Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa
File:                     3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa (raw, json)
Hash identifier:          LcT6ji4n5le6EwNrdut4qkUvWOWYyD5Xceg1g5j20sU=
Subject key identifier:   D5:85:51:A1:F1:81:98:7F:CF:CF:EC:0C:71:41:DE:6B:AE:D0:F7:2B
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       4181FAD72D2D4B094F749561B650E8699FD04B02
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa
Signing time:             Fri 17 Apr 2026 07:55:18 +0000
ROA not before:           Fri 17 Apr 2026 07:50:18 +0000
ROA not after:            Fri 16 Apr 2027 07:55:18 +0000
asID:                     151296
IP address blocks:        180.210.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:fa:d7:2d:2d:4b:09:4f:74:95:61:b6:50:e8:69:9f:d0:4b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Apr 17 07:50:18 2026 GMT
            Not After : Apr 16 07:55:18 2027 GMT
        Subject: CN=D58551A1F181987FCFCFEC0C7141DE6BAED0F72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:ad:47:a3:65:8d:d4:41:60:f3:be:80:cf:
                    a2:8a:66:59:d8:e0:2d:d2:2c:e0:b6:75:bd:14:57:
                    47:16:78:26:7d:b9:24:46:93:8b:24:c8:04:e3:08:
                    dc:10:e2:32:ae:b2:8e:f9:15:91:7c:98:1d:d7:5e:
                    e6:48:71:5d:9c:28:9f:5a:e8:16:15:6a:80:68:2a:
                    98:ee:87:6e:18:47:87:5d:22:12:29:7f:74:82:f8:
                    99:cc:02:68:d9:d5:21:87:b3:b5:ba:d7:a7:6e:b7:
                    9b:71:9e:61:10:f3:45:64:fc:52:6a:91:60:96:ac:
                    0e:38:e5:71:04:3c:e0:3c:31:02:35:60:b0:e5:08:
                    cf:ba:e6:c7:99:0a:9f:b2:c6:79:8b:80:eb:0e:56:
                    1d:2b:63:ce:99:b3:fc:36:71:10:d8:13:6b:87:d3:
                    aa:0e:65:4b:89:5d:3e:76:57:b9:db:51:8c:cd:89:
                    c3:56:e9:ef:23:5a:3e:5e:9d:48:b3:82:66:27:3c:
                    56:7d:b2:b1:af:27:2b:1d:fa:d7:ad:27:d5:38:8b:
                    5b:3e:57:aa:9e:3c:dd:4d:05:9c:f5:ad:cf:bd:e1:
                    b0:a8:50:4b:2d:07:23:58:81:47:93:68:bd:b5:65:
                    e2:ab:41:01:49:a4:a2:09:a0:e5:66:0a:70:aa:d9:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:85:51:A1:F1:81:98:7F:CF:CF:EC:0C:71:41:DE:6B:AE:D0:F7:2B
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231322e302f32322d3232203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:74:60:35:31:48:72:e8:1b:15:a6:23:20:a1:ef:97:34:
         b0:5a:05:d1:52:63:7a:5e:6d:40:d8:57:2a:be:95:7d:50:15:
         d7:8b:12:5d:d1:b7:92:0e:2f:c3:ec:97:ba:18:0c:96:09:8c:
         84:17:30:57:ff:41:17:48:ff:75:20:b6:c5:34:a3:59:32:c9:
         4a:b9:3b:5d:40:a5:4c:42:8b:12:4b:3c:20:e9:73:e3:a3:c3:
         1b:ba:5f:a0:6c:03:31:83:a9:06:e4:01:1e:52:08:63:de:9d:
         b6:c1:ae:04:5e:55:31:d9:08:a9:d5:88:ae:eb:75:36:0f:63:
         7a:04:77:d4:06:aa:73:78:70:61:f2:c6:29:1d:31:08:49:c3:
         04:67:02:a4:c6:78:d8:07:ca:75:48:d9:25:13:14:dc:71:29:
         e4:5a:4e:92:b8:5a:61:56:08:7a:20:e1:cb:8d:59:23:21:91:
         d1:48:bf:e5:cb:30:11:f6:e9:45:d2:ae:3a:5c:a5:8d:72:cc:
         6f:df:e9:61:de:4a:95:aa:ee:56:cd:99:dd:56:2a:d2:4f:7f:
         1a:bb:0b:70:94:8f:a3:98:c0:2c:ae:05:17:a4:3e:88:51:f7:
         35:09:9a:47:c7:10:69:03:86:05:8f:7a:f8:b3:33:ca:d3:f0:
         c7:58:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:21 2026 by rpki-client