Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e20313532313739.roa
File:                     3138302e3232332e3132382e302f31372d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          tKFPpuMCpaIZb9f0TCsVyABQWUd8PqLm+XzOE/ZZ/cY=
Subject key identifier:   D7:A1:2C:F5:5F:0B:DA:95:5A:A1:C1:6A:C6:3E:01:94:AC:36:33:72
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       0B3B10EC3897C24292B28AD460473191211F2A3B
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e20313532313739.roa
Signing time:             Wed 27 May 2026 02:54:46 +0000
ROA not before:           Wed 27 May 2026 02:49:46 +0000
ROA not after:            Wed 26 May 2027 02:54:46 +0000
asID:                     152179
IP address blocks:        180.223.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 22:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3b:10:ec:38:97:c2:42:92:b2:8a:d4:60:47:31:91:21:1f:2a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 27 02:49:46 2026 GMT
            Not After : May 26 02:54:46 2027 GMT
        Subject: CN=D7A12CF55F0BDA955AA1C16AC63E0194AC363372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:b9:eb:fb:cf:e4:df:9d:14:c5:fb:bb:b2:
                    ec:b9:6b:ab:4b:83:d1:46:4c:e5:8c:83:91:c2:4f:
                    e8:76:39:b6:73:10:5f:ef:f1:97:d3:74:ca:0d:eb:
                    dc:b0:16:4c:c2:01:ba:de:96:82:22:32:ab:1d:8e:
                    11:d7:ac:a7:bf:b6:ec:ff:91:a9:bd:97:64:a9:7c:
                    57:30:90:3d:15:8f:06:a7:b7:08:f0:eb:23:51:f7:
                    36:15:56:81:14:e2:62:fd:38:36:8c:36:5b:ac:6f:
                    66:83:12:98:b4:c5:55:3b:ed:89:92:5e:8e:55:9e:
                    2c:5a:8f:1a:42:ff:a7:35:57:1e:13:70:00:fb:3d:
                    a7:5a:9f:26:65:e8:e3:68:5e:da:dd:a9:ed:4d:f0:
                    5b:05:29:54:6d:e0:1c:0e:03:40:7b:64:f8:07:d2:
                    fd:ed:1b:eb:16:f3:cc:2e:85:35:2a:d1:ca:ff:27:
                    2d:ed:d3:42:52:9d:1a:2b:76:2b:23:28:27:dd:ef:
                    29:f0:e1:cc:6f:33:02:40:dd:71:e6:d9:c8:0a:b3:
                    9a:80:bc:c1:8b:a8:44:e7:63:61:0b:75:05:0e:0a:
                    36:45:32:0d:06:41:cc:22:51:22:92:12:d9:d0:53:
                    d5:af:23:d8:2e:58:7d:1a:d0:89:a1:eb:45:a5:f5:
                    91:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A1:2C:F5:5F:0B:DA:95:5A:A1:C1:6A:C6:3E:01:94:AC:36:33:72
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:80:7a:3d:c6:01:b3:64:a0:53:df:c4:82:14:ae:ed:74:
         ee:c0:e6:42:d8:8a:e8:8f:01:70:0c:1f:cf:0f:8b:57:6c:e7:
         dc:77:b2:5a:ef:e9:23:08:52:8a:fc:45:d5:34:9d:39:bb:be:
         fa:20:db:f3:3b:15:27:d7:03:6d:d4:64:56:92:1b:6d:51:93:
         dc:b3:22:74:9a:24:e7:c7:47:e4:48:e2:2e:32:9a:45:2c:81:
         80:0d:b7:dd:df:72:ca:d0:e2:7f:d4:30:37:36:e1:39:f4:26:
         1c:8d:ac:fa:b7:7b:84:9c:0e:99:ef:ae:a1:ed:63:fe:eb:b0:
         91:91:fc:cd:58:d3:0e:f5:7e:21:96:69:5a:02:57:2d:0a:e9:
         78:f3:01:c8:12:12:33:26:7a:71:bf:b3:12:b4:92:ca:48:33:
         b5:5c:9e:96:b8:39:ee:9b:93:1b:6d:21:4f:ee:30:34:02:ed:
         f9:c3:7e:92:c6:d5:e0:bd:4b:ee:a2:0e:dc:ca:5f:df:9b:59:
         67:b2:ec:b9:ac:0c:d4:a2:7b:c7:26:bf:d4:58:eb:24:53:2f:
         20:9c:14:5a:69:f5:1e:ea:a0:b9:b7:a9:f0:98:c3:bb:7d:dc:
         83:04:4e:88:33:40:6a:02:10:b0:86:3f:cd:bd:4a:73:21:12:
         02:64:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:22 2026 by rpki-client