Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2036303937.roa
File:                     3138302e3232332e302e302f31392d3234203d3e2036303937.roa (raw, json)
Hash identifier:          mtzgZlqrVN+aHYwInLiZma+CZCphmq9fLlleNQq6vks=
Subject key identifier:   AC:4F:EA:69:CF:D5:4E:10:48:95:4F:16:FE:06:A8:E4:C6:BB:9A:F9
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       1014DACF9A90F7B438ED57F945283E6DD075E45C
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2036303937.roa
Signing time:             Tue 26 May 2026 08:05:51 +0000
ROA not before:           Tue 26 May 2026 08:00:51 +0000
ROA not after:            Tue 25 May 2027 08:05:51 +0000
asID:                     6097
IP address blocks:        180.223.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:14:da:cf:9a:90:f7:b4:38:ed:57:f9:45:28:3e:6d:d0:75:e4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:00:51 2026 GMT
            Not After : May 25 08:05:51 2027 GMT
        Subject: CN=AC4FEA69CFD54E1048954F16FE06A8E4C6BB9AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:c1:28:91:f3:7c:5e:3c:bc:e0:d3:93:75:
                    61:36:cc:aa:ff:a6:1d:ae:46:3d:89:7d:d1:c1:71:
                    0d:12:41:cd:47:19:7b:1a:98:94:ad:18:4f:90:0d:
                    e6:54:56:2e:67:70:d5:32:ed:ab:04:b2:72:a2:60:
                    47:aa:89:ea:32:e8:03:e1:5e:1e:1b:c6:36:bb:f5:
                    f6:6e:42:9e:c8:97:b1:80:9b:be:98:1c:44:21:41:
                    97:90:6e:2a:fa:22:c8:b7:ad:90:73:c6:a8:42:86:
                    2d:3a:c6:0d:1b:ac:5c:fb:4a:6e:07:58:9e:b2:10:
                    19:66:94:28:e6:ab:bd:46:d1:6e:39:d7:37:d6:8e:
                    5f:75:3c:50:cf:62:c7:d2:36:87:03:2c:93:c7:1e:
                    53:28:85:d8:d8:67:47:ed:db:ac:8b:88:6e:a3:61:
                    43:69:3a:69:e3:d5:4c:95:d9:90:25:22:eb:fd:44:
                    17:27:94:8d:e1:86:43:42:e5:2b:ba:98:f1:7f:ce:
                    c5:a1:73:e7:1e:26:0e:86:25:d7:4a:bb:59:f3:19:
                    3e:24:b1:29:ff:3b:04:25:18:bd:e9:d5:a6:04:29:
                    da:b4:b5:ba:ae:ea:74:62:77:82:b6:e7:45:dd:e0:
                    93:87:ea:92:e8:d9:f3:76:3e:ce:0e:17:38:20:95:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:EA:69:CF:D5:4E:10:48:95:4F:16:FE:06:A8:E4:C6:BB:9A:F9
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2036303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:dc:14:eb:46:ac:a3:9e:b0:33:51:f0:83:70:30:38:23:
         1c:b4:bd:5b:e5:d8:72:35:7b:95:6a:10:f6:20:94:92:c6:5f:
         dd:b6:b3:e2:7c:fd:ab:e8:dd:b5:68:2e:9a:c1:ac:c0:a8:5d:
         41:f6:c2:5c:27:da:b5:b6:1f:df:c2:91:c0:79:62:bc:47:ad:
         00:cb:72:61:5d:d6:1c:88:ab:61:2a:ee:0d:0f:08:1b:1f:c7:
         fe:45:bb:ab:8c:72:ce:19:08:ae:07:6d:d9:64:d0:92:4b:e2:
         e6:d6:91:c4:cf:c2:5e:95:1a:db:9c:e6:58:18:ce:11:e5:4c:
         5f:8c:92:52:3d:2b:1e:50:8a:bb:e0:79:0c:d2:91:f4:dd:44:
         13:fc:77:51:85:6d:14:27:22:f4:61:38:56:0e:bf:72:22:b0:
         99:7d:0f:92:35:91:da:5c:d8:84:3a:5b:12:ae:88:78:b1:35:
         69:dd:55:bc:7b:4b:c1:d5:b1:f8:77:2d:2e:1b:8c:28:50:75:
         26:3b:45:e7:63:2b:91:1c:6b:bf:37:41:76:3a:fe:c8:e0:50:
         20:aa:08:94:3c:55:f7:c8:36:95:67:7b:b6:a8:bd:0b:9b:65:
         8b:18:c7:25:3d:54:de:b8:45:48:c8:ba:eb:b9:1f:f9:c0:dc:
         6f:0e:d0:60
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUEBTaz5qQ97Q47Vf5RSg+bdB15FwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA1MjYwODAwNTFaFw0yNzA1MjUwODA1NTFaMDMxMTAvBgNV
BAMTKEFDNEZFQTY5Q0ZENTRFMTA0ODk1NEYxNkZFMDZBOEU0QzZCQjlBRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9cEokfN8Xjy84NOTdWE2zKr/
ph2uRj2JfdHBcQ0SQc1HGXsamJStGE+QDeZUVi5ncNUy7asEsnKiYEeqieoy6APh
Xh4bxja79fZuQp7Il7GAm76YHEQhQZeQbir6Isi3rZBzxqhChi06xg0brFz7Sm4H
WJ6yEBlmlCjmq71G0W451zfWjl91PFDPYsfSNocDLJPHHlMohdjYZ0ft26yLiG6j
YUNpOmnj1UyV2ZAlIuv9RBcnlI3hhkNC5Su6mPF/zsWhc+ceJg6GJddKu1nzGT4k
sSn/OwQlGL3p1aYEKdq0tbqu6nRid4K250Xd4JOH6pLo2fN2Ps4OFzgglbThAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUrE/qac/VThBIlU8W/gao5Ma7mvkwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy
MzMyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzYzMDM5Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAW03wAwDQYJKoZIhvcNAQELBQADggEBAAbM3BTrRqyjnrAzUfCDcDA4Ixy0vVvl
2HI1e5VqEPYglJLGX922s+J8/avo3bVoLprBrMCoXUH2wlwn2rW2H9/CkcB5YrxH
rQDLcmFd1hyIq2Eq7g0PCBsfx/5Fu6uMcs4ZCK4Hbdlk0JJL4ubWkcTPwl6VGtuc
5lgYzhHlTF+MklI9Kx5QirvgeQzSkfTdRBP8d1GFbRQnIvRhOFYOv3IisJl9D5I1
kdpc2IQ6WxKuiHixNWndVbx7S8HVsfh3LS4bjChQdSY7RedjK5Eca783QXY6/sjg
UCCqCJQ8VffINpVne7aovQubZYsYxyU9VN64RUjIuuu5H/nA3G8O0GA=
-----END CERTIFICATE-----
Generated at Sat May 30 00:41:49 2026 by rpki-client