Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2039333034.roa
File:                     3138302e3232332e39362e302f31392d3234203d3e2039333034.roa (raw, json)
Hash identifier:          fYc2yVgm0TX8dCjEXiHG41HjqLCtywOzCJ6sK8jn8Eg=
Subject key identifier:   A3:FF:B0:33:A2:8D:C2:35:5F:83:CC:FF:98:40:AE:60:B9:D7:43:0D
Certificate issuer:       /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Certificate serial:       200D0093AEE5FB5896C9DCEA60188F5C5283C42A
Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2039333034.roa
Signing time:             Tue 26 May 2026 08:08:48 +0000
ROA not before:           Tue 26 May 2026 08:03:48 +0000
ROA not after:            Tue 25 May 2027 08:08:48 +0000
asID:                     9304
IP address blocks:        180.223.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 11:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0d:00:93:ae:e5:fb:58:96:c9:dc:ea:60:18:8f:5c:52:83:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
        Validity
            Not Before: May 26 08:03:48 2026 GMT
            Not After : May 25 08:08:48 2027 GMT
        Subject: CN=A3FFB033A28DC2355F83CCFF9840AE60B9D7430D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:95:4a:e9:6f:1f:7e:14:81:c0:d6:8b:6e:
                    49:c3:0d:e6:9c:ec:32:5b:d0:d9:61:22:da:07:ef:
                    a6:bd:2d:b6:29:b7:7d:dd:fa:fa:6c:04:20:bc:e3:
                    62:9b:88:31:56:9d:28:3b:df:43:4b:ec:c0:d8:13:
                    f2:ac:a3:37:fd:07:c2:13:12:86:e8:1b:11:c8:03:
                    43:46:59:db:58:94:2c:95:aa:53:c2:27:3c:21:88:
                    60:c9:94:10:f8:a6:fa:ea:1e:63:f3:d8:1b:a3:a5:
                    c0:54:74:0a:93:69:16:5c:0b:ab:c3:e3:d2:a2:11:
                    54:27:1b:73:52:6a:8b:32:1a:bd:8c:26:e2:17:54:
                    ee:16:ad:fa:22:ba:03:0a:db:a9:d7:0c:8a:7b:6e:
                    f0:49:c1:ab:9c:a8:c4:c0:fc:a5:6a:fa:dc:3f:10:
                    5f:bc:07:e1:3c:72:7a:1a:4f:16:25:cf:01:44:75:
                    59:a9:33:1e:82:1d:75:e1:62:a1:b8:fd:00:8c:93:
                    7d:e1:02:54:3b:40:81:98:d1:b9:7b:44:da:8b:1c:
                    24:af:cb:79:88:d6:00:48:53:80:cf:ad:e2:6f:c0:
                    70:c6:72:c1:47:5f:3e:2c:d4:32:1d:dc:86:cf:73:
                    92:3d:c4:b5:14:cc:f8:c2:0b:f6:36:fb:3b:1f:86:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FF:B0:33:A2:8D:C2:35:5F:83:CC:FF:98:40:AE:60:B9:D7:43:0D
            X509v3 Authority Key Identifier:
                keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e39362e302f31392d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:f9:39:d1:d1:f3:1a:96:14:35:86:a1:c3:f6:78:66:78:51:
         f5:a6:c0:b0:97:f8:cc:0e:b6:bb:c9:c0:5c:40:64:3e:c3:d6:
         56:af:ba:3f:8f:47:43:39:38:ac:f0:34:4c:71:a1:9f:cf:9e:
         d4:41:b8:f8:b0:02:1b:4e:f3:82:ba:0f:97:91:94:27:09:02:
         48:e2:64:d8:bc:c3:fa:f3:4c:06:29:81:8c:53:41:d7:75:43:
         fc:19:0f:bd:c6:f8:9c:16:dc:ad:e3:c3:dd:e7:7d:22:41:9b:
         3d:b5:01:9b:a2:b5:1d:95:99:f9:4b:88:37:5b:f6:b6:29:27:
         39:94:4c:ad:46:36:10:2f:7f:47:76:e8:4a:23:51:79:52:43:
         b9:a7:2d:d4:4a:58:5d:5c:18:d1:02:4e:d9:90:1d:2a:f0:46:
         df:24:85:ff:51:32:03:b8:f3:25:f1:84:0a:0b:bb:33:f7:c5:
         43:6a:ac:ee:e9:59:47:cd:7e:6e:c5:46:2a:52:f8:65:61:58:
         1d:25:e0:c9:b1:78:69:24:50:ea:ca:e6:ce:1f:bd:1d:31:1a:
         fe:6a:20:74:11:5f:f8:e2:3f:8c:89:82:3b:b6:f2:7b:70:75:
         b3:20:ea:0d:6f:8c:03:c2:3e:a2:0c:fe:aa:c2:97:63:68:a4:
         fe:e4:bc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:12 2026 by rpki-client