Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2033343931.roa
File:                     3138302e3232332e302e302f31392d3234203d3e2033343931.roa (raw, json)
Hash identifier:          CURsf/vzhEdH81+a5vXX6oUTLXHsnXttD9f5CTkEG+w=
Subject key identifier:   56:4E:DC:F1:67:37:BA:AA:0C:77:18:4D:30:5E:6A:FE:74:E3:64:2E
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       0AD212F10292510D0770808D177B16FC0A777234
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2033343931.roa
Signing time:             Tue 26 May 2026 08:05:50 +0000
ROA not before:           Tue 26 May 2026 08:00:50 +0000
ROA not after:            Tue 25 May 2027 08:05:50 +0000
asID:                     3491
IP address blocks:        180.223.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d2:12:f1:02:92:51:0d:07:70:80:8d:17:7b:16:fc:0a:77:72:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:00:50 2026 GMT
            Not After : May 25 08:05:50 2027 GMT
        Subject: CN=564EDCF16737BAAA0C77184D305E6AFE74E3642E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:29:e3:1b:62:24:b7:81:c1:11:f8:dc:bf:6a:
                    4a:db:12:4a:a1:8c:8c:85:2f:8a:dc:d2:ec:e6:b7:
                    20:0c:96:60:c4:de:88:50:40:d9:43:36:5b:cb:24:
                    54:01:fe:23:90:55:67:b3:f2:6c:e2:62:4e:b9:57:
                    2d:92:e0:42:69:c7:b5:94:b9:6b:c3:f6:a1:11:e7:
                    2d:4b:60:4c:b9:76:f2:6e:90:0f:fb:43:e4:e0:25:
                    92:8e:80:3c:4e:65:47:d4:fa:ab:1f:f4:be:61:bc:
                    fc:23:11:aa:c8:72:fc:d0:03:ac:47:e2:cb:0f:f6:
                    16:98:0d:3c:45:bd:d8:68:95:48:d2:25:07:2e:d4:
                    39:a8:e2:29:ec:a8:1a:cb:43:49:fd:17:d8:2a:6d:
                    88:32:48:b8:c4:21:3b:ab:6e:45:75:62:2f:0b:a0:
                    2d:10:dd:e8:23:74:0b:1a:8a:cd:c2:8c:9f:e3:39:
                    d5:3c:4b:63:57:b6:08:88:f8:2d:77:3f:64:62:2f:
                    33:e6:ab:5a:18:9f:2f:81:19:40:72:db:77:62:a0:
                    41:73:e9:1a:8e:6b:44:af:51:e1:84:eb:2d:f3:c7:
                    45:11:91:e8:62:30:23:39:78:77:84:7e:b6:e0:c2:
                    44:fa:66:77:a8:81:75:2d:aa:57:b5:96:ea:07:19:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4E:DC:F1:67:37:BA:AA:0C:77:18:4D:30:5E:6A:FE:74:E3:64:2E
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:5f:74:78:9b:e8:f3:90:44:c1:70:0d:bb:bc:51:de:02:
         0b:db:1c:cc:77:6c:f3:9c:a5:f5:b6:46:22:9d:de:bd:d4:a6:
         99:c7:d5:1c:b9:f6:56:95:2e:ab:54:c6:b0:b6:4c:c8:2f:94:
         35:01:67:25:39:48:6f:a7:ad:13:30:ad:ab:69:91:79:79:c3:
         ba:ef:54:5c:9d:35:ac:c5:2c:8c:ec:e0:1f:71:96:74:43:a3:
         e5:b9:53:f3:82:33:59:23:c9:f0:cb:f7:a5:a1:46:d5:d1:31:
         64:b2:1b:a6:f8:2a:cc:28:6f:b0:01:b3:17:9d:35:b1:c5:7d:
         fd:0a:2a:ea:0c:c3:d3:04:3b:eb:8f:91:0f:95:6c:fb:d4:c0:
         e6:4c:3f:70:93:60:7b:9a:5f:de:d2:62:76:6a:4a:20:6c:e5:
         af:b1:83:a4:d3:99:ec:37:cc:fd:b4:65:8f:d9:fd:92:29:54:
         d7:f0:97:6b:d6:22:78:27:a3:89:af:ea:07:48:64:ce:81:66:
         c4:9e:20:1b:b6:62:5f:ba:d5:04:34:ab:38:f2:5a:1f:f4:28:
         e5:55:51:d4:25:e9:05:d0:e6:b6:ac:0b:2b:4a:27:42:aa:f4:
         e6:a0:18:10:a9:cd:f6:9e:43:23:65:ff:ab:b7:49:4e:f8:4b:
         18:50:91:cf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCtIS8QKSUQ0HcICNF3sW/Ap3cjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA1MjYwODAwNTBaFw0yNzA1MjUwODA1NTBaMDMxMTAvBgNV
BAMTKDU2NEVEQ0YxNjczN0JBQUEwQzc3MTg0RDMwNUU2QUZFNzRFMzY0MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKeMbYiS3gcER+Ny/akrbEkqh
jIyFL4rc0uzmtyAMlmDE3ohQQNlDNlvLJFQB/iOQVWez8mziYk65Vy2S4EJpx7WU
uWvD9qER5y1LYEy5dvJukA/7Q+TgJZKOgDxOZUfU+qsf9L5hvPwjEarIcvzQA6xH
4ssP9haYDTxFvdholUjSJQcu1Dmo4insqBrLQ0n9F9gqbYgySLjEITurbkV1Yi8L
oC0Q3egjdAsais3CjJ/jOdU8S2NXtgiI+C13P2RiLzPmq1oYny+BGUBy23dioEFz
6RqOa0SvUeGE6y3zx0URkehiMCM5eHeEfrbgwkT6ZneogXUtqle1luoHGeWLAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUVk7c8Wc3uqoMdxhNMF5q/nTjZC4wHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy
MzMyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzMzNDM5MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAW03wAwDQYJKoZIhvcNAQELBQADggEBAEF6X3R4m+jzkETBcA27vFHeAgvbHMx3
bPOcpfW2RiKd3r3UppnH1Ry59laVLqtUxrC2TMgvlDUBZyU5SG+nrRMwratpkXl5
w7rvVFydNazFLIzs4B9xlnRDo+W5U/OCM1kjyfDL96WhRtXRMWSyG6b4Kswob7AB
sxedNbHFff0KKuoMw9MEO+uPkQ+VbPvUwOZMP3CTYHuaX97SYnZqSiBs5a+xg6TT
mew3zP20ZY/Z/ZIpVNfwl2vWIngno4mv6gdIZM6BZsSeIBu2Yl+61QQ0qzjyWh/0
KOVVUdQl6QXQ5rasCytKJ0Kq9OagGBCpzfaeQyNl/6u3SU74SxhQkc8=
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:16 2026 by rpki-client