Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132362e302f32342d3234203d3e2039383038.roa
File:                     3138322e35302e3132362e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          RhxuxZ+iCMV8aBGIp1bF24YdTXF+Rt0ztaTLa31VtA0=
Subject key identifier:   E1:59:CB:FB:59:C0:01:07:A0:41:2A:13:70:AB:5F:6D:65:D3:ED:EE
Certificate issuer:       /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial:       6EEDF512B6E31FBC5A487B733FF8D57EE697751F
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132362e302f32342d3234203d3e2039383038.roa
Signing time:             Mon 13 Apr 2026 06:59:34 +0000
ROA not before:           Mon 13 Apr 2026 06:54:34 +0000
ROA not after:            Mon 12 Apr 2027 06:59:34 +0000
asID:                     9808
IP address blocks:        182.50.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ed:f5:12:b6:e3:1f:bc:5a:48:7b:73:3f:f8:d5:7e:e6:97:75:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
        Validity
            Not Before: Apr 13 06:54:34 2026 GMT
            Not After : Apr 12 06:59:34 2027 GMT
        Subject: CN=E159CBFB59C00107A0412A1370AB5F6D65D3EDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:d3:f4:c6:d0:9c:21:c8:1d:66:b9:28:b8:
                    2c:00:d8:42:0e:fc:cb:4f:ef:47:dd:45:cc:f4:f2:
                    af:ba:d0:42:f5:cc:a6:62:e4:67:0b:1c:12:c3:51:
                    a5:46:17:47:ff:2e:40:f0:fb:72:9d:37:98:45:31:
                    30:94:8a:5e:fd:4a:d7:0e:d9:90:ef:6d:6b:a5:ed:
                    91:73:80:6d:cc:34:90:e2:e7:cf:45:22:7c:de:34:
                    83:db:ea:60:4f:00:f5:79:f6:40:9e:47:15:cd:35:
                    dc:b0:00:ab:92:cf:12:40:d8:41:7e:44:87:60:bf:
                    e3:04:cb:28:05:28:0c:79:81:a4:d4:8c:a1:59:1c:
                    51:c8:b3:e7:e0:e8:6f:e2:c4:26:5a:d2:53:a4:7c:
                    3f:26:51:23:24:b1:00:ce:ac:4e:70:e7:01:8a:7b:
                    91:7b:a5:2e:43:c6:05:02:f3:a4:08:6f:75:58:95:
                    e4:d2:0b:53:f9:90:91:d6:16:fd:7c:41:7c:7d:fa:
                    c3:d7:73:e0:b1:04:3c:86:64:e2:92:b1:a1:7f:32:
                    5b:38:77:ca:7b:98:76:82:17:de:87:08:02:29:65:
                    c7:4a:86:46:97:fa:80:b4:19:de:55:fd:a8:03:fa:
                    48:e6:42:64:cd:04:d7:49:9b:10:f7:0a:f0:c8:25:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:CB:FB:59:C0:01:07:A0:41:2A:13:70:AB:5F:6D:65:D3:ED:EE
            X509v3 Authority Key Identifier:
                keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132362e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:52:54:5f:be:0b:5f:60:f5:de:a2:1f:45:77:ee:a0:92:e7:
         ab:d1:43:6d:8e:f5:e0:3e:8b:2d:a0:e3:3f:40:df:b2:89:f0:
         9f:1a:3d:53:cb:87:d8:74:f0:ac:1d:a0:d7:eb:fd:f3:32:0a:
         e9:62:fe:b3:fc:90:6c:f4:00:98:15:03:5d:c2:70:5a:82:b7:
         92:21:b0:b5:a8:e5:15:23:ca:7f:e5:27:86:99:aa:6b:8e:35:
         5c:0a:d3:b9:bd:75:8d:58:80:0c:95:34:ca:a3:b6:7a:d4:28:
         4d:87:1f:c8:5d:cf:68:05:05:43:90:d9:2c:c7:fc:fa:55:4d:
         40:7a:4a:3f:cc:7b:4f:51:03:9d:e6:29:e1:24:08:94:4e:55:
         7a:1e:8c:a5:78:ca:16:a9:de:96:a0:f9:f8:2e:a5:69:04:4f:
         9a:ac:19:c8:74:37:56:0c:b1:2f:2a:c9:8c:d1:35:b0:81:7c:
         d6:4e:b8:50:ec:52:cb:27:c7:eb:70:ea:27:c2:23:61:34:fa:
         89:a3:05:0c:99:35:37:2d:fe:db:29:43:83:8b:1c:cb:81:db:
         62:13:2c:85:3f:62:e9:3e:4d:4e:f7:24:db:46:20:61:cc:16:
         e3:6b:a9:c4:cb:70:fa:e8:7a:92:54:df:8f:c3:26:86:41:1a:
         2e:0a:ca:05
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUbu31ErbjH7xaSHtzP/jVfuaXdR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx
RjhFNkNDNjAeFw0yNjA0MTMwNjU0MzRaFw0yNzA0MTIwNjU5MzRaMDMxMTAvBgNV
BAMTKEUxNTlDQkZCNTlDMDAxMDdBMDQxMkExMzcwQUI1RjZENjVEM0VERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRotP0xtCcIcgdZrkouCwA2EIO
/MtP70fdRcz08q+60EL1zKZi5GcLHBLDUaVGF0f/LkDw+3KdN5hFMTCUil79StcO
2ZDvbWul7ZFzgG3MNJDi589FInzeNIPb6mBPAPV59kCeRxXNNdywAKuSzxJA2EF+
RIdgv+MEyygFKAx5gaTUjKFZHFHIs+fg6G/ixCZa0lOkfD8mUSMksQDOrE5w5wGK
e5F7pS5DxgUC86QIb3VYleTSC1P5kJHWFv18QXx9+sPXc+CxBDyGZOKSsaF/Mls4
d8p7mHaCF96HCAIpZcdKhkaX+oC0Gd5V/agD+kjmQmTNBNdJmxD3CvDIJcu9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU4VnL+1nAAQegQSoTcKtfbWXT7e4wHwYDVR0j
BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD
MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzODMyMmUzNTMw
MmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALYyfjANBgkqhkiG9w0BAQsFAAOCAQEAZ1JUX74LX2D13qIfRXfuoJLnq9FD
bY714D6LLaDjP0Dfsonwnxo9U8uH2HTwrB2g1+v98zIK6WL+s/yQbPQAmBUDXcJw
WoK3kiGwtajlFSPKf+Unhpmqa441XArTub11jViADJU0yqO2etQoTYcfyF3PaAUF
Q5DZLMf8+lVNQHpKP8x7T1EDneYp4SQIlE5Veh6MpXjKFqnelqD5+C6laQRPmqwZ
yHQ3VgyxLyrJjNE1sIF81k64UOxSyyfH63DqJ8IjYTT6iaMFDJk1Ny3+2ylDg4sc
y4HbYhMshT9i6T5NTvck20YgYcwW42upxMtw+uh6klTfj8MmhkEaLgrKBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:38 2026 by rpki-client