Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38322e302f32342d3234203d3e203534383031.roa
File:                     3135302e3234322e38322e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier:          MAvADTs+z2FLMmWvEctbjcmp/zTpRetZme8py5rds8k=
Subject key identifier:   50:7F:FC:EF:02:E3:B1:EF:EB:EE:6C:C4:ED:13:D8:80:33:3F:19:FD
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       1ABCA2A6740C5787A258BF7E1FB33C352AD7371B
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38322e302f32342d3234203d3e203534383031.roa
Signing time:             Fri 29 May 2026 08:20:27 +0000
ROA not before:           Fri 29 May 2026 08:15:27 +0000
ROA not after:            Fri 28 May 2027 08:20:27 +0000
asID:                     54801
IP address blocks:        150.242.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bc:a2:a6:74:0c:57:87:a2:58:bf:7e:1f:b3:3c:35:2a:d7:37:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:15:27 2026 GMT
            Not After : May 28 08:20:27 2027 GMT
        Subject: CN=507FFCEF02E3B1EFEBEE6CC4ED13D880333F19FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:75:aa:8f:0c:28:93:7e:01:ef:92:ef:8c:
                    61:dd:8d:9b:03:70:73:3a:2b:a5:9a:c4:14:f0:7b:
                    ff:2e:e2:67:be:66:14:a8:6d:07:d3:0c:6c:f3:ca:
                    27:46:a5:15:51:70:2b:de:ee:bf:3d:d0:17:b5:39:
                    5d:37:de:04:65:b8:03:c1:01:e9:62:55:11:86:a7:
                    93:fe:29:7f:7c:1d:14:32:c1:08:1b:14:74:e0:a4:
                    40:86:34:eb:6f:d4:20:a5:d6:54:d6:2f:1d:4c:19:
                    39:5e:9a:7f:f0:ea:34:a3:fc:4c:c0:be:a1:52:ec:
                    93:c7:bc:19:7d:3f:69:42:5e:64:fb:1b:92:84:45:
                    0b:6c:e3:2e:c1:fb:36:a6:33:71:fa:40:02:ee:b9:
                    4c:a9:9a:4a:e2:d1:ee:a5:a9:7c:a1:fd:85:2b:80:
                    f2:e6:b1:53:39:97:50:ea:3e:3d:7d:dc:79:3f:88:
                    4b:fa:15:cf:23:8a:7d:17:5c:52:77:c8:f9:69:c1:
                    3f:5a:1f:da:2b:46:6f:af:15:df:88:d7:d3:16:d9:
                    ca:2a:a1:e2:09:fb:fe:bc:09:ae:2c:29:1f:75:9d:
                    b5:4f:dd:2e:7c:a3:9e:a0:e7:f2:be:b1:2c:0a:03:
                    9c:57:f2:b5:b4:23:77:1b:29:d2:54:4a:10:43:f5:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7F:FC:EF:02:E3:B1:EF:EB:EE:6C:C4:ED:13:D8:80:33:3F:19:FD
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3135302e3234322e38322e302f32342d3234203d3e203534383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:c4:e0:26:8a:0f:4d:05:bf:07:b3:53:66:9d:00:ca:a4:
         9d:99:e6:bd:13:28:92:14:79:3a:1a:7e:a2:aa:e7:71:34:66:
         42:e1:b3:2e:d4:d4:65:f5:fe:21:57:2b:97:31:43:a9:43:13:
         af:3b:84:f6:43:06:f4:ab:d8:e2:14:dd:37:fa:c0:1d:9b:fc:
         a6:b7:b8:28:11:0b:65:72:78:69:ee:5c:8e:eb:bd:dd:4c:6c:
         00:c5:a3:2d:a7:f2:80:7e:4a:48:fa:25:4c:eb:3b:64:a3:52:
         dd:f2:79:4a:97:6d:38:51:14:7a:87:1d:76:71:2f:e5:a2:ac:
         aa:ee:3c:86:02:71:bd:96:1e:78:cf:cd:3d:c9:f7:57:94:67:
         af:0f:08:3e:c3:36:7c:ff:db:d1:cf:7b:41:fc:d6:8c:de:29:
         b3:b5:a2:8a:ba:78:9d:58:3e:53:ce:f2:1a:b5:10:a5:88:3c:
         56:3c:e2:95:4d:cc:8c:fc:50:aa:f8:79:4f:ec:4a:03:68:4b:
         9e:f4:52:58:63:d9:bd:3e:30:62:eb:9f:1b:85:5c:97:77:b9:
         e0:15:2f:50:99:fe:dc:3b:44:8d:e8:bc:da:4a:18:1b:c9:53:
         5f:79:2f:3c:05:62:20:c9:30:da:96:0b:f1:ce:24:97:13:d0:
         f2:c4:a0:da
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:13 2026 by rpki-client