Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e203138383131.roa
File:                     3138302e3232332e39362e302f31392d3234203d3e203138383131.roa (raw, json)
Hash identifier:          EgtMy2DvFqRKN18CdO8xZI1PCpr4IYQdUP9Xqe/mVDY=
Subject key identifier:   41:21:5E:18:0B:B8:AE:01:7B:1D:50:D3:83:D4:92:E9:7F:CA:CA:A2
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       55DDFD6F26366D19F982339795011033F8B0AEFC
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e203138383131.roa
Signing time:             Tue 26 May 2026 08:08:48 +0000
ROA not before:           Tue 26 May 2026 08:03:48 +0000
ROA not after:            Tue 25 May 2027 08:08:48 +0000
asID:                     18811
IP address blocks:        180.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dd:fd:6f:26:36:6d:19:f9:82:33:97:95:01:10:33:f8:b0:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:03:48 2026 GMT
            Not After : May 25 08:08:48 2027 GMT
        Subject: CN=41215E180BB8AE017B1D50D383D492E97FCACAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:98:56:ad:8a:f6:c2:db:59:77:17:48:b4:
                    33:16:ea:e1:c1:7c:a6:d1:71:ed:e6:bb:3a:1f:13:
                    67:d0:a6:53:e3:55:15:d7:99:eb:67:63:bf:ee:4b:
                    07:de:6c:76:3a:67:3d:c6:c8:fe:f0:52:4b:f4:74:
                    42:cf:5e:2b:fd:b9:2b:16:cd:ba:60:3c:5b:f9:3b:
                    b1:e7:64:ae:8f:f5:b6:eb:be:b8:91:05:45:9d:19:
                    cb:82:42:38:3f:45:d7:7b:62:9d:c6:9b:cb:c1:ee:
                    e7:f4:55:93:0a:20:13:a8:e6:ff:4f:13:4f:01:89:
                    dc:fb:b0:c2:9c:ba:f1:bb:27:4f:a8:de:5c:a1:fa:
                    e4:41:84:b7:94:e2:b6:c9:30:4c:7e:85:a7:1d:de:
                    2c:cd:17:fb:95:70:74:52:8b:a2:2b:a5:4a:6d:24:
                    e4:96:bf:3f:77:e0:f1:9a:3a:a3:31:45:ac:e0:8c:
                    ed:66:d5:12:c4:77:0e:a7:df:fa:ea:8d:e5:34:ca:
                    ff:82:f8:67:2e:c4:47:1d:78:78:cc:9e:bf:a1:71:
                    c0:f7:b6:5e:2a:02:cc:cf:c6:dc:54:f7:1c:a9:67:
                    aa:05:33:59:e8:f2:7f:0c:51:a2:38:ed:f5:5e:a1:
                    85:90:3a:d4:33:a2:7c:fc:98:fb:94:b4:e6:b1:9f:
                    fc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:21:5E:18:0B:B8:AE:01:7B:1D:50:D3:83:D4:92:E9:7F:CA:CA:A2
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e203138383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:32:0d:c5:49:18:e2:4d:3e:7e:9f:9f:7b:30:ce:6d:be:20:
         2f:70:22:ed:15:0c:9a:87:de:82:96:3e:58:c8:f7:04:d0:30:
         eb:aa:d0:bc:b5:5f:fd:6d:76:23:84:c3:15:aa:d9:aa:47:3c:
         44:2f:f8:db:1f:95:ce:c5:46:88:c5:eb:93:07:57:d3:74:18:
         19:b5:21:43:7f:ec:32:8d:7a:3f:8d:a4:dd:92:f5:bb:bd:f5:
         46:4d:54:e2:42:92:f9:76:ba:6e:61:9f:2e:32:f0:83:cf:ca:
         63:9f:2f:62:f3:68:13:91:65:f9:44:12:96:7b:37:3f:1c:35:
         8d:79:5a:92:b4:16:82:75:83:94:98:df:72:76:db:e2:09:eb:
         2a:f6:1f:d3:d5:67:18:c9:18:ce:32:e5:54:95:8c:37:28:65:
         09:61:43:7b:39:c7:ee:30:3b:57:ac:78:45:88:39:58:3f:e3:
         dd:26:04:1c:b0:1e:23:7e:af:c4:2a:5c:76:b2:42:64:25:cd:
         96:1b:03:4a:8b:d7:57:db:8c:91:f2:99:cb:a7:54:5a:30:34:
         39:b1:f4:f1:45:16:f2:33:11:4e:6b:3e:48:13:4d:40:f3:78:
         90:9a:2f:74:88:71:82:14:57:49:cd:8b:09:8c:b5:1d:74:1d:
         8f:de:1e:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:28:08 2026 by rpki-client