Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32322d3232203d3e20313333373735.roa
File:                     3135302e3234322e38302e302f32322d3232203d3e20313333373735.roa (raw, json)
Hash identifier:          1vA1iXrEgM74JyPuAPKBDMpWsdcmRmI0C7b2gx8P2qI=
Subject key identifier:   0C:60:CD:3C:2E:DE:D7:96:64:71:14:27:9A:E4:A9:5A:9A:DC:4F:D8
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       7E494E1B3BB98030CE7620C8EC67B5A04569164C
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32322d3232203d3e20313333373735.roa
Signing time:             Fri 29 May 2026 08:11:58 +0000
ROA not before:           Fri 29 May 2026 08:06:58 +0000
ROA not after:            Fri 28 May 2027 08:11:58 +0000
asID:                     133775
IP address blocks:        150.242.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:49:4e:1b:3b:b9:80:30:ce:76:20:c8:ec:67:b5:a0:45:69:16:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:06:58 2026 GMT
            Not After : May 28 08:11:58 2027 GMT
        Subject: CN=0C60CD3C2EDED796647114279AE4A95A9ADC4FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:3b:90:d4:36:6e:f6:31:40:98:c5:7d:69:
                    42:b6:c6:80:03:52:dc:ce:aa:54:7b:96:73:63:6d:
                    a3:f4:61:42:0b:1a:cc:5c:ec:d9:35:ac:c7:e2:33:
                    08:fc:1f:57:2b:5b:0b:1e:88:1b:64:a8:02:eb:1b:
                    75:a3:1b:c3:4a:ae:a3:2c:3c:57:40:7d:80:19:63:
                    8b:f9:af:ee:53:0f:b5:5e:06:fb:a2:a6:ee:62:39:
                    29:2b:31:23:c5:4f:90:d2:d9:20:69:b2:9a:86:b8:
                    c8:e2:a0:8e:28:73:54:40:42:77:f7:23:30:6f:61:
                    6f:24:ff:75:20:68:69:5f:40:a2:e0:a6:dd:e9:1e:
                    b7:6c:9a:ee:0e:bf:c8:91:15:71:bc:05:ba:d6:30:
                    30:54:5c:ca:a0:13:11:1c:4f:f1:aa:50:d8:fe:4e:
                    18:95:51:14:70:2e:0b:28:97:6e:be:8c:e0:62:17:
                    ce:ec:dc:32:4f:a0:03:99:6c:03:9b:73:d2:06:18:
                    04:b3:09:6a:7d:5f:a2:53:6a:f6:38:ea:2d:18:78:
                    99:dd:e0:91:a7:79:4a:89:54:c5:42:e1:1f:4a:23:
                    06:69:4a:0f:e0:22:8a:0b:ca:05:f6:cf:45:06:86:
                    a7:d9:e6:d5:06:ee:99:66:00:01:61:bd:72:d3:8f:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:CD:3C:2E:DE:D7:96:64:71:14:27:9A:E4:A9:5A:9A:DC:4F:D8
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32322d3232203d3e20313333373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:a7:5f:e7:a2:ca:e7:81:51:cf:89:b0:3e:19:7b:70:52:
         de:b4:62:c0:9c:19:06:00:9a:c2:86:1d:06:70:39:70:5f:5b:
         2e:ac:52:ee:93:8a:b2:0a:8c:47:df:a0:51:d2:2d:0a:70:fd:
         60:b0:3f:49:6d:df:ad:31:85:69:10:fd:15:77:48:7e:cb:b3:
         b0:19:8e:32:72:7c:bf:82:7c:d4:64:6a:bd:a8:e6:8e:cc:28:
         b6:2a:0b:a3:88:06:b8:15:e4:6d:5a:da:24:96:cf:09:d3:d1:
         3e:c8:96:ec:b0:60:e7:51:85:8c:2d:dc:92:86:6d:ff:20:55:
         96:75:63:f9:90:2c:54:29:f9:c4:40:d4:3e:bb:ad:47:03:94:
         02:b0:01:41:a1:3a:24:7e:dc:01:12:16:ca:0b:71:c9:9a:63:
         a3:f9:7a:f2:07:fc:85:24:8b:ad:21:a5:6f:55:ca:8a:62:86:
         8f:3a:a9:93:76:18:1d:9a:c1:75:59:33:6c:f3:a7:19:52:7f:
         88:45:42:fd:dc:53:99:b1:91:05:2e:cc:f6:ef:74:03:64:3d:
         5f:d4:45:69:1e:2a:74:84:38:c8:06:fd:6d:c2:4b:6a:e7:2d:
         37:08:d1:14:ae:62:d5:50:4c:a6:7a:87:e7:18:d0:36:cc:20:
         a2:eb:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:09 2026 by rpki-client