Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa
File:                     3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          tax5XTIY8II7jeMRO0jBHWB22zEe3n32i+5+WO8wUhc=
Subject key identifier:   30:50:B1:A9:DF:CB:AB:E7:69:14:0B:94:68:08:64:68:8F:75:28:15
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       24B6F1179E39430499B61627343CDAE56B5E1796
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa
Signing time:             Wed 27 May 2026 02:54:46 +0000
ROA not before:           Wed 27 May 2026 02:49:46 +0000
ROA not after:            Wed 26 May 2027 02:54:46 +0000
asID:                     152179
IP address blocks:        180.223.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 10:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b6:f1:17:9e:39:43:04:99:b6:16:27:34:3c:da:e5:6b:5e:17:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 27 02:49:46 2026 GMT
            Not After : May 26 02:54:46 2027 GMT
        Subject: CN=3050B1A9DFCBABE769140B94680864688F752815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3a:37:2a:4a:0c:cd:ae:19:51:10:95:96:3c:
                    f9:fb:bb:99:0d:a4:27:84:44:74:86:c8:a8:fd:db:
                    ad:2f:81:56:15:0c:24:a4:a4:f6:13:bc:20:0e:b9:
                    1e:b1:e0:7b:9b:5f:af:74:8b:6c:80:66:a2:b5:7d:
                    23:02:e5:60:76:ae:c2:6e:f0:74:c8:79:5a:db:c4:
                    ee:5e:8f:df:3c:9e:f4:32:8d:3c:66:91:c8:49:72:
                    f3:ad:82:fe:47:e2:5b:e1:86:84:2a:ec:48:ea:99:
                    59:1b:8a:71:1c:9b:ac:81:5a:c4:05:db:59:51:58:
                    da:f3:12:cb:b5:02:ec:65:72:2c:7b:77:f9:55:5e:
                    a1:7a:81:01:cd:cc:50:d5:8c:c1:e9:2e:56:c9:ab:
                    09:75:2e:13:03:92:43:7e:bf:50:d2:99:7c:a4:b8:
                    19:f3:a7:00:cd:73:d4:de:2f:6a:7c:7a:03:d3:e6:
                    d8:1a:5f:7a:ee:c1:0d:4e:09:8a:79:b5:f9:17:82:
                    6e:6c:05:73:ab:da:2b:22:3b:d3:15:b8:54:95:ad:
                    73:59:6f:b4:a5:47:c2:65:f4:b4:0d:77:a6:36:24:
                    8a:6b:60:52:ea:93:c6:4d:8b:d7:52:aa:c8:2c:d2:
                    14:26:e9:4e:6a:8a:15:bc:91:4b:37:23:ac:8b:f5:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:50:B1:A9:DF:CB:AB:E7:69:14:0B:94:68:08:64:68:8F:75:28:15
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:93:bd:23:23:67:9f:a3:3d:ab:a4:39:84:61:78:97:86:fa:
         cd:32:fb:d6:a4:de:b7:94:1b:8a:33:dc:8a:c9:01:6a:c9:14:
         ef:43:c8:d3:c5:2a:ad:f2:9a:36:0b:8e:21:5e:0c:26:97:88:
         54:59:9b:77:56:38:18:c7:22:0e:e1:bb:d3:77:55:73:ae:3e:
         b0:c9:c8:70:c2:17:9b:36:81:28:80:4e:c8:28:1c:21:61:b1:
         bb:4a:2e:71:1f:00:31:f3:0e:0b:ea:42:a3:9b:7a:bd:18:f2:
         5a:af:3d:59:74:02:31:e2:d6:31:c5:d4:b9:b9:bb:42:9f:c6:
         43:52:26:ba:25:b4:57:0c:c9:ac:5b:3f:90:6f:16:fa:66:6d:
         f8:5a:56:ec:43:86:98:96:87:29:b7:96:8c:c6:81:cb:88:41:
         64:04:c9:3f:0b:41:b8:29:0c:6c:3b:96:d2:62:f9:f0:a7:80:
         09:54:cf:f4:01:6e:4f:72:17:50:b4:f3:2a:5e:59:f0:9f:06:
         48:da:97:fa:fe:51:35:80:d6:d3:6e:47:78:73:97:c7:1a:b0:
         93:3c:bb:10:fe:37:9d:80:70:c9:a5:b0:d0:56:95:b1:b5:b1:
         a4:51:cb:0a:e4:68:c4:80:b2:cd:03:a0:f6:2e:03:79:6e:73:
         80:c7:d3:a3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJLbxF545QwSZthYnNDza5WteF5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA1MjcwMjQ5NDZaFw0yNzA1MjYwMjU0NDZaMDMxMTAvBgNV
BAMTKDMwNTBCMUE5REZDQkFCRTc2OTE0MEI5NDY4MDg2NDY4OEY3NTI4MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUOjcqSgzNrhlREJWWPPn7u5kN
pCeERHSGyKj9260vgVYVDCSkpPYTvCAOuR6x4HubX690i2yAZqK1fSMC5WB2rsJu
8HTIeVrbxO5ej988nvQyjTxmkchJcvOtgv5H4lvhhoQq7EjqmVkbinEcm6yBWsQF
21lRWNrzEsu1Auxlcix7d/lVXqF6gQHNzFDVjMHpLlbJqwl1LhMDkkN+v1DSmXyk
uBnzpwDNc9TeL2p8egPT5tgaX3ruwQ1OCYp5tfkXgm5sBXOr2isiO9MVuFSVrXNZ
b7SlR8Jl9LQNd6Y2JIprYFLqk8ZNi9dSqsgs0hQm6U5qihW8kUs3I6yL9dTVAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUMFCxqd/Lq+dpFAuUaAhkaI91KBUwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy
MzIzMzJlMzQzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEA7TfKDANBgkqhkiG9w0BAQsFAAOCAQEAhJO9IyNnn6M9q6Q5hGF4
l4b6zTL71qTet5QbijPciskBaskU70PI08UqrfKaNguOIV4MJpeIVFmbd1Y4GMci
DuG703dVc64+sMnIcMIXmzaBKIBOyCgcIWGxu0oucR8AMfMOC+pCo5t6vRjyWq89
WXQCMeLWMcXUubm7Qp/GQ1ImuiW0VwzJrFs/kG8W+mZt+FpW7EOGmJaHKbeWjMaB
y4hBZATJPwtBuCkMbDuW0mL58KeACVTP9AFuT3IXULTzKl5Z8J8GSNqX+v5RNYDW
025HeHOXxxqwkzy7EP43nYBwyaWw0FaVsbWxpFHLCuRoxICyzQOg9i4DeW5zgMfT
ow==
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:23 2026 by rpki-client