Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa
File:                     3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa (raw, json)
Hash identifier:          C0d3z/h2xZArU3nIXTv17UgDFlRUkyUCv/MWm5pTpOs=
Subject key identifier:   39:4F:63:30:C1:25:95:97:E8:19:8F:B1:77:7C:AA:19:AF:EB:65:21
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       63E6E5875378B36536F07A41FA2952441FB79CEF
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa
Signing time:             Fri 17 Apr 2026 07:55:48 +0000
ROA not before:           Fri 17 Apr 2026 07:50:48 +0000
ROA not after:            Fri 16 Apr 2027 07:55:48 +0000
asID:                     151296
IP address blocks:        180.210.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e6:e5:87:53:78:b3:65:36:f0:7a:41:fa:29:52:44:1f:b7:9c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Apr 17 07:50:48 2026 GMT
            Not After : Apr 16 07:55:48 2027 GMT
        Subject: CN=394F6330C1259597E8198FB1777CAA19AFEB6521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:ce:6c:5a:93:d7:1b:43:06:cd:47:93:5d:
                    6f:c7:10:d6:10:3b:b2:30:d5:4a:71:89:17:53:ec:
                    76:3a:26:aa:a3:62:43:25:f9:3a:35:0b:2d:d5:ec:
                    27:28:71:d5:02:46:77:10:67:9f:8b:7b:db:3b:a3:
                    fc:51:74:11:3e:40:48:74:30:5c:6a:c3:09:11:60:
                    67:cc:8f:04:ea:dc:44:9e:cf:39:84:c4:2f:97:32:
                    1f:1e:48:54:4c:d4:03:87:6d:f7:1e:1d:0f:2d:96:
                    fe:bc:89:85:f4:fd:01:c4:67:f1:43:5e:7b:67:28:
                    2d:14:ff:f8:92:46:c8:67:dc:b6:ba:e5:19:a6:03:
                    ca:29:0a:90:0a:82:62:33:10:64:43:ec:ca:04:97:
                    07:72:cd:31:ca:8e:a3:6a:ea:b1:cd:2c:99:4f:26:
                    a8:f3:7c:4a:63:67:e2:5b:d3:b8:8b:9d:9d:71:b6:
                    bc:c9:9b:10:2f:9e:2e:03:eb:67:9f:a4:ac:b0:9e:
                    64:e1:48:ab:10:4b:90:3a:46:25:91:51:31:25:05:
                    06:39:37:f2:b4:c2:82:ea:7e:5f:30:9b:6c:38:c6:
                    c2:ca:c8:66:82:4c:81:24:99:ac:46:46:42:80:4b:
                    f7:2a:3e:18:5d:89:00:ba:fa:44:f0:ea:3a:22:f8:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4F:63:30:C1:25:95:97:E8:19:8F:B1:77:7C:AA:19:AF:EB:65:21
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3138302e3231302e3231332e302f32342d3234203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:6d:96:51:db:db:09:2e:e1:28:b7:16:d4:ad:96:7d:d0:3f:
         1c:20:c1:86:9c:fb:3f:1e:4c:89:10:0e:92:03:fd:ab:a0:bc:
         7f:31:25:9b:d6:46:f8:1a:46:a2:de:d7:1c:5d:5e:dd:29:a0:
         c3:27:29:96:bb:1e:a1:f9:41:57:d4:f4:92:ba:21:19:55:fd:
         e4:8e:92:fa:78:28:1e:56:67:0a:17:ff:d0:e8:d1:e3:08:78:
         95:03:bf:b9:65:7b:ba:30:34:28:a4:d0:0c:23:d1:6b:4a:d4:
         fd:46:17:ef:0c:77:da:42:2c:e0:4a:da:fc:4c:a4:b7:93:78:
         71:f3:a1:cc:e3:e7:6c:ba:14:9b:6a:c0:26:76:36:76:89:82:
         16:39:2e:8b:66:e5:b0:b0:90:92:4d:6c:1d:ac:26:27:33:c9:
         e8:ad:2d:d5:2a:5f:77:b5:83:20:a3:f2:0f:7e:12:70:02:f2:
         8a:7a:52:3c:63:4d:9d:c0:d5:e1:f3:95:ac:d6:25:b5:80:80:
         b5:f2:73:09:30:82:2e:05:69:d9:cf:87:72:0c:8c:80:3b:0c:
         01:3b:5e:f9:7e:b9:ef:b6:4f:5b:d4:36:2b:51:27:32:88:64:
         3d:25:ca:5a:ab:89:e3:0a:d9:74:fc:40:70:33:08:ef:3a:b7:
         22:cb:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:21 2026 by rpki-client