Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203536303430.roa
File:                     3138302e3138382e33332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          cw0ywAqZMy8FxegpoL1RcvlMuZs4lETQrYE6lcg0Qiw=
Subject key identifier:   C9:A6:DD:2A:05:5E:75:4B:BD:52:DF:F5:34:D7:ED:20:0B:68:88:CF
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       2EB6CC7C88C9285E562BF37847301CD1B43A125C
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 08:15:17 +0000
ROA not before:           Fri 29 May 2026 08:10:17 +0000
ROA not after:            Fri 28 May 2027 08:15:17 +0000
asID:                     56040
IP address blocks:        180.188.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b6:cc:7c:88:c9:28:5e:56:2b:f3:78:47:30:1c:d1:b4:3a:12:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:10:17 2026 GMT
            Not After : May 28 08:15:17 2027 GMT
        Subject: CN=C9A6DD2A055E754BBD52DFF534D7ED200B6888CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:ed:17:ce:2a:f8:cd:19:53:74:61:48:11:
                    13:09:0f:78:a9:ae:ae:e4:0c:2f:b9:f9:38:79:5a:
                    ba:98:1a:9b:ae:a8:ba:93:25:ef:56:de:4e:c4:06:
                    9a:4d:c2:0e:e8:9a:db:6a:60:35:bb:da:02:97:27:
                    c9:0f:27:00:49:3b:d1:28:4a:31:4b:e4:81:c6:f1:
                    11:b2:82:c3:af:28:c3:90:81:a4:4e:b5:aa:28:f9:
                    49:73:46:98:b1:12:86:ae:f9:32:7c:ad:12:75:0b:
                    70:96:5e:f0:ca:5d:24:2a:6c:94:b5:ce:4b:9c:b0:
                    d1:2f:14:2e:da:67:13:47:d4:bd:5c:10:7e:ca:97:
                    24:2e:af:38:59:ec:97:38:73:95:42:d5:b2:7e:a7:
                    bc:dd:83:a1:ad:98:f2:0d:69:2c:93:d8:39:4e:09:
                    ac:b7:22:26:8b:d6:71:1a:b2:1a:d3:21:48:aa:4f:
                    54:ad:ec:b2:6e:28:fb:7f:ae:49:4b:c9:70:94:6e:
                    dd:42:39:aa:17:0e:14:72:09:83:09:8b:af:75:2d:
                    a3:40:ec:e3:95:cb:dc:9e:27:80:9f:4a:ea:fa:88:
                    7c:cd:d3:49:e9:d8:77:3c:12:ee:be:03:06:0e:2a:
                    1d:81:0f:cc:e1:1c:02:79:61:d5:7f:89:d1:61:38:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:DD:2A:05:5E:75:4B:BD:52:DF:F5:34:D7:ED:20:0B:68:88:CF
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33332e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:9f:c3:c0:77:d4:2d:3c:69:a0:b7:be:54:67:e0:55:23:
         da:7f:8e:79:a2:1c:b7:8f:33:45:11:4f:97:0e:23:c7:85:9a:
         8c:ab:36:fd:47:c5:94:99:1b:03:74:84:ed:ea:72:9c:04:74:
         6b:b0:85:09:18:32:88:4f:b3:68:3e:aa:70:c2:b7:aa:fe:6d:
         20:c7:82:1e:fe:94:dc:bf:25:41:15:05:c0:fe:76:9a:98:22:
         c0:86:c4:01:03:a5:80:f4:d1:41:99:1d:94:aa:40:f4:e3:8c:
         20:74:b8:9a:4e:d4:83:28:da:27:3d:b3:d7:fc:94:60:e8:4b:
         3b:a2:6b:2d:e4:58:09:73:95:62:d9:df:9b:57:44:b7:7c:11:
         78:7e:c3:c5:e9:38:a8:f1:03:fe:8f:07:fd:81:9f:19:3c:52:
         83:2b:04:5e:36:6a:0c:d0:bf:79:4d:f8:d9:e1:37:ba:a4:a5:
         89:20:8f:04:93:3f:33:c5:61:57:4f:ce:03:77:95:30:05:6d:
         b4:98:56:bb:04:4c:7b:1f:c3:3f:17:07:ea:61:ad:b2:2a:68:
         7e:3c:80:dd:e3:3c:2f:14:37:a3:95:85:14:42:0d:2c:48:23:
         8c:7f:f9:ce:91:8f:b0:fc:b1:ec:41:53:d2:a4:49:69:56:83:
         d8:e9:7f:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:47 2026 by rpki-client