Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa
File:                     3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (raw, json)
Hash identifier:          p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=
Subject key identifier:   97:C1:F4:26:2E:5C:1A:43:30:54:A9:1C:80:49:40:35:61:60:50:56
Certificate issuer:       /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B
Certificate serial:       2C4CF25BEF3198C9356C2B05855203DC73610BEA
Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa
Signing time:             Wed 15 Apr 2026 06:51:42 +0000
ROA not before:           Wed 15 Apr 2026 06:46:42 +0000
ROA not after:            Wed 14 Apr 2027 06:51:42 +0000
asID:                     63718
IP address blocks:        180.178.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:f2:5b:ef:31:98:c9:35:6c:2b:05:85:52:03:dc:73:61:0b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B
        Validity
            Not Before: Apr 15 06:46:42 2026 GMT
            Not After : Apr 14 06:51:42 2027 GMT
        Subject: CN=97C1F4262E5C1A433054A91C8049403561605056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:08:5c:aa:c3:76:41:59:90:cf:b7:2a:65:
                    62:97:47:ea:c2:82:b8:e8:21:a2:ac:27:c5:c4:54:
                    2c:21:de:87:cd:21:e4:9c:4e:40:22:4c:b6:a7:e4:
                    09:05:bd:10:59:eb:83:17:dd:c6:99:5c:8d:fc:66:
                    ed:b6:ea:5d:ad:ba:80:53:f5:4b:5d:55:91:77:b4:
                    5e:9f:33:85:3e:24:76:e7:29:5e:85:5d:0d:82:04:
                    a0:41:eb:21:91:58:b1:9d:d8:ab:aa:64:e5:cb:b7:
                    37:2b:cf:f1:34:45:9b:a2:c1:d2:ba:c3:52:39:c8:
                    c6:91:2c:36:4c:fa:8c:33:9f:fc:ee:0a:7f:af:56:
                    c2:c3:01:50:b1:9c:7d:63:63:cc:6f:c0:a9:39:df:
                    38:9a:47:57:24:88:cd:8c:9b:d5:90:30:4d:f0:fe:
                    8f:eb:3d:54:33:cb:5b:24:28:df:11:c0:88:17:76:
                    18:a1:06:5c:a8:0b:cc:f6:d2:98:c4:6b:d6:21:39:
                    f9:f8:98:be:7b:bc:f4:77:ee:a7:d5:05:79:08:a5:
                    3c:19:d0:e0:c1:0e:4e:c6:65:51:71:01:e8:5e:db:
                    45:66:ab:96:ee:4a:bb:1f:c6:5b:57:c4:06:c7:cd:
                    70:f0:c2:b8:15:f9:7f:b7:6a:10:b4:b3:61:fd:3f:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:F4:26:2E:5C:1A:43:30:54:A9:1C:80:49:40:35:61:60:50:56
            X509v3 Authority Key Identifier:
                keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:e1:1c:61:df:45:3b:6e:3b:0f:29:99:bf:83:7d:8a:a2:
         5d:e4:4d:b2:af:fe:44:c9:7a:03:2c:a7:33:a5:69:3a:7b:c6:
         a8:e8:6f:79:ac:bf:f8:c7:dd:2a:d9:34:ce:d4:1e:13:fb:49:
         23:f5:57:a0:af:f8:73:61:b9:44:a0:0f:31:a3:27:ff:29:06:
         91:16:dc:29:54:82:c0:d4:06:1f:3a:fb:6f:0f:95:e7:6a:16:
         85:b3:7c:d6:4f:e7:dd:77:28:0b:3c:4a:33:e7:c0:b6:c0:36:
         f2:99:07:ac:03:b4:db:4b:c3:49:a9:8c:b3:4e:14:88:09:c1:
         1f:a2:5f:3c:d8:26:27:40:7a:9a:bb:b4:53:eb:0c:b3:1c:6a:
         e8:ea:ff:d0:d4:52:d1:18:0e:0d:fb:c9:79:60:1b:46:0e:08:
         d9:7e:49:8d:82:2b:6f:f4:9e:2c:a7:24:3a:9e:70:3f:02:4a:
         cf:20:1a:70:f7:1c:75:75:71:6b:7f:96:d9:e7:32:c2:67:23:
         1a:86:57:52:8c:ad:d3:3a:19:df:ea:10:f1:7b:40:32:61:0d:
         dd:7c:a1:1f:97:a4:c0:f1:61:a4:e0:ca:0e:c8:31:9e:e5:99:
         5b:f9:bf:54:01:c8:4a:73:dc:ea:54:73:fa:65:8f:80:92:b5:
         99:e9:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:42 2026 by rpki-client