Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33322e302f32342d3234203d3e203534383031.roa
File:                     3138302e3138382e33322e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier:          LC16oEtSsviLloeQaU9tR6p8G6d63cbJ8ijDtvw6oY4=
Subject key identifier:   3B:04:C6:23:32:D0:A9:09:55:08:06:3D:2E:B3:E9:02:38:95:5E:1F
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       30917FC67F1BB806EA81E08BFD3DDC244C467AEF
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33322e302f32342d3234203d3e203534383031.roa
Signing time:             Fri 29 May 2026 08:19:19 +0000
ROA not before:           Fri 29 May 2026 08:14:19 +0000
ROA not after:            Fri 28 May 2027 08:19:19 +0000
asID:                     54801
IP address blocks:        180.188.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:91:7f:c6:7f:1b:b8:06:ea:81:e0:8b:fd:3d:dc:24:4c:46:7a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:14:19 2026 GMT
            Not After : May 28 08:19:19 2027 GMT
        Subject: CN=3B04C62332D0A9095508063D2EB3E90238955E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:ae:8b:3e:9a:62:08:e1:0f:c8:f7:d6:86:
                    2d:18:89:19:60:ca:33:0b:7b:16:97:59:6c:eb:4b:
                    4d:93:b3:f6:05:ad:ee:9a:6c:0f:04:20:c9:5e:25:
                    bd:35:8e:94:1a:d0:04:69:b3:81:38:86:ba:3b:5b:
                    26:b3:dc:b0:fa:44:98:06:2e:e6:41:32:a7:05:b7:
                    69:62:56:ea:46:f6:d4:08:0f:4e:b8:c9:2e:47:65:
                    8d:28:e3:6b:47:be:e5:be:21:a3:dd:09:9a:c3:37:
                    ec:6e:64:dc:3a:43:4a:41:38:ac:7c:48:51:bc:a5:
                    b9:2f:8a:cb:50:bb:2d:7b:43:aa:29:b0:23:6a:99:
                    aa:b1:ad:9a:8f:1c:fd:fa:19:5d:0f:d8:3d:d9:06:
                    89:a7:4e:aa:a3:07:bc:0e:5d:c2:7d:7f:dd:c6:83:
                    06:97:61:7a:52:e4:0a:a8:f9:63:ae:5c:97:26:c4:
                    cb:af:19:7f:4a:55:fe:13:40:bd:d1:23:c5:23:6d:
                    e3:33:2d:cb:22:14:2f:6e:9b:f2:84:9d:3d:23:97:
                    82:2f:8e:9c:0e:35:4c:fa:e2:12:50:ef:a1:47:9d:
                    63:e1:ef:58:af:b5:24:a4:46:d0:90:14:87:22:e7:
                    13:e6:78:e5:84:ca:a6:cd:fb:97:2a:67:97:c0:f4:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:04:C6:23:32:D0:A9:09:55:08:06:3D:2E:B3:E9:02:38:95:5E:1F
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33322e302f32342d3234203d3e203534383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:29:f7:41:07:aa:5d:63:16:60:b9:a5:20:12:15:91:43:98:
         7f:eb:3e:46:48:26:3f:58:c9:99:b3:9a:19:dc:b5:74:12:8a:
         f3:9f:6e:c6:1e:4a:04:e3:b9:22:5f:b6:c2:75:79:ef:7d:64:
         c8:b1:ba:ce:42:3c:8d:e0:0c:f1:23:fa:c7:44:54:fc:0a:91:
         40:4c:85:63:f6:ca:e3:12:69:d2:6b:83:b5:29:01:11:b2:4e:
         3e:36:08:8c:fe:72:00:56:6c:f6:82:71:24:89:a6:12:48:c5:
         2d:da:e6:4c:7a:64:07:db:28:91:50:80:83:f3:2c:94:31:c8:
         e6:ff:27:67:3e:a1:af:90:fc:70:15:24:90:80:c4:8c:e6:31:
         ca:20:e1:2a:2c:6b:57:57:cd:2e:57:c0:1c:ff:7d:48:3a:a7:
         d6:28:36:a9:76:50:81:45:9b:3d:bb:b1:c3:be:21:03:9a:3f:
         ce:a7:ce:20:91:ce:c8:e8:60:1d:78:26:48:1c:53:c5:36:36:
         cc:d0:4f:d1:b8:0e:df:70:89:92:da:74:38:36:05:22:f0:d9:
         db:1f:66:08:b1:aa:0c:db:5d:4a:e4:7d:c4:28:c1:00:f7:aa:
         72:57:42:42:e2:28:b5:a9:46:76:3f:ef:ab:63:db:d8:3c:c6:
         75:58:66:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:42 2026 by rpki-client