Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63838.roa
File:                     AS63838.roa (raw, json)
Hash identifier:          NZeLcs1jZ28Lc2ff+QvRbU5TQdg2x97X1gvHxgny4bg=
Subject key identifier:   E5:C8:F9:AD:E5:C9:7F:F1:06:19:A1:80:6D:EA:9D:28:A3:97:EA:BE
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       23A209D2DE1B2599C843EDC0FBB886272962A4EF
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63838.roa
Signing time:             Thu 21 May 2026 16:22:19 +0000
ROA not before:           Thu 21 May 2026 16:17:19 +0000
ROA not after:            Thu 20 May 2027 16:22:19 +0000
asID:                     63838
IP address blocks:        240e:10:a000::/37 maxlen: 37
                          240e:108:1195::/48 maxlen: 48
                          240e:982:9400::/40 maxlen: 40
                          240e:982:990d::/48 maxlen: 48
                          240e:983:1900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 06:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a2:09:d2:de:1b:25:99:c8:43:ed:c0:fb:b8:86:27:29:62:a4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 21 16:17:19 2026 GMT
            Not After : May 20 16:22:19 2027 GMT
        Subject: CN=E5C8F9ADE5C97FF10619A1806DEA9D28A397EABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:7f:33:43:34:8c:e5:32:50:88:b7:e1:32:
                    5b:b6:e5:c4:5c:0d:58:f2:a0:c6:3d:da:b5:ea:58:
                    54:4c:90:88:46:17:54:aa:d4:56:e5:b3:16:35:6a:
                    34:96:46:21:85:6d:c7:3a:01:e8:02:26:5e:e3:5c:
                    c8:bb:d8:c8:8b:19:d8:75:3e:07:d0:8e:c7:25:4e:
                    d9:32:e7:ff:46:48:83:35:f1:8d:12:ee:65:48:a5:
                    63:d5:02:89:08:65:ff:6d:af:99:b9:dc:e7:59:b8:
                    46:10:2f:b4:ac:4f:a2:c9:27:e4:11:22:2d:16:96:
                    37:7e:80:f8:28:e6:c5:9d:a1:43:38:3e:47:18:12:
                    44:af:f1:fc:ac:38:8e:b1:a9:66:32:ce:39:81:4d:
                    fc:ab:7a:de:ba:ad:d8:05:20:74:ba:36:b0:d8:0b:
                    1d:80:41:08:7c:5c:3c:d0:9f:33:5d:dd:5d:93:94:
                    8b:20:56:f0:bd:64:8c:71:dd:63:f5:fc:e7:31:d9:
                    27:22:9b:07:07:cd:f2:c3:8a:3d:8c:da:29:b8:90:
                    2b:04:2e:df:a5:22:d9:0a:8d:fd:fa:05:68:74:80:
                    13:ed:cd:11:18:09:dc:0f:c8:02:06:36:61:76:3b:
                    33:e2:4d:19:bc:a6:72:40:d3:c2:a6:d7:4e:a3:82:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C8:F9:AD:E5:C9:7F:F1:06:19:A1:80:6D:EA:9D:28:A3:97:EA:BE
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS63838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240e:10:a000::/37
                  240e:108:1195::/48
                  240e:982:9400::/40
                  240e:982:990d::/48
                  240e:983:1900::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:17:fe:79:66:f7:d7:fa:58:fe:30:37:43:3f:31:47:e2:
         d4:07:0b:ad:80:61:7c:f2:f4:6d:36:1f:29:06:c4:91:1b:bc:
         88:da:89:f5:59:21:74:ed:c2:09:c2:df:c2:ce:59:74:15:06:
         f9:77:31:f0:30:83:6e:4d:c0:d9:ed:aa:a4:70:b1:37:71:62:
         5f:30:1e:79:35:df:6e:d2:de:cf:d3:a9:84:d7:47:88:a3:9e:
         a4:12:21:ee:dd:29:ba:80:a1:94:80:10:8c:d6:0d:c0:60:ef:
         5c:a5:82:89:da:cb:ee:93:5c:ae:3a:9f:06:4e:6d:c3:6e:45:
         f5:8d:c8:5f:d2:51:f1:29:13:ce:50:6b:2d:30:cf:b9:34:c8:
         e1:c7:d1:f9:9c:90:a6:49:5d:b7:2f:e8:ba:33:c0:d2:4f:bc:
         a6:c7:3c:a2:98:c7:22:33:c9:93:c7:d1:bd:06:5b:cd:0f:33:
         f6:1a:74:39:2c:1d:99:c5:3b:61:6e:9e:a3:94:e9:af:40:e0:
         72:2d:58:37:e0:a8:13:a9:9c:fc:af:5c:e4:19:3e:f3:67:7a:
         76:26:1d:3d:49:f1:ed:84:44:13:8d:93:f1:3f:a5:c9:52:9c:
         c8:07:46:86:0e:d2:52:5e:a0:ca:d1:2b:e1:04:40:7d:5c:ad:
         b5:2b:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:25 2026 by rpki-client