14:6d:46:a4:87:ae:70:43:81:
                    da:cb:55:df:57:98:be:46:43:0c:36:5f:31:80:05:
                    31:1a:a2:1b:fb:72:a9:f1:7b:15:ea:24:90:21:31:
                    6c:fb:44:1f:86:65:9d:2c:78:11:9e:c4:9d:c4:68:
                    10:83:79:f1:35:d5:4b:93:1c:ce:91:64:61:69:f4:
                    5d:79:87:6c:c9:38:cd:40:dc:17:6f:6d:09:1a:25:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D9:ED:F9:81:28:34:FD:24:32:4E:6C:B3:95:E2:47:80:58:40:E2
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:42:49:51:8a:5e:67:78:7d:d4:af:07:65:75:87:6f:26:
         65:ef:f2:e1:13:a9:01:79:64:2d:54:a8:cf:9c:35:b1:fe:f7:
         ed:ff:03:2c:89:0f:cd:a8:cb:34:bb:a1:23:5c:c9:3b:80:40:
         cf:4d:6f:1c:f4:0b:ab:ff:c7:93:ab:e3:af:da:da:d5:e9:cb:
         38:0a:24:66:c7:8b:7f:e7:ec:91:e3:f0:e5:55:2f:51:0c:74:
         67:7f:67:50:7f:d6:9b:7f:bf:a0:8d:04:3a:68:a3:7f:ce:3e:
         de:37:b4:98:e4:6b:59:fe:51:10:1f:40:8d:75:8f:f7:d5:38:
         54:6c:7b:0b:2f:4b:00:f3:10:e1:4e:c1:e6:a4:94:00:3a:06:
         ca:54:6c:04:97:7e:fb:d8:b3:10:d9:e7:6c:49:b8:b5:a5:de:
         f1:c1:d0:3d:90:32:45:cd:4e:1b:34:d1:23:6c:08:7d:70:4b:
         a4:59:ba:7b:8d:d2:7c:c5:4f:23:ef:42:7c:96:32:37:8a:c7:
         d2:f6:87:5a:5c:ea:83:dd:c6:a4:42:14:bf:97:6c:e1:83:b5:
         73:37:10:74:07:40:98:6f:23:82:13:75:41:cc:45:7a:0b:df:
         aa:fc:18:68:83:fb:ce:bc:a2:0a:47:c8:cb:93:87:f6:44:12:
         ce:5a:c9:3e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUK63UqqA333wYIBgcEHJ2ey29POQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA2MDIxMDM0MjJaFw0yNzA2MDExMDM5MjJaMDMxMTAvBgNV
BAMTKEFERDlFREY5ODEyODM0RkQyNDMyNEU2Q0IzOTVFMjQ3ODA1ODQwRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHm3Lk0Gq0qcUVrvvjSCl6T2n
UZhBfNw8mPfk3HkncHVsoHXPEDoPdMyaMZbrCDnHnKK5ACU8FXjtvqSP0x+Bm0t/
413MDlz7WRS/q4O+5ljgZOtV3R/mIp3VOrGAJ6dyCHrp85bm4aw0fixWyr2jHrNA
6hGnLFaWu3Ne0HxoSmSHmgR+EFV5m0VkOIfjD2NI9g1iy0kWs86v0Ap05rTq1JHX
dYZYpFOjRBRtRqSHrnBDgdrLVd9XmL5GQww2XzGABTEaohv7cqnxexXqJJAhMWz7
RB+GZZ0seBGexJ3EaBCDefE11UuTHM6RZGFp9F15h2zJOM1A3BdvbQkaJRBpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUrdnt+YEoNP0kMk5ss5XiR4BYQOIwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz
MjMzMmUzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBbTfADANBgkqhkiG9w0BAQsFAAOCAQEAPf5CSVGKXmd4fdSvB2V1h28m
Ze/y4ROpAXlkLVSoz5w1sf737f8DLIkPzajLNLuhI1zJO4BAz01vHPQLq//Hk6vj
r9ra1enLOAokZseLf+fskePw5VUvUQx0Z39nUH/Wm3+/oI0EOmijf84+3je0mORr
Wf5REB9AjXWP99U4VGx7Cy9LAPMQ4U7B5qSUADoGylRsBJd++9izENnnbEm4taXe
8cHQPZAyRc1OGzTRI2wIfXBLpFm6e43SfMVPI+9CfJYyN4rH0vaHWlzqg93GpEIU
v5ds4YO1czcQdAdAmG8jghN1QcxFegvfqvwYaIP7zryiCkfIy5OH9kQSzlrJPg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:19 2026 by rpki-client