Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2032393134.roa
File:                     3138302e3232332e39362e302f31392d3234203d3e2032393134.roa (raw, json)
Hash identifier:          pOvu2wrJ74611FpWcswbRkkgv7Bwu/ZFtf4zYcI8ItM=
Subject key identifier:   BD:E9:8E:40:3E:69:EA:9A:DB:E5:8C:56:61:3F:3F:0F:56:23:05:B3
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       398217E668EA5AA4DCEF1816668FB415C6FBB5E6
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2032393134.roa
Signing time:             Tue 26 May 2026 08:08:48 +0000
ROA not before:           Tue 26 May 2026 08:03:48 +0000
ROA not after:            Tue 25 May 2027 08:08:48 +0000
asID:                     2914
IP address blocks:        180.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 11:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:17:e6:68:ea:5a:a4:dc:ef:18:16:66:8f:b4:15:c6:fb:b5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:03:48 2026 GMT
            Not After : May 25 08:08:48 2027 GMT
        Subject: CN=BDE98E403E69EA9ADBE58C56613F3F0F562305B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:e3:e7:bb:fe:ba:5a:29:d2:85:73:68:72:
                    75:03:67:05:dc:d9:45:fe:6f:a2:94:c1:85:0b:fb:
                    b7:63:26:21:0e:3d:4d:22:96:da:99:e6:77:3c:97:
                    71:c3:73:ee:32:e6:ef:7a:aa:74:cf:ca:68:33:20:
                    4a:fb:f0:fe:80:c4:8e:75:f2:81:58:3b:0b:4f:5e:
                    8d:15:6f:c5:4e:18:7d:40:98:30:b9:fb:f1:67:93:
                    5f:32:c8:94:ea:1a:ee:d9:81:4f:a5:8f:2c:52:77:
                    1e:83:c3:2d:e2:34:bc:d8:e8:b6:43:f3:46:98:34:
                    f0:cb:77:61:25:1f:2a:10:ad:89:60:55:a5:51:2c:
                    3a:8b:7a:eb:0c:52:28:83:53:6a:76:65:ca:ca:f8:
                    64:8c:a1:74:19:fb:b3:4b:f8:5d:cb:17:71:8f:bd:
                    5f:8d:cb:fb:2f:de:1b:f7:58:4d:40:44:1b:41:2c:
                    4f:6c:f1:1e:d7:53:d6:f1:bf:28:f6:db:6f:bc:02:
                    6f:d4:88:82:ab:cc:cb:17:e2:bf:ea:b1:c6:4c:df:
                    7c:60:7a:f7:be:89:79:92:48:d5:85:f4:33:96:46:
                    9d:aa:ae:56:18:79:ce:9d:37:99:52:9d:e1:a9:81:
                    98:05:48:3e:e6:bf:61:44:3c:82:61:2f:2a:8b:c1:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:8E:40:3E:69:EA:9A:DB:E5:8C:56:61:3F:3F:0F:56:23:05:B3
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:02:0c:f6:a8:9e:c8:75:e7:26:d9:ab:39:d8:19:eb:81:b8:
         48:73:98:bc:5f:4c:b8:54:06:6f:f0:37:50:05:69:d5:59:72:
         f6:a2:05:aa:3b:54:94:69:1b:34:73:24:48:bd:44:a2:07:2c:
         e2:76:70:c4:74:b3:c6:7e:d7:ec:7a:3e:c5:f0:9d:24:61:c4:
         78:19:44:5a:f0:ee:a5:2d:8d:36:5a:ed:f1:66:ad:15:9c:23:
         e2:b2:8e:b8:b5:9c:f4:dc:2b:d0:38:70:56:d5:69:c5:9f:12:
         2b:46:fd:71:d9:03:e8:4e:c8:1b:4e:a4:cf:5c:8b:42:8a:8f:
         3d:5b:3f:99:ec:d7:27:bb:2c:66:25:24:d3:c1:94:e5:5a:8b:
         32:04:d2:26:89:1f:6f:8c:e3:fd:e9:26:4d:06:a4:1e:40:41:
         f5:05:9e:58:56:7f:28:5e:cd:c9:4d:af:0b:85:7c:aa:68:f6:
         d6:9f:9c:7c:7a:85:fa:69:68:cd:59:8b:48:b8:af:e0:8f:f7:
         f8:98:83:6f:8d:75:f3:e1:84:f5:d4:e9:eb:32:9c:e9:30:83:
         35:38:cf:b4:2b:a5:11:89:11:aa:77:f8:30:51:1d:34:b8:69:
         bf:bd:2d:4a:83:b7:ad:0b:ea:42:d7:be:e3:b8:1e:f5:a9:20:
         57:dd:b7:bf
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOYIX5mjqWqTc7xgWZo+0Fcb7teYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw
NkNERDJDRTAeFw0yNjA1MjYwODAzNDhaFw0yNzA1MjUwODA4NDhaMDMxMTAvBgNV
BAMTKEJERTk4RTQwM0U2OUVBOUFEQkU1OEM1NjYxM0YzRjBGNTYyMzA1QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsePnu/66WinShXNocnUDZwXc
2UX+b6KUwYUL+7djJiEOPU0iltqZ5nc8l3HDc+4y5u96qnTPymgzIEr78P6AxI51
8oFYOwtPXo0Vb8VOGH1AmDC5+/Fnk18yyJTqGu7ZgU+ljyxSdx6Dwy3iNLzY6LZD
80aYNPDLd2ElHyoQrYlgVaVRLDqLeusMUiiDU2p2ZcrK+GSMoXQZ+7NL+F3LF3GP
vV+Ny/sv3hv3WE1ARBtBLE9s8R7XU9bxvyj222+8Am/UiIKrzMsX4r/qscZM33xg
eve+iXmSSNWF9DOWRp2qrlYYec6dN5lSneGpgZgFSD7mv2FEPIJhLyqLwbRpAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUvemOQD5p6prb5YxWYT8/D1YjBbMwHwYDVR0j
BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0
RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy
MzMyZTM5MzYyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBbTfYDANBgkqhkiG9w0BAQsFAAOCAQEAMAIM9qieyHXnJtmrOdgZ64G4SHOY
vF9MuFQGb/A3UAVp1Vly9qIFqjtUlGkbNHMkSL1Eogcs4nZwxHSzxn7X7Ho+xfCd
JGHEeBlEWvDupS2NNlrt8WatFZwj4rKOuLWc9Nwr0DhwVtVpxZ8SK0b9cdkD6E7I
G06kz1yLQoqPPVs/mezXJ7ssZiUk08GU5VqLMgTSJokfb4zj/ekmTQakHkBB9QWe
WFZ/KF7NyU2vC4V8qmj21p+cfHqF+mlozVmLSLiv4I/3+JiDb4118+GE9dTp6zKc
6TCDNTjPtCulEYkRqnf4MFEdNLhpv70tSoO3rQvqQte+47ge9akgV923vw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:19 2026 by rpki-client