Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32342d3234203d3e203534383031.roa
File:                     3135302e3234322e38302e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier:          j9Q0BieLEvL5KzRa0auSfxbui5fnHyM6xvquA/OrlTc=
Subject key identifier:   6B:86:BE:1A:A2:B0:B1:3D:EF:24:2A:B8:A4:2E:27:51:83:38:B7:B3
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       1F3027B8BFE5F495C0894A68E207CDADCC53C368
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32342d3234203d3e203534383031.roa
Signing time:             Fri 29 May 2026 08:20:27 +0000
ROA not before:           Fri 29 May 2026 08:15:27 +0000
ROA not after:            Fri 28 May 2027 08:20:27 +0000
asID:                     54801
IP address blocks:        150.242.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:30:27:b8:bf:e5:f4:95:c0:89:4a:68:e2:07:cd:ad:cc:53:c3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:15:27 2026 GMT
            Not After : May 28 08:20:27 2027 GMT
        Subject: CN=6B86BE1AA2B0B13DEF242AB8A42E27518338B7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:97:3b:c7:0d:23:38:3d:4f:66:c1:b2:4b:97:
                    a3:88:ed:05:4b:88:12:31:74:89:3a:75:62:56:d5:
                    e8:bb:ff:a8:35:fa:10:9e:b4:69:d4:6a:14:26:d4:
                    99:11:3c:bb:cd:a4:be:2d:5b:fc:32:71:f8:f6:dd:
                    bd:87:48:cd:3e:a1:e4:39:0c:1a:30:37:5c:d5:b1:
                    77:f9:6a:52:ba:ec:01:7b:b3:eb:13:ed:7e:c8:cd:
                    00:55:a0:29:4d:c5:98:df:9e:87:0b:55:7d:9d:8a:
                    59:ff:41:20:d1:55:35:14:c6:d7:0f:08:2e:82:7a:
                    7c:97:fe:9d:d3:ce:70:c9:e8:7c:64:49:1b:7a:08:
                    6c:0a:68:10:c2:be:ae:91:d8:a0:b5:85:54:e5:e2:
                    1f:91:0b:25:c0:68:97:b8:13:60:44:17:b1:30:6e:
                    d0:6c:a6:f9:7a:72:df:ca:4e:1c:22:8e:b1:66:3c:
                    66:4d:7e:6c:57:de:0b:d9:2d:b2:6d:11:22:cf:ec:
                    f9:91:8e:bc:f4:2c:ec:6f:64:5f:62:b5:80:88:8f:
                    ce:ce:47:da:d3:41:22:6d:b9:68:76:e5:e7:e5:c8:
                    84:84:41:0f:da:69:48:91:c6:80:15:c0:97:c9:95:
                    49:81:00:cd:b9:19:e5:a1:61:ee:f6:65:30:67:5f:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:86:BE:1A:A2:B0:B1:3D:EF:24:2A:B8:A4:2E:27:51:83:38:B7:B3
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38302e302f32342d3234203d3e203534383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:5e:5d:4e:5c:e3:e2:70:2b:8e:68:61:6e:3e:2b:c3:7d:
         05:0e:ce:73:a2:ae:ea:49:73:d0:9b:c9:63:60:0e:a4:ee:bb:
         c3:8e:c7:3a:13:43:ad:37:72:be:4a:de:8e:50:30:52:aa:60:
         fc:54:3d:80:6d:f3:80:67:8e:27:b0:98:ea:65:82:79:78:d4:
         4d:42:98:c0:7d:87:4e:28:98:e6:af:43:e5:9d:f9:34:69:4e:
         f2:35:cb:15:2d:d9:d3:83:8e:48:67:c3:88:5f:8e:d1:11:a1:
         c9:60:0c:83:11:b9:9b:6e:e5:2e:11:f3:05:9b:02:e2:67:a5:
         20:f7:f0:18:1e:95:ba:e5:a5:af:27:26:fb:5a:0f:3d:74:cf:
         f1:5e:e3:c7:13:0d:01:27:9c:8a:e7:71:c1:a9:83:b5:5d:51:
         86:43:e2:25:0d:f0:24:42:45:0f:14:28:d6:71:7e:d4:b3:65:
         b6:ac:e7:ac:72:a0:13:99:9e:5a:51:91:7c:89:fe:7f:f1:bb:
         7e:e9:3f:0f:90:32:2b:0b:f6:80:d6:8b:72:12:89:7d:e3:77:
         d5:07:1a:27:f8:9f:a3:5c:f9:ce:40:80:0b:4e:d7:db:10:30:
         f2:72:93:68:09:9e:db:6c:79:81:62:fa:cb:49:19:45:e1:24:
         ea:16:98:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:10 2026 by rpki-client