Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3139203d3e203538383334.roa
File:                     3230322e3136382e3136302e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier:          4f1Jyow6gMlLoVucPv0HRADNzCrNQG1GmbU90SvA6KY=
Subject key identifier:   DA:8B:B8:55:6F:AC:19:8A:9C:FD:D5:D4:E1:F8:E8:3C:15:7B:62:FF
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       0A676ABF0DA60D8A3C6958BC0CF4984CA4034BF0
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3139203d3e203538383334.roa
Signing time:             Thu 16 Apr 2026 01:41:14 +0000
ROA not before:           Thu 16 Apr 2026 01:36:14 +0000
ROA not after:            Thu 15 Apr 2027 01:41:14 +0000
asID:                     58834
IP address blocks:        202.168.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:67:6a:bf:0d:a6:0d:8a:3c:69:58:bc:0c:f4:98:4c:a4:03:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 16 01:36:14 2026 GMT
            Not After : Apr 15 01:41:14 2027 GMT
        Subject: CN=DA8BB8556FAC198A9CFDD5D4E1F8E83C157B62FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:f6:24:ac:02:7a:ce:a6:58:82:b7:c8:ab:
                    e5:f0:63:dc:6d:3e:d4:54:06:cf:2d:a7:08:91:4d:
                    81:bf:bb:16:a2:3f:d8:df:87:0c:b2:75:b1:9a:72:
                    f8:04:52:d0:b1:81:aa:22:5c:c2:32:b8:6d:a1:29:
                    dd:1a:02:a3:3e:16:aa:c1:dc:5f:8d:a4:ac:ba:28:
                    db:20:ff:8d:89:26:92:40:e7:56:75:ad:68:c3:d3:
                    03:39:64:12:43:57:86:4d:de:b9:56:87:5a:13:07:
                    0c:23:9b:3a:e4:f6:22:80:e6:08:d8:7a:0f:28:22:
                    4b:b1:fd:0a:8b:c5:3f:dc:1e:74:a6:e4:e0:0f:a2:
                    73:ea:63:a1:34:ef:78:73:d5:db:ba:df:57:a3:73:
                    ed:39:47:7a:60:cf:98:17:e9:17:b0:d3:11:41:7d:
                    5e:39:87:53:63:15:eb:b8:74:61:f9:3e:64:90:9c:
                    a6:7d:4c:a4:ae:50:12:75:4a:39:b6:58:ea:61:aa:
                    19:47:b7:4d:fa:f9:d7:d1:83:a7:9c:ba:12:ec:3c:
                    2f:3c:6b:f8:3d:7d:99:35:98:7a:6d:4f:39:e8:93:
                    89:97:b7:91:7d:ea:08:46:5b:c9:37:d9:2a:f1:b9:
                    e6:8e:74:35:b1:73:ec:a3:bd:da:43:2d:8a:5b:ed:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8B:B8:55:6F:AC:19:8A:9C:FD:D5:D4:E1:F8:E8:3C:15:7B:62:FF
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3139203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:54:87:f9:f5:15:18:78:f0:9f:50:3e:4d:82:0a:b0:77:
         b3:82:59:41:80:47:d5:01:4b:87:25:87:7a:48:b5:75:e8:2e:
         60:9c:04:29:80:f0:34:dd:88:68:d7:cc:8f:d9:19:e4:66:33:
         2d:13:cd:4c:6f:16:71:36:7a:01:ba:51:24:02:39:d2:71:24:
         59:71:f9:55:1a:eb:a4:aa:59:20:56:5f:e5:fb:13:3b:6a:54:
         15:27:9c:42:13:03:dd:36:71:e1:ba:3f:bc:18:9e:bf:51:0e:
         cf:b0:6e:f3:72:45:e1:f7:7a:32:59:0f:df:3a:5f:79:ad:0d:
         1e:46:96:2d:c0:a8:79:ba:19:06:4f:81:4d:90:4e:f7:14:f9:
         2e:2d:9b:12:b0:f9:84:37:60:dc:4d:0b:99:4b:bb:0a:e3:00:
         ce:d0:08:38:0e:cb:62:9d:be:d7:7b:b4:02:86:ac:03:72:78:
         b0:54:81:77:a3:08:2d:08:4f:0d:ca:19:0d:da:b3:9a:97:ec:
         01:b1:e9:48:32:f1:06:78:7d:6d:f8:da:40:67:52:16:6e:8f:
         bf:0c:96:7e:85:92:66:58:30:b8:3e:63:62:03:23:b6:b2:1f:
         07:66:73:ce:87:25:11:a6:33:e1:e0:4b:e8:34:3a:e0:33:c0:
         93:69:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:18 2026 by rpki-client