Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/3136332e36312e3137382e302f32332d3233203d3e2034383136.roa
File:                     3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (raw, json)
Hash identifier:          kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=
Subject key identifier:   88:AE:C7:CD:CE:54:ED:72:20:27:41:D5:7B:2F:E9:15:F2:8E:AC:23
Certificate issuer:       /CN=5CFD6F5150236B766305D5CD47F180D751FBED31
Certificate serial:       7243F3A55B04D1939F22623A8E11F4CED09487AE
Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/3136332e36312e3137382e302f32332d3233203d3e2034383136.roa
Signing time:             Fri 17 Apr 2026 07:45:19 +0000
ROA not before:           Fri 17 Apr 2026 07:40:19 +0000
ROA not after:            Fri 16 Apr 2027 07:45:19 +0000
asID:                     4816
IP address blocks:        163.61.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:43:f3:a5:5b:04:d1:93:9f:22:62:3a:8e:11:f4:ce:d0:94:87:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31
        Validity
            Not Before: Apr 17 07:40:19 2026 GMT
            Not After : Apr 16 07:45:19 2027 GMT
        Subject: CN=88AEC7CDCE54ED72202741D57B2FE915F28EAC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:f3:53:ca:10:2b:0e:23:8c:6c:07:f3:f9:
                    77:c8:d8:b0:84:62:f8:74:5c:17:3b:d4:a2:21:f1:
                    5c:87:bf:3f:47:44:86:0b:32:6e:8a:b5:ee:03:71:
                    f2:11:48:23:7e:99:73:c8:b6:69:f0:b3:92:07:85:
                    1c:ed:2c:81:61:65:12:18:59:ed:f0:66:97:41:fb:
                    02:32:53:08:d6:af:ab:1c:7c:cb:52:6e:13:92:60:
                    4d:03:43:ac:49:3b:dd:75:3b:6c:fb:3d:ff:cd:fd:
                    0c:ae:b4:d2:c7:c9:88:f2:92:0e:42:c5:62:1d:e7:
                    e0:59:c6:db:26:41:63:9c:d4:af:1f:58:c4:77:13:
                    74:b4:69:ab:77:11:0e:39:c4:7f:56:ee:cd:7a:d6:
                    02:5f:35:b0:3e:3c:75:77:ac:87:15:ae:d6:95:3d:
                    0d:80:9c:f8:37:6f:e7:4c:86:75:80:58:c3:40:9b:
                    31:8b:f9:93:18:88:43:67:cd:fc:ac:66:99:a6:9c:
                    f5:48:e1:6c:9e:a1:56:15:a0:64:af:08:6b:41:c1:
                    5c:e4:08:82:d9:6d:b0:c9:7a:4f:c9:2d:fe:3f:70:
                    71:7f:4b:db:1e:6e:01:ad:a2:b4:c7:c5:f3:77:a7:
                    c6:28:fa:a4:5e:4e:da:eb:72:89:5f:0d:d2:af:f3:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AE:C7:CD:CE:54:ED:72:20:27:41:D5:7B:2F:E9:15:F2:8E:AC:23
            X509v3 Authority Key Identifier:
                keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/3136332e36312e3137382e302f32332d3233203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:f3:56:3e:de:02:6d:57:69:24:86:8b:a9:c7:d8:f7:e6:
         e0:d6:14:66:56:e2:e2:23:3c:4a:ad:1f:f9:4d:80:d6:4d:15:
         c8:27:3c:d7:39:01:a2:19:66:e4:ba:39:71:45:33:24:85:53:
         7b:28:18:40:19:46:f9:3e:b6:3b:97:e4:4e:2c:11:20:d9:0c:
         23:09:78:af:0f:ba:02:a3:e6:03:f8:e3:26:60:6c:95:ca:09:
         73:d4:bf:a8:86:99:84:46:5a:a4:07:07:5d:77:b4:25:3f:0a:
         8e:ac:4f:8e:fe:8d:d3:a0:a9:3b:c0:47:6d:e9:c0:cb:fc:24:
         4d:33:83:d8:66:b5:e6:11:3f:0f:24:09:e1:b3:81:fe:b0:8e:
         87:1e:e5:e8:fe:bf:a6:44:b6:64:07:c1:2c:cb:d8:8f:81:1f:
         f2:7f:aa:cd:e7:d8:8b:16:5f:a7:09:af:a3:a7:f0:b6:64:4c:
         26:17:80:d0:d9:90:78:d6:5e:48:38:69:98:b0:d5:c1:8e:68:
         0a:f2:9b:9a:9e:ef:a3:68:30:7c:3b:4a:1c:73:c5:5a:4d:c7:
         56:28:d5:1b:d1:a4:b1:d7:85:da:ed:57:73:1b:9c:c1:92:6e:
         05:9a:8c:8f:d9:a3:13:ea:d0:f1:69:c6:3e:5b:45:c5:5f:b5:
         7a:78:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:40 2026 by rpki-client