Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa
File:                     3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa (raw, json)
Hash identifier:          FWv12ML8J8YCAYp2fdIpIl0q0MenjCZzWuv+OjRnfv4=
Subject key identifier:   16:99:9F:29:91:AD:66:48:7F:22:80:51:3C:2C:8E:3B:7E:60:37:DC
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       054B05F787D99E9E8D4B57EA79C2E830AAD7366C
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa
Signing time:             Tue 26 May 2026 08:11:51 +0000
ROA not before:           Tue 26 May 2026 08:06:51 +0000
ROA not after:            Tue 25 May 2027 08:11:51 +0000
asID:                     3491
IP address blocks:        180.223.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4b:05:f7:87:d9:9e:9e:8d:4b:57:ea:79:c2:e8:30:aa:d7:36:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:06:51 2026 GMT
            Not After : May 25 08:11:51 2027 GMT
        Subject: CN=16999F2991AD66487F2280513C2C8E3B7E6037DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:a0:7d:b7:9d:ad:83:c8:e3:50:da:dd:5d:
                    75:83:6d:ba:f3:a7:e7:b7:84:45:42:99:14:31:c9:
                    5d:86:30:95:fd:d0:c6:cc:c8:a5:fc:04:ab:dd:c2:
                    c4:95:a2:50:88:de:3f:a9:2e:ee:30:bb:0f:ed:33:
                    5d:58:d5:8d:09:04:80:77:ac:1c:d4:7d:5b:af:65:
                    fa:ba:cb:82:ea:83:ce:3d:5b:70:ec:32:68:87:63:
                    76:19:1c:1b:72:5a:bb:18:f3:8e:86:0d:0d:77:9c:
                    6b:17:e2:46:a3:67:84:ea:2a:d2:37:84:2d:45:c7:
                    3a:0f:13:01:52:90:84:37:4a:ed:f9:0e:99:31:4a:
                    8e:de:5e:2a:ab:03:fa:ad:c3:52:5b:3a:3a:73:86:
                    8d:8d:83:23:4d:14:00:69:64:69:cb:21:74:ed:aa:
                    3d:d2:af:9c:11:64:e7:9e:cd:3f:6a:ee:6c:75:ed:
                    10:4a:27:b2:e4:6a:45:e0:62:2f:4f:30:c6:cb:1c:
                    05:7c:32:48:e1:82:31:c5:ac:b7:9d:7e:4a:85:5e:
                    ab:ef:0a:8f:77:9c:f9:f9:c3:10:3b:bb:ab:65:4d:
                    26:a1:50:98:30:75:01:40:b9:c5:d0:84:d3:96:49:
                    2f:06:35:60:37:30:fe:b5:29:b8:93:d1:31:df:d4:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:99:9F:29:91:AD:66:48:7F:22:80:51:3C:2C:8E:3B:7E:60:37:DC
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         43:94:36:9c:99:a6:43:37:8b:a8:56:2c:54:dc:a0:e3:c3:d2:
         8f:9d:b3:f9:bf:72:57:d3:1b:10:e8:68:e1:e8:78:26:96:b2:
         67:fd:ca:85:74:6b:ac:60:39:4b:ea:b3:7b:22:ca:48:36:e7:
         c1:c9:97:9e:63:05:01:0c:19:58:e1:70:c1:4b:14:79:d5:9b:
         f1:08:ee:b2:e6:b6:f3:42:78:9c:12:22:e0:a1:31:4e:b5:a3:
         a1:f2:d5:bc:68:0d:aa:43:ae:9e:d6:5c:7a:47:c7:a2:f8:f7:
         31:57:ca:f1:69:76:94:3b:01:74:65:50:38:35:0c:7e:0c:05:
         54:b0:84:c1:51:d6:47:d0:5e:88:9b:8e:82:86:2c:72:92:d2:
         6a:f4:d5:83:61:17:80:29:bb:82:34:87:6d:33:82:07:ae:cb:
         ae:3d:da:07:22:b7:c7:bc:1c:d9:de:d3:62:bb:2e:01:4a:ba:
         70:9f:94:72:0e:6d:d1:83:ce:62:68:68:a9:e9:2b:c7:0b:71:
         4e:b6:e3:bb:65:d3:12:f5:49:6e:13:2a:88:da:e6:21:65:c8:
         56:c6:b4:74:65:23:0a:9d:7a:f7:7a:fc:e9:b2:96:6b:98:f4:
         36:c5:96:b9:c6:67:44:44:94:d2:ab:3a:0e:b3:f9:18:6c:30:
         70:4b:8b:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:41 2026 by rpki-client