Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e20323037353530.roa
File:                     3138302e3232332e39362e302f31392d3234203d3e20323037353530.roa (raw, json)
Hash identifier:          9k+j0lq7AHuWgFnpOi8Ysj89csJt7lmv1WZ9N6Eh7Ms=
Subject key identifier:   2D:50:50:46:27:0E:A5:B7:14:D8:6C:7A:D2:98:4D:DC:28:24:E4:F0
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       057FAB03F5B804E878BD6450A9F9CF416DE0A9CF
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e20323037353530.roa
Signing time:             Tue 02 Jun 2026 10:39:22 +0000
ROA not before:           Tue 02 Jun 2026 10:34:22 +0000
ROA not after:            Tue 01 Jun 2027 10:39:22 +0000
asID:                     207550
IP address blocks:        180.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 11:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7f:ab:03:f5:b8:04:e8:78:bd:64:50:a9:f9:cf:41:6d:e0:a9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: Jun  2 10:34:22 2026 GMT
            Not After : Jun  1 10:39:22 2027 GMT
        Subject: CN=2D505046270EA5B714D86C7AD2984DDC2824E4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:e3:e8:1f:71:28:a2:fe:49:ce:ee:54:63:
                    ab:cd:1c:83:89:1b:4c:41:3e:31:f7:7d:c0:9a:df:
                    ee:d6:ea:dd:88:c7:6d:0b:7e:3d:93:2c:89:c6:ef:
                    08:0c:01:4c:be:a1:e9:19:65:a6:29:f5:af:a5:a6:
                    c3:63:cf:50:ec:e9:da:e3:9d:e2:4e:6e:2a:17:1d:
                    9c:46:90:08:7e:a3:91:67:d8:9c:8d:ec:b5:be:36:
                    21:d3:cc:1c:e8:28:77:f3:17:0c:d5:f7:d7:f3:50:
                    ef:40:58:b0:71:1d:0f:3b:77:47:f1:7b:07:be:5a:
                    ba:43:db:47:cf:8f:60:29:74:c2:9f:28:3a:93:bd:
                    a7:ee:61:1f:02:f3:90:6c:1e:10:ef:b9:22:dd:f7:
                    2a:ad:15:a4:25:20:23:37:d6:f1:b4:d5:57:3c:52:
                    4e:c5:28:fe:71:82:d4:d6:80:0e:89:97:4b:f9:dd:
                    01:57:b4:45:e3:1f:aa:47:e7:8a:02:88:55:87:62:
                    36:55:e5:55:b6:f0:66:80:b7:84:c3:b1:4d:b6:cc:
                    88:aa:fa:b9:cf:8d:73:91:4a:8b:51:bf:19:82:40:
                    4a:1c:b3:ae:64:06:77:56:20:97:7e:85:78:98:82:
                    6e:ff:ed:ab:cc:14:95:0b:c0:4f:d4:6c:79:a8:64:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:50:46:27:0E:A5:B7:14:D8:6C:7A:D2:98:4D:DC:28:24:E4:F0
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:e8:f8:14:ba:a7:3f:f2:3b:e4:c0:53:4f:34:bd:35:6c:f9:
         db:6e:bd:46:70:f8:ae:23:e2:31:b8:c0:5b:a9:f4:09:86:3a:
         0c:e3:93:a3:d6:cc:2e:19:6f:a3:0d:96:f8:a8:d1:d9:d5:dd:
         1c:72:bc:7d:8f:ce:c2:21:bc:fa:b3:55:9b:e0:56:aa:96:a1:
         7c:29:94:b7:0d:4d:43:2d:2e:e2:57:9d:07:cc:7e:4c:c7:19:
         03:48:8a:2d:9e:a6:51:97:ac:49:fe:e9:33:b7:a0:99:db:05:
         0c:8e:87:a0:fb:b6:d8:cb:67:ad:12:b4:10:44:0b:d5:83:04:
         99:6f:8a:29:57:b7:4c:01:f7:fe:be:4c:8e:78:dc:e7:f9:27:
         9d:a4:b8:48:55:56:28:ef:a4:b4:a4:2e:68:17:38:cd:31:8d:
         55:35:35:25:da:11:d7:a0:2f:5d:8d:0e:24:b5:a5:6c:ff:fc:
         10:ed:02:fc:e9:03:09:ac:8a:96:7d:e8:2b:ca:34:85:70:3e:
         ad:1a:2f:b0:27:6d:c1:ee:a6:fc:4a:0e:e5:6e:c9:0a:41:98:
         6f:09:e0:ab:1b:06:de:c0:0c:15:41:0e:ca:63:12:69:0f:f8:
         8b:88:99:e1:27:e9:77:85:b0:83:a1:7a:10:56:47:a1:45:dd:
         24:05:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:16 2026 by rpki-client