Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2033343931.roa
File:                     3138302e3232332e34382e302f32302d3234203d3e2033343931.roa (raw, json)
Hash identifier:          vRO6k5SoXgkzaUH41pyCkcMFyJ9tXAFa2lgWQ9z0Jqw=
Subject key identifier:   0F:2C:9A:70:83:00:B4:6F:5F:E5:17:76:11:8B:06:9E:A3:8B:01:D5
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       46CDE48BA38878E7EC0D55BE563A765F8E0B0239
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2033343931.roa
Signing time:             Tue 26 May 2026 08:07:40 +0000
ROA not before:           Tue 26 May 2026 08:02:40 +0000
ROA not after:            Tue 25 May 2027 08:07:40 +0000
asID:                     3491
IP address blocks:        180.223.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 23:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cd:e4:8b:a3:88:78:e7:ec:0d:55:be:56:3a:76:5f:8e:0b:02:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:02:40 2026 GMT
            Not After : May 25 08:07:40 2027 GMT
        Subject: CN=0F2C9A708300B46F5FE51776118B069EA38B01D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:a1:b4:da:0c:8a:72:98:88:ab:f5:2b:bd:
                    82:33:ff:39:c7:e4:92:ec:64:91:f2:2c:e5:f2:49:
                    f7:b6:fb:61:46:d2:4b:61:18:f9:96:ef:f9:d2:3e:
                    2f:46:22:df:42:dd:33:6c:60:ae:f1:50:e4:ad:2b:
                    ac:21:b8:d1:59:4d:35:a4:e5:82:71:53:a3:c4:f9:
                    01:01:18:ad:1b:e7:09:9d:38:60:d2:03:fc:1f:be:
                    b4:44:8c:e4:6a:1a:64:15:7d:38:74:8d:eb:ff:f8:
                    ff:46:3e:0e:37:76:70:9c:ef:85:6a:ae:37:55:8c:
                    02:b6:4e:28:36:19:68:da:34:72:df:fe:60:98:ed:
                    ca:3a:60:37:08:aa:98:83:39:14:c4:12:98:2c:42:
                    32:e0:ee:44:74:aa:a3:51:d2:d8:69:42:63:fa:11:
                    e5:6f:73:84:1e:a2:7f:70:1e:b5:e7:67:44:0a:27:
                    9b:d7:c8:a2:05:d5:48:e5:8e:11:3c:4f:dc:fe:f6:
                    16:00:88:77:9f:a9:09:5f:a1:91:3f:3d:7b:26:97:
                    47:34:f6:0f:e3:38:5f:e9:62:64:6a:1a:2f:42:bd:
                    2d:fd:4e:84:64:e3:5e:59:cc:09:64:c1:3a:a9:e5:
                    20:e2:25:b8:a0:de:5a:92:3f:80:49:78:bb:39:a1:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:9A:70:83:00:B4:6F:5F:E5:17:76:11:8B:06:9E:A3:8B:01:D5
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2033343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:06:b2:ff:55:f6:ef:dd:ed:f4:a2:14:e4:1b:f2:d8:9f:98:
         03:4d:2b:03:c1:a6:90:bd:3e:e9:4f:b6:fc:06:8b:10:bb:6b:
         08:40:be:f0:4a:9b:f0:58:12:f8:14:88:41:8e:3a:18:07:8e:
         ec:d8:90:ce:47:08:94:28:2a:8f:e9:b1:ab:90:07:a9:2e:a3:
         1d:91:96:0e:d2:59:83:1f:75:66:35:8e:7e:9b:4f:20:e5:c8:
         b2:f2:03:06:53:e7:87:36:0c:42:ba:d6:4a:f5:cd:e8:49:d1:
         58:ca:d8:9d:07:7d:f4:63:0d:c0:dc:66:53:89:7b:c8:16:bc:
         26:e6:fb:c3:6c:df:1e:0f:49:04:57:1c:21:94:6e:be:8d:f7:
         65:44:e1:12:59:69:ac:dc:c1:e5:ef:fe:5f:93:94:34:89:fd:
         9b:46:28:5f:f6:8f:4e:5d:63:d3:39:2e:a6:e4:66:8d:01:13:
         19:e6:96:69:7a:37:6a:76:eb:ea:b8:79:df:4f:c6:ab:50:d0:
         bf:81:69:ee:99:63:a4:a0:12:fe:68:4f:f7:b3:7a:12:6f:86:
         9b:3d:cb:50:d4:8f:f3:61:54:db:9d:8a:78:08:1a:e0:56:1a:
         72:03:17:d9:54:1f:67:da:b0:c5:97:cf:01:97:ee:09:c5:ab:
         20:55:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:54:16 2026 by rpki-client