Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132372e302f32342d3234203d3e2034383437.roa
File:                     3138322e35302e3132372e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          +c/U3XMlE+ukOkYx/g3C7Uq+4fEShU4icDPDABLikhQ=
Subject key identifier:   F5:8C:86:9A:B8:76:C0:C1:42:96:9C:6C:E1:06:1D:73:BE:97:50:77
Certificate issuer:       /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial:       02AE96BB22D791E4A54E64A5BDA3E9716B87DFBF
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132372e302f32342d3234203d3e2034383437.roa
Signing time:             Mon 13 Apr 2026 06:59:35 +0000
ROA not before:           Mon 13 Apr 2026 06:54:35 +0000
ROA not after:            Mon 12 Apr 2027 06:59:35 +0000
asID:                     4847
IP address blocks:        182.50.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ae:96:bb:22:d7:91:e4:a5:4e:64:a5:bd:a3:e9:71:6b:87:df:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
        Validity
            Not Before: Apr 13 06:54:35 2026 GMT
            Not After : Apr 12 06:59:35 2027 GMT
        Subject: CN=F58C869AB876C0C142969C6CE1061D73BE975077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:05:af:6d:26:55:13:65:9b:0d:b5:22:aa:
                    b9:65:ab:f1:a5:13:77:d2:ff:d6:9e:c4:27:98:20:
                    7e:49:fb:d3:49:11:60:61:f3:be:27:88:a1:fd:4e:
                    0b:ba:f6:6a:b4:ab:e8:a0:77:8f:4b:6a:81:78:f4:
                    e3:8e:9f:92:e4:20:d0:46:dc:b5:23:86:87:fe:15:
                    67:2e:18:b3:de:3b:7c:c8:fb:28:98:e0:d5:2f:1c:
                    52:ce:40:3e:a3:9d:58:76:3b:5c:1f:55:2b:12:99:
                    59:88:57:f5:b3:6c:25:dd:43:81:3a:a1:af:3a:ef:
                    dc:76:24:91:dd:25:0e:a3:bc:f8:40:26:b5:de:5c:
                    ae:85:12:e7:13:77:d4:59:8f:e1:c7:ad:f6:b7:c4:
                    1e:5c:50:9f:8a:de:85:cc:90:b7:df:43:5c:f5:32:
                    cc:f4:ed:e6:96:9a:fa:a7:49:26:ac:c4:63:15:28:
                    b0:86:6d:8b:a6:cb:28:77:cb:89:86:3d:12:8c:d0:
                    04:cc:e7:89:7f:aa:44:ad:66:4a:84:9a:7f:14:91:
                    03:e7:cb:50:03:44:47:e7:af:03:22:30:60:b3:94:
                    13:21:1f:52:e4:bf:2c:4a:82:1a:7a:df:1f:a1:c7:
                    f3:29:36:85:ae:58:ec:a8:4a:44:e4:de:ce:56:48:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8C:86:9A:B8:76:C0:C1:42:96:9C:6C:E1:06:1D:73:BE:97:50:77
            X509v3 Authority Key Identifier:
                keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132372e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1b:06:40:12:ee:18:de:32:b7:48:6e:d3:81:ee:2f:4a:86:
         b4:db:18:68:0f:28:9e:3f:69:eb:5e:72:de:7a:76:55:af:83:
         05:a9:a0:07:22:2b:65:19:e5:3d:66:9b:bd:8b:79:7f:6f:e5:
         10:e4:fa:83:e5:d6:b7:d6:d6:09:0b:d2:d1:8e:b1:0c:a2:e1:
         ae:cb:99:90:89:67:c5:d6:3d:0e:3c:55:6a:54:46:82:15:72:
         16:6f:df:9b:6b:d7:71:e9:74:c8:14:07:e8:a7:40:4f:a2:08:
         5e:fe:3d:68:40:a9:3d:62:a2:36:81:20:cb:d0:bb:0a:14:0e:
         d2:76:df:78:30:30:2d:1f:34:77:36:6c:a5:99:89:fd:f3:7c:
         9a:f0:21:cc:3f:0f:59:7e:03:8d:9b:7e:cb:51:58:05:c4:45:
         dd:88:6b:44:16:ad:36:27:98:14:8c:12:a9:c5:79:ac:bc:7b:
         c8:85:6e:4f:c8:51:78:82:6a:16:d7:38:07:9a:e4:ef:de:2a:
         30:3e:20:97:54:6f:fd:3a:df:ac:be:3d:73:d2:fc:08:5b:11:
         46:57:29:72:48:20:b1:2d:c3:a9:2b:b5:62:9a:81:bd:a5:06:
         9f:58:82:cc:9f:ba:97:22:09:cc:96:97:e1:6b:7f:59:cc:34:
         ab:d0:98:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:47:50 2026 by rpki-client