Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33352e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e33352e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          qCo0TB6DgJxhL9AMtdQKB9bHGeXikjO/UU3TeVl1AQ4=
Subject key identifier:   E3:F6:14:C2:2A:96:BF:84:F0:10:F5:7B:AB:FC:02:9B:90:26:0E:49
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       6300787CFD5656E05F0E95F8170F0A6CF13DF405
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33352e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 08:15:17 +0000
ROA not before:           Fri 29 May 2026 08:10:17 +0000
ROA not after:            Fri 28 May 2027 08:15:17 +0000
asID:                     4837
IP address blocks:        180.188.35.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:00:78:7c:fd:56:56:e0:5f:0e:95:f8:17:0f:0a:6c:f1:3d:f4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:10:17 2026 GMT
            Not After : May 28 08:15:17 2027 GMT
        Subject: CN=E3F614C22A96BF84F010F57BABFC029B90260E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:04:bd:41:d2:5c:33:75:03:14:2c:f9:db:
                    d4:10:c6:32:8b:7f:d6:c6:e7:de:77:a6:33:d0:73:
                    1a:ef:fd:40:ca:a5:19:aa:16:27:46:8f:6c:3f:cd:
                    84:85:fa:32:54:d6:fb:17:10:8f:d4:d3:01:24:9f:
                    33:57:2f:82:6e:5d:8e:3d:6b:3c:74:ab:cb:e1:89:
                    1b:a3:5c:3b:b2:1c:45:d2:24:71:60:9d:fd:f1:15:
                    62:d4:3e:3e:33:75:61:65:2b:f3:2d:c5:9f:72:8c:
                    11:5b:97:50:fa:d7:46:e7:15:9d:01:e8:ec:21:85:
                    3f:73:10:d4:87:0f:d1:dc:01:f0:05:39:4d:2c:3c:
                    05:08:fa:7d:89:8d:85:00:aa:7a:a3:f8:6b:d5:de:
                    ef:39:30:64:4d:78:53:e7:bd:41:61:ee:a2:6d:66:
                    2a:3e:1d:6b:94:5e:f3:1e:4c:1a:cb:32:21:ec:d3:
                    88:b2:64:34:ef:eb:29:d7:45:99:b9:ea:71:4a:71:
                    42:c2:b1:52:ea:10:93:93:40:4f:a7:2b:bb:b1:95:
                    1a:d8:aa:10:b1:03:8a:d9:7c:7f:0f:b5:68:df:93:
                    51:bd:f6:af:3d:ce:21:5a:33:7c:fe:c7:13:e1:75:
                    0c:30:10:dc:0e:aa:12:4c:75:ed:20:25:cd:f3:52:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F6:14:C2:2A:96:BF:84:F0:10:F5:7B:AB:FC:02:9B:90:26:0E:49
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33352e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:0c:d2:24:83:8b:1a:eb:cf:52:be:1d:21:97:cb:b0:e2:66:
         95:eb:70:d3:1d:0c:4b:f1:9b:49:08:2a:ef:5a:e2:cf:f4:c3:
         aa:a0:c3:7f:4c:ee:64:4d:c8:ed:c1:76:a7:d1:f6:a6:ec:33:
         a5:15:b1:5d:fe:31:95:95:9a:aa:04:42:8d:ca:52:a8:ac:da:
         dd:d7:e2:df:d1:9b:48:28:98:67:3b:c7:2d:05:91:24:a3:67:
         33:97:46:c6:c5:9e:a1:43:8a:70:99:3f:d7:04:c6:87:bf:08:
         88:43:36:56:c8:cf:e8:eb:98:67:f5:cb:d5:6d:d3:20:64:cf:
         15:d6:80:fe:9b:b0:36:03:22:35:ba:28:3b:29:79:16:70:4d:
         01:1e:31:de:12:1c:96:d9:0e:b7:f1:3e:8d:1f:22:6f:12:0d:
         10:42:0a:47:af:19:53:c0:6f:7c:6a:5d:df:b0:37:de:86:36:
         a7:f4:ac:b1:77:8c:9a:e4:76:73:87:5a:7a:0f:47:da:20:5f:
         ed:d7:3b:03:b1:9d:be:76:c1:a5:45:40:67:d1:b2:af:60:0d:
         d2:b1:23:d9:8a:5c:92:d3:7a:6a:2e:82:30:a5:03:bd:a0:18:
         4b:d5:41:dc:39:89:bb:2b:f1:b0:22:98:67:1c:ed:65:77:68:
         a7:1b:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:04 2026 by rpki-client