Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132372e302f32342d3234203d3e2039383038.roa
File:                     3138322e35302e3132372e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          T2LPE+mMNQnY91krfKQwM5l69iKUjx7grevMp0Ezwn4=
Subject key identifier:   3B:DC:7D:3A:14:63:E0:8A:2A:24:21:50:0B:69:D2:F5:A3:77:4A:69
Certificate issuer:       /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial:       52EB0A29E9F4333B55645BDC7C2CD13CE52C2FD0
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132372e302f32342d3234203d3e2039383038.roa
Signing time:             Mon 13 Apr 2026 06:59:36 +0000
ROA not before:           Mon 13 Apr 2026 06:54:36 +0000
ROA not after:            Mon 12 Apr 2027 06:59:36 +0000
asID:                     9808
IP address blocks:        182.50.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:eb:0a:29:e9:f4:33:3b:55:64:5b:dc:7c:2c:d1:3c:e5:2c:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
        Validity
            Not Before: Apr 13 06:54:36 2026 GMT
            Not After : Apr 12 06:59:36 2027 GMT
        Subject: CN=3BDC7D3A1463E08A2A2421500B69D2F5A3774A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:c1:2c:b3:9e:85:29:30:56:62:93:3b:31:
                    e3:15:2b:ed:f4:2e:43:2a:3c:20:54:7d:59:c6:65:
                    9e:ba:71:aa:b1:f4:83:9f:76:3e:cd:5d:75:4a:66:
                    13:d3:38:de:58:8c:b5:96:48:94:f1:c4:29:e7:a6:
                    e3:a1:27:0a:2d:20:27:9f:fe:55:35:e9:06:f5:d7:
                    0f:ce:4d:34:94:07:f6:09:94:b8:71:6f:15:1b:5b:
                    6d:85:4c:81:bc:1e:bd:0e:b5:d9:f1:81:1a:de:22:
                    89:e0:94:58:ee:7e:23:7c:ab:74:8d:6a:b4:59:92:
                    2c:be:54:ff:e3:20:47:c6:1c:95:6f:97:3f:c8:6a:
                    b4:3f:8d:9d:ff:af:d0:3b:0a:ed:34:ff:b9:0c:eb:
                    97:ea:50:4f:ac:5d:00:8b:64:84:3d:44:43:47:fd:
                    1a:db:72:4f:4b:8d:4e:02:bb:71:e8:85:f1:f0:ab:
                    ea:63:0c:42:72:31:88:11:4d:da:ca:4a:38:21:8c:
                    47:fb:07:43:ad:32:c2:65:3f:d0:a6:3d:fc:9f:65:
                    2e:5d:19:bc:ca:4d:85:13:35:d6:91:f6:87:16:d8:
                    23:e3:b1:25:f1:6e:66:67:35:24:bc:0d:29:bb:86:
                    10:42:36:94:d6:c5:10:1b:a1:7d:66:19:6d:75:86:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DC:7D:3A:14:63:E0:8A:2A:24:21:50:0B:69:D2:F5:A3:77:4A:69
            X509v3 Authority Key Identifier:
                keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132372e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:1e:b7:c7:ea:eb:b3:52:c5:b4:f1:74:cd:90:24:3c:61:
         c8:2a:0f:de:ae:c9:7c:ad:72:31:87:07:a6:60:a3:cb:2d:f4:
         cc:c1:12:85:1f:a2:9f:1a:c5:b7:aa:23:e7:d6:35:eb:76:23:
         b2:d3:a2:27:9c:62:32:58:06:6d:79:03:78:e1:70:fc:43:2e:
         12:05:fc:c4:55:46:bd:c1:14:96:7e:f2:6f:b9:1e:9a:9e:61:
         c1:ec:8c:cf:40:5f:e5:fc:dd:de:2d:75:3a:54:99:c3:d9:b1:
         44:a4:af:39:03:31:c0:fd:3c:cd:2d:36:07:cf:94:8b:ec:8e:
         9e:3e:ac:a8:44:70:a4:33:e2:76:fb:86:13:84:66:c7:7d:13:
         3d:00:b2:1a:0c:a2:05:15:11:a0:9f:fa:fc:fd:7d:51:e9:63:
         8b:46:96:ad:32:f5:5c:0d:56:bb:0c:0c:01:90:d8:98:d2:78:
         1c:8f:7e:28:b1:67:5d:54:1d:bd:15:aa:7b:4b:7d:bd:1b:ea:
         69:8c:e9:e1:56:6a:dc:be:06:c1:d3:2a:4a:c4:55:9f:9a:49:
         9f:e6:01:80:ac:61:b1:e4:b2:ce:93:bf:3c:85:ba:f6:8a:99:
         e7:f4:dd:2b:32:3e:96:2a:03:2d:05:ef:6d:4a:98:44:99:f1:
         bb:3f:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:38 2026 by rpki-client