Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31342d3134203d3e203233373731.roa
File:                     3138322e38302e302e302f31342d3134203d3e203233373731.roa (raw, json)
Hash identifier:          DEIsLgZWwMZVXZrAgCGa+9+kjq+hrhJhASPlOimNIGg=
Subject key identifier:   50:76:5A:47:0E:75:3F:62:1E:DF:13:EB:D9:75:D0:B5:3A:62:0C:A8
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       2DB24CB75CF954230D806692174C2729404FCA3C
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31342d3134203d3e203233373731.roa
Signing time:             Tue 14 Apr 2026 02:17:59 +0000
ROA not before:           Tue 14 Apr 2026 02:12:59 +0000
ROA not after:            Tue 13 Apr 2027 02:17:59 +0000
asID:                     23771
IP address blocks:        182.80.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b2:4c:b7:5c:f9:54:23:0d:80:66:92:17:4c:27:29:40:4f:ca:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Apr 14 02:12:59 2026 GMT
            Not After : Apr 13 02:17:59 2027 GMT
        Subject: CN=50765A470E753F621EDF13EBD975D0B53A620CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:61:73:7c:88:20:6a:ab:34:48:6d:87:70:
                    ed:38:54:a7:b0:84:2b:7a:4a:42:9c:44:2a:aa:d7:
                    fc:e6:48:99:3c:97:a8:b0:d5:6d:94:4c:68:8f:97:
                    ad:14:d5:ac:38:48:c3:a7:0c:4f:3f:01:c2:18:44:
                    b0:0b:cd:3c:cb:2c:0f:1d:1b:de:18:8e:9a:f8:fe:
                    bc:ca:41:b0:b6:63:26:3b:b2:02:8a:47:b7:c0:b7:
                    5e:d2:45:ec:a3:9a:2c:f5:95:ce:c7:3b:b1:78:a4:
                    a7:3a:f1:0b:18:10:2a:28:d4:5c:a4:af:bf:35:fd:
                    ab:72:4e:3e:a0:bd:49:3a:be:6a:3d:51:bf:a7:1a:
                    7e:c2:7c:6a:0b:f6:fc:81:32:af:05:04:d0:cb:9a:
                    d1:3e:2f:55:4e:95:2d:7b:6d:2a:1d:92:9e:4d:b2:
                    9f:9c:f7:8d:88:1b:1b:48:1e:84:03:6a:9e:f8:3c:
                    c3:79:90:92:99:39:a7:2d:10:53:9d:2b:7d:9a:4b:
                    e2:df:ad:d0:fa:4a:0b:ec:e1:37:dd:42:d0:3a:36:
                    f8:24:75:96:e5:ee:fd:72:bf:48:be:cc:32:26:06:
                    68:4f:2c:45:1d:48:8d:1e:06:38:b4:0b:e5:ed:89:
                    00:eb:e0:34:aa:32:74:28:ab:59:e6:2d:bb:24:8c:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:5A:47:0E:75:3F:62:1E:DF:13:EB:D9:75:D0:B5:3A:62:0C:A8
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3138322e38302e302e302f31342d3134203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         72:80:d3:83:ee:d1:d8:22:33:b5:69:37:73:1a:df:d8:63:94:
         8e:3f:ad:8a:95:ec:8a:94:f6:e9:c9:bc:6a:30:07:11:9f:96:
         37:c0:fd:3d:a5:8b:60:89:99:0b:f4:73:4e:e0:83:25:f0:6f:
         9b:53:bc:93:35:6e:53:df:a7:0e:85:fd:61:fb:5a:8c:95:6f:
         84:22:a7:26:e0:26:2f:4a:25:4d:60:60:4c:c0:b9:3e:63:3c:
         d5:e5:00:42:7c:2d:61:aa:23:fe:d7:07:62:85:03:40:c1:84:
         b5:8b:10:cf:34:6b:44:cd:02:e1:c5:98:c2:c5:3c:0e:23:c1:
         a7:7c:2e:58:52:13:fb:e1:12:b9:a0:f0:2a:9b:82:82:f6:ea:
         0c:04:e8:17:53:7d:42:26:ee:ac:ea:c6:f4:2d:f8:fa:e9:47:
         42:72:57:b8:95:11:70:e9:2c:88:83:3b:5e:19:cb:2e:39:ba:
         c3:d7:0c:e5:84:5b:f5:ee:d3:ff:0a:70:d0:89:cb:91:15:07:
         3a:dd:34:ec:d7:d6:17:dd:29:ce:3c:e8:9f:fd:74:52:26:64:
         a7:c9:db:8f:d9:2b:82:0c:2a:b3:67:9e:23:77:dd:1c:3a:60:
         91:b8:b2:32:df:18:57:f7:d7:6c:67:2a:6a:47:1c:12:cc:7a:
         1a:66:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:17 2026 by rpki-client