Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203534383031.roa
File:                     3138302e3138382e33332e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier:          Fli5HuHOf+H0vhznwaYqzI5LEfjzvE0QiDktc6ph0Yw=
Subject key identifier:   94:A8:FA:85:5E:3D:3F:7F:95:13:B3:06:1A:5C:AF:6B:3F:4C:BF:B5
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       73A5E6B5DFF47794A818880D44C19F4E589C3D0B
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203534383031.roa
Signing time:             Fri 29 May 2026 08:15:18 +0000
ROA not before:           Fri 29 May 2026 08:10:18 +0000
ROA not after:            Fri 28 May 2027 08:15:18 +0000
asID:                     54801
IP address blocks:        180.188.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:e6:b5:df:f4:77:94:a8:18:88:0d:44:c1:9f:4e:58:9c:3d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:10:18 2026 GMT
            Not After : May 28 08:15:18 2027 GMT
        Subject: CN=94A8FA855E3D3F7F9513B3061A5CAF6B3F4CBFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:c3:f3:4b:6c:a9:25:6c:55:66:ef:06:97:
                    f4:ce:e7:85:4e:20:e0:2b:9a:88:d1:4a:e7:e3:ab:
                    a2:af:d9:09:cb:55:75:3b:62:97:85:15:43:c0:0c:
                    9a:cb:77:ef:57:2c:ec:ad:39:7d:d5:7f:f2:86:29:
                    01:91:f7:ad:75:9a:71:cc:8b:c1:57:95:b7:c0:b3:
                    5a:05:01:27:cb:f8:bc:8b:b6:e4:13:be:24:fc:fd:
                    1d:03:37:d7:76:10:2a:90:df:64:3e:70:d6:e0:20:
                    d9:e1:4a:06:07:6a:00:0f:50:8c:2a:e8:29:29:cd:
                    74:e1:66:c1:0e:e2:8e:a3:d9:12:62:5e:9a:c4:cc:
                    84:e6:36:f2:54:ef:ee:9f:f5:a1:28:39:b4:d0:75:
                    aa:9f:a0:85:98:29:e8:dd:ef:0b:e3:2c:5b:f8:fb:
                    14:14:45:af:e1:76:14:8b:af:51:de:b7:c3:c8:85:
                    3c:d2:15:b8:51:f8:a5:3b:80:68:8b:df:46:1d:dc:
                    6d:78:aa:e2:95:8d:7b:3a:90:c2:19:0d:01:a1:05:
                    8b:93:f8:90:c2:5e:a4:5a:ad:70:ba:33:08:ee:d5:
                    2e:5a:56:76:bb:cb:b7:45:87:94:a3:91:e5:60:0b:
                    81:51:05:ac:01:06:e6:98:97:4f:39:61:04:ef:38:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A8:FA:85:5E:3D:3F:7F:95:13:B3:06:1A:5C:AF:6B:3F:4C:BF:B5
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203534383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:cb:8c:1b:57:be:82:dd:09:4b:fe:f0:96:d5:26:86:19:
         e3:78:a5:39:45:d0:f4:c1:61:a2:0a:e9:c9:a7:50:4c:f7:af:
         4a:19:1c:ae:bc:df:cd:8e:07:8d:77:d3:ec:4f:53:a4:cd:24:
         95:db:0b:95:9b:f7:bb:80:ae:73:eb:a0:86:6f:f7:7e:ae:b1:
         07:54:90:7f:06:38:d5:0d:a0:da:92:42:4e:48:c8:5d:89:93:
         6d:e3:04:8f:10:28:2f:b4:0d:67:f0:d9:8c:65:b7:fe:11:69:
         e5:1f:04:2b:05:39:9c:6c:b7:0e:b2:c3:e0:b0:76:d8:a7:60:
         33:2a:d5:31:96:53:f8:66:80:6b:a5:76:4f:91:4d:9e:68:af:
         e7:da:7b:c7:ef:90:cb:76:3b:2a:90:92:56:d0:43:4d:6a:c7:
         4d:c8:df:6a:c0:43:20:be:8a:82:9a:4f:54:29:dc:5f:f5:d3:
         fc:57:61:47:73:4c:97:67:be:77:ef:9a:36:7b:d8:ef:bb:d5:
         cf:92:6a:50:76:d4:6b:1d:77:23:ce:17:15:96:f3:00:90:00:
         7d:0d:71:68:c3:44:f1:af:36:b5:10:1f:2a:d9:9d:2e:1c:e5:
         6b:c9:2f:50:8b:d9:23:ab:4b:4c:2b:6f:03:e6:db:05:c5:28:
         05:46:af:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:15 2026 by rpki-client