Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2033343931.roa
File:                     3138302e3232332e34302e302f32312d3234203d3e2033343931.roa (raw, json)
Hash identifier:          tmEi6jZJxmCYZPQCtmnP2KJzYj9hVfqEsQkUF/tisK4=
Subject key identifier:   75:F9:86:25:05:6C:97:42:65:26:17:4D:5C:78:70:2E:CC:2F:1C:DD
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       190283429F755BC0FE819DCFC7ED8E3376DD92D7
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2033343931.roa
Signing time:             Tue 26 May 2026 08:06:43 +0000
ROA not before:           Tue 26 May 2026 08:01:43 +0000
ROA not after:            Tue 25 May 2027 08:06:43 +0000
asID:                     3491
IP address blocks:        180.223.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:02:83:42:9f:75:5b:c0:fe:81:9d:cf:c7:ed:8e:33:76:dd:92:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:01:43 2026 GMT
            Not After : May 25 08:06:43 2027 GMT
        Subject: CN=75F98625056C97426526174D5C78702ECC2F1CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:08:2d:c1:18:f4:f8:79:e2:b4:34:ee:66:
                    1f:93:85:d5:38:7d:df:c1:2c:b7:32:91:84:ea:e2:
                    bf:6c:19:3f:e7:1c:a5:39:26:cd:bc:a6:9e:e9:ec:
                    95:e0:bd:a3:a0:b1:d7:1e:c9:9c:a9:cf:b1:f6:82:
                    7b:fc:51:53:96:be:3b:b3:a1:42:cf:ec:d0:d0:be:
                    d5:ff:53:cf:42:d6:27:cd:b8:1a:37:08:bf:13:79:
                    b2:4b:f6:d9:6b:5e:36:b0:f3:db:26:ea:eb:f8:00:
                    77:93:43:8a:47:57:16:78:64:52:c2:72:28:6b:ed:
                    5b:ea:5b:cf:43:46:17:7c:ea:63:a1:e1:5e:6d:a2:
                    67:2b:61:c6:01:cd:03:a4:4f:b3:e9:4b:7d:44:95:
                    de:f7:3a:ef:fb:ac:2b:8b:4b:27:38:34:85:c8:a0:
                    b0:1f:56:1f:34:d8:03:06:f4:92:81:c3:f7:67:96:
                    49:bc:e0:9b:dd:c8:e4:b7:ce:bb:1a:94:6e:fe:f5:
                    ec:9c:3b:bc:66:37:d7:32:59:40:7a:b1:f1:68:ec:
                    94:fc:dd:bf:2d:dc:52:b3:bc:d8:1a:4f:cf:93:c6:
                    f5:30:51:49:82:81:72:67:61:01:05:a0:7d:b0:af:
                    99:c0:8a:5b:3f:ce:0d:d1:04:62:02:87:15:4c:46:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:86:25:05:6C:97:42:65:26:17:4D:5C:78:70:2E:CC:2F:1C:DD
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:54:ec:d4:dd:84:cb:b4:77:32:f8:44:31:53:1b:7d:69:
         26:9a:1d:7d:17:19:25:38:24:88:e4:46:a9:93:a8:88:aa:c9:
         cc:58:1c:d1:8b:99:4f:2d:e0:fc:06:b3:01:c0:d9:d3:ae:db:
         7b:1a:c4:de:8a:50:e3:b4:52:3e:96:f1:cc:42:1b:d8:25:5e:
         e3:51:21:9f:e8:98:f5:b5:48:cb:42:47:cb:6f:41:b4:3c:4d:
         35:5a:90:6c:db:c4:fe:4a:4b:fd:70:12:e0:38:97:10:55:a6:
         3d:94:d5:ec:d0:c5:1e:d5:49:22:e5:96:80:12:53:a5:a4:7d:
         38:5e:1b:25:37:b3:c1:61:83:4c:7b:d4:7f:da:57:70:98:92:
         ba:ac:34:40:d0:48:e5:88:45:74:36:50:20:56:15:ea:7a:da:
         3c:5f:db:36:1d:32:14:69:58:2b:83:7b:7b:7e:8f:20:e5:16:
         1c:5d:d5:a4:87:3d:ae:84:e7:6e:42:86:ff:c1:79:74:0c:36:
         2c:54:cd:b5:55:62:f7:03:c9:df:57:cb:8e:40:fd:71:67:b5:
         cb:9f:e3:5b:e1:d1:8a:6d:ef:f9:10:39:0a:b7:3a:db:ea:47:
         69:35:6e:a0:04:d0:94:8c:73:65:1c:99:33:64:55:ef:1c:7d:
         50:43:19:a1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGQKDQp91W8D+gZ3Px+2OM3bdktcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA1MjYwODAxNDNaFw0yNzA1MjUwODA2NDNaMDMxMTAvBgNV
BAMTKDc1Rjk4NjI1MDU2Qzk3NDI2NTI2MTc0RDVDNzg3MDJFQ0MyRjFDREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgdggtwRj0+HnitDTuZh+ThdU4
fd/BLLcykYTq4r9sGT/nHKU5Js28pp7p7JXgvaOgsdceyZypz7H2gnv8UVOWvjuz
oULP7NDQvtX/U89C1ifNuBo3CL8TebJL9tlrXjaw89sm6uv4AHeTQ4pHVxZ4ZFLC
cihr7VvqW89DRhd86mOh4V5tomcrYcYBzQOkT7PpS31Eld73Ou/7rCuLSyc4NIXI
oLAfVh802AMG9JKBw/dnlkm84JvdyOS3zrsalG7+9eycO7xmN9cyWUB6sfFo7JT8
3b8t3FKzvNgaT8+TxvUwUUmCgXJnYQEFoH2wr5nAils/zg3RBGIChxVMRqbTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUdfmGJQVsl0JlJhdNXHhwLswvHN0wHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy
MzMyZTM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMzM0MzkzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7TfKDANBgkqhkiG9w0BAQsFAAOCAQEAOR1U7NTdhMu0dzL4RDFTG31pJpod
fRcZJTgkiORGqZOoiKrJzFgc0YuZTy3g/AazAcDZ067bexrE3opQ47RSPpbxzEIb
2CVe41Ehn+iY9bVIy0JHy29BtDxNNVqQbNvE/kpL/XAS4DiXEFWmPZTV7NDFHtVJ
IuWWgBJTpaR9OF4bJTezwWGDTHvUf9pXcJiSuqw0QNBI5YhFdDZQIFYV6nraPF/b
Nh0yFGlYK4N7e36PIOUWHF3VpIc9roTnbkKG/8F5dAw2LFTNtVVi9wPJ31fLjkD9
cWe1y5/jW+HRim3v+RA5Crc62+pHaTVuoATQlIxzZRyZM2RV7xx9UEMZoQ==
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:15 2026 by rpki-client