Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2036303937.roa
File:                     3138302e3232332e34382e302f32302d3234203d3e2036303937.roa (raw, json)
Hash identifier:          wBf64HOrvApZkwohAj1JIQhIUarPgUehkDEDbhLDTao=
Subject key identifier:   08:78:21:EB:4C:DC:AE:04:B9:8A:16:01:6A:46:CB:E1:87:D3:78:5D
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       136E2958E8E329FD52E45D623D8514A22259BEF5
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2036303937.roa
Signing time:             Tue 26 May 2026 08:07:40 +0000
ROA not before:           Tue 26 May 2026 08:02:40 +0000
ROA not after:            Tue 25 May 2027 08:07:40 +0000
asID:                     6097
IP address blocks:        180.223.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6e:29:58:e8:e3:29:fd:52:e4:5d:62:3d:85:14:a2:22:59:be:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:02:40 2026 GMT
            Not After : May 25 08:07:40 2027 GMT
        Subject: CN=087821EB4CDCAE04B98A16016A46CBE187D3785D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:ab:26:fb:ed:09:4e:d7:a0:eb:55:dd:b8:
                    3d:df:83:3a:a6:36:eb:b5:0c:92:94:8d:24:c0:42:
                    61:5f:15:fd:c2:1a:55:c3:ca:11:b7:8d:3d:e3:9f:
                    84:ba:da:58:59:6f:4c:0e:af:38:fe:27:8d:10:53:
                    b3:4a:18:65:42:09:a6:02:6e:d6:db:d6:a0:7d:70:
                    27:0c:95:9e:cf:be:3e:64:a8:80:40:2b:d4:72:e7:
                    5d:ad:80:43:ea:fe:44:fb:fb:14:92:ef:d9:e1:6c:
                    c9:1d:1d:55:7f:c9:cb:db:c2:47:dc:4b:14:bf:df:
                    b8:7a:d0:6e:5e:e6:84:54:70:93:9b:a9:04:70:57:
                    00:43:11:8d:af:94:34:aa:0b:1f:71:2a:32:f8:f4:
                    08:3b:d2:30:1f:27:46:54:fe:79:dd:bc:65:44:88:
                    4a:d4:14:1e:89:8c:a2:ed:74:f9:90:29:ea:bb:7a:
                    fd:59:0d:5e:fc:78:a0:c2:a4:11:c6:62:1a:5e:87:
                    ba:2a:c6:f2:34:83:d8:e6:97:51:61:87:04:23:d9:
                    49:72:a3:ab:a4:8d:aa:66:3a:8f:41:b1:91:28:50:
                    d2:1c:be:5d:8f:38:c6:9a:c3:da:10:f2:37:d3:bd:
                    e6:ae:f7:9c:8e:2b:97:b5:83:fc:a6:93:a7:33:80:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:21:EB:4C:DC:AE:04:B9:8A:16:01:6A:46:CB:E1:87:D3:78:5D
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34382e302f32302d3234203d3e2036303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:20:26:c2:da:a9:e7:93:6c:64:50:10:81:24:2d:cc:47:
         a4:33:e3:c4:00:15:4f:c5:18:32:f2:41:e0:d6:e3:48:29:63:
         ad:97:0d:ee:93:93:29:2c:df:53:62:2e:11:f3:41:fc:10:47:
         42:0c:ff:69:33:bc:ce:fe:7a:eb:bf:60:8d:dd:fb:fd:f6:3d:
         46:41:14:b9:c6:d5:b3:6e:19:65:04:c2:e3:87:00:90:54:11:
         b1:61:84:ca:ba:bf:11:2b:39:f2:4f:72:4d:f3:dd:39:d1:04:
         f3:f0:0a:ef:33:5e:bc:0b:17:9b:78:ee:e6:e7:9a:6f:1b:46:
         3f:05:5d:7e:3c:54:34:d8:9a:3c:6a:7c:08:92:21:f7:11:f4:
         b8:53:60:d4:ff:bb:08:23:14:41:8e:6f:04:b1:23:43:1b:0d:
         ec:36:53:aa:a8:3d:1a:06:03:03:0c:e6:72:43:c1:7b:2e:7c:
         af:b7:36:26:76:b3:66:a2:ec:49:e9:89:42:5f:4c:c3:e5:2e:
         d8:3e:32:ea:5a:88:ff:ff:a3:62:c0:57:9e:21:43:6a:40:51:
         d4:e8:34:c8:3e:01:e3:76:ff:86:df:0c:d0:3a:f8:18:37:58:
         e9:f8:cc:c0:d8:fc:3b:67:ed:95:c2:49:95:ed:d6:ca:93:8c:
         40:99:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:41:58 2026 by rpki-client