Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2036303937.roa
File:                     3138302e3232332e3132382e302f31372d3234203d3e2036303937.roa (raw, json)
Hash identifier:          2miq1ORLSbMQlvx6z0MQb87+0zxI7e4D3wPsWGeEKvo=
Subject key identifier:   7D:ED:9F:E9:50:BB:1C:DB:11:BF:AF:78:C2:D0:DC:B1:69:80:B9:64
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       595A831ADA935DD4115505E6D413D92DF2675EF4
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2036303937.roa
Signing time:             Tue 26 May 2026 08:11:50 +0000
ROA not before:           Tue 26 May 2026 08:06:50 +0000
ROA not after:            Tue 25 May 2027 08:11:50 +0000
asID:                     6097
IP address blocks:        180.223.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5a:83:1a:da:93:5d:d4:11:55:05:e6:d4:13:d9:2d:f2:67:5e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:06:50 2026 GMT
            Not After : May 25 08:11:50 2027 GMT
        Subject: CN=7DED9FE950BB1CDB11BFAF78C2D0DCB16980B964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:19:d2:65:d7:9a:43:4e:9d:ad:32:53:ec:
                    cf:3c:ce:ee:29:0c:8b:3c:d6:4a:73:3d:28:fd:ed:
                    d7:9f:43:52:b4:85:24:f8:1f:a3:b2:d2:25:fd:56:
                    b5:93:cc:f1:79:67:f3:da:4b:62:82:07:1f:0a:2d:
                    32:fd:f6:22:ef:97:e4:cb:2b:79:10:e3:eb:af:12:
                    38:4a:ad:30:a3:d3:05:5d:a8:da:39:d9:e9:24:88:
                    36:af:14:76:f1:04:54:fd:3b:29:07:4d:64:4c:8b:
                    86:8f:90:be:83:42:d4:83:5b:b0:04:e0:35:6f:34:
                    89:c5:3f:94:e6:b9:1d:07:9e:8d:5c:b4:1b:61:9e:
                    23:79:0f:20:ea:5c:f6:68:62:24:8f:95:3a:c0:90:
                    92:ca:44:23:91:14:79:3c:77:0e:cb:bf:49:c8:75:
                    63:1b:88:42:f1:b5:88:10:26:f9:89:0e:1e:98:c3:
                    9e:6a:f2:a7:d7:b9:01:a0:14:09:9c:59:e4:35:28:
                    cc:d3:9b:dd:79:25:87:2c:0e:ec:b3:e6:bb:b2:72:
                    2f:c1:04:11:d5:9b:d7:0d:68:c2:98:ee:75:f0:d7:
                    68:97:e9:88:e2:4f:9a:2b:9e:91:7d:7a:4b:7f:2f:
                    80:d1:52:12:8d:58:89:25:a3:2b:92:fa:20:2b:5d:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:ED:9F:E9:50:BB:1C:DB:11:BF:AF:78:C2:D0:DC:B1:69:80:B9:64
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2036303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:12:00:ff:30:1b:6f:20:be:8d:a6:43:04:f8:d2:4d:18:
         45:19:29:1a:fd:0f:4b:a1:65:ed:78:70:89:55:1d:a3:1a:93:
         57:86:54:39:2e:a8:35:51:e9:3a:51:4d:4c:e0:71:35:fd:5c:
         85:a2:c9:47:7d:5f:06:39:b5:65:d4:2b:af:4a:ec:78:b6:48:
         1f:7d:93:3f:0f:d5:22:e1:b3:d3:2f:48:e9:78:00:f0:82:74:
         2f:4c:85:5e:c1:7d:0e:2c:f3:24:a9:15:7a:30:5a:b9:3b:c1:
         b6:41:89:e7:40:fd:6e:61:8e:b3:c7:ac:bf:8b:6d:43:0e:76:
         4d:2c:7d:20:80:03:85:26:3a:8d:8f:0b:09:40:fb:9d:45:9c:
         d1:68:f5:fc:79:2e:62:50:40:4b:9e:c3:b4:23:f4:29:90:6d:
         8f:dc:77:9f:d1:99:ee:11:78:03:86:3b:e9:55:d9:6a:da:88:
         68:c2:91:f0:be:57:1c:ae:d5:0b:b8:45:d7:85:7d:85:88:40:
         a6:78:b7:66:7f:de:a0:ac:4e:1f:5b:d0:c2:6a:b1:c5:46:35:
         23:91:bc:5f:f3:be:5a:90:08:62:02:82:b7:65:bc:83:49:3f:
         4d:e0:95:1b:15:d7:1e:32:17:43:80:e8:17:1f:0f:0d:ad:99:
         8d:84:71:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:42:54 2026 by rpki-client