Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3234203d3e203536303430.roa
File:                     3138302e3138382e33372e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          knUYBqZm3sH4hvAyKiaOjr4ffhi7DKH9NhBHGugbS84=
Subject key identifier:   42:E7:B6:0F:7B:A0:0D:47:EC:11:03:4C:7A:49:F9:BD:A1:DD:E3:65
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       6AF9916DF14DD120F7D94F4D82F946F99FF26F3C
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 06:00:25 +0000
ROA not before:           Fri 29 May 2026 05:55:25 +0000
ROA not after:            Fri 28 May 2027 06:00:25 +0000
asID:                     56040
IP address blocks:        180.188.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f9:91:6d:f1:4d:d1:20:f7:d9:4f:4d:82:f9:46:f9:9f:f2:6f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:55:25 2026 GMT
            Not After : May 28 06:00:25 2027 GMT
        Subject: CN=42E7B60F7BA00D47EC11034C7A49F9BDA1DDE365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ad:67:e1:39:19:ce:0f:b1:8e:b4:c4:5f:04:
                    68:66:82:2d:28:36:a7:17:03:9b:46:e6:cd:6d:80:
                    8d:a0:d5:87:e9:03:3a:60:09:03:95:fe:21:c1:a9:
                    30:21:03:82:14:60:fc:f9:e9:45:3a:7b:ec:7a:0a:
                    fa:22:4c:3d:0f:79:d6:ba:00:12:e7:4e:0f:48:27:
                    ff:68:f7:50:66:77:d9:c2:e5:a0:af:77:fa:dd:41:
                    1c:2c:bf:30:db:1a:ab:bc:34:28:40:43:f3:e8:06:
                    b9:7b:f5:71:f7:97:df:74:90:df:ab:82:8a:f1:8f:
                    fc:b5:7a:ff:6c:27:c7:cf:03:68:20:b8:3a:9f:f3:
                    d4:c9:69:45:8a:e3:05:f2:b9:0b:cb:46:05:da:22:
                    b9:b3:1d:b6:45:e2:b6:b0:2a:33:c0:42:e9:56:13:
                    61:15:96:14:36:0d:a1:0c:e7:c8:83:31:db:a4:12:
                    dd:9e:a1:99:ae:dd:a7:8e:b9:4a:96:7a:8d:c1:2b:
                    f1:9d:b3:f9:b6:75:50:91:6d:36:83:d7:5e:a3:56:
                    cc:06:4f:69:3d:01:53:a1:65:79:45:8c:e7:ed:bc:
                    34:b0:5e:66:7e:15:c1:dd:7f:87:fb:a3:f1:c5:d5:
                    56:97:39:c8:bb:1e:56:43:65:5e:fe:e2:e0:16:2a:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E7:B6:0F:7B:A0:0D:47:EC:11:03:4C:7A:49:F9:BD:A1:DD:E3:65
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:9d:3a:d2:ad:3f:89:6b:f6:f9:fb:40:c0:9a:80:8b:d1:e5:
         ec:f7:be:84:be:26:71:1c:98:a8:72:22:51:94:2d:da:e9:7a:
         b2:88:53:b6:8a:77:2c:60:e5:3b:66:a8:18:16:30:c6:bd:6f:
         ce:59:b0:84:0d:a7:5c:5f:a9:18:02:36:fc:49:5c:c0:4c:a9:
         38:9d:82:9d:38:9b:c9:05:fd:bf:d1:e7:f0:22:72:76:91:25:
         04:c9:fd:64:3b:51:f8:20:71:11:17:93:ef:95:05:2a:2d:f8:
         b1:fb:8b:6e:7b:f7:66:96:68:4d:17:9a:b5:fd:16:b8:15:1c:
         37:36:7b:07:4b:ce:a0:8f:53:ca:3c:d3:0d:a5:d2:71:6e:a4:
         9e:4b:64:fe:ca:e4:14:79:be:d0:70:64:b1:19:d0:38:18:ed:
         66:be:5b:f5:9f:56:29:a5:a0:d4:68:e5:cb:ee:7d:ee:f1:52:
         1d:d4:80:da:30:e6:ea:90:ce:fa:9f:99:dc:55:a8:8f:7e:73:
         bb:84:d9:4a:4a:97:54:77:4b:79:bf:f8:c0:4e:8b:1e:2f:2f:
         92:06:38:14:78:bd:30:29:cb:a7:61:b9:6c:56:df:32:7c:f6:
         ad:c3:6e:58:f9:bc:15:0f:60:e1:97:5c:52:9a:b9:78:53:12:
         6c:41:90:6b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUavmRbfFN0SD32U9NgvlG+Z/ybzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjkwNTU1MjVaFw0yNzA1MjgwNjAwMjVaMDMxMTAvBgNV
BAMTKDQyRTdCNjBGN0JBMDBENDdFQzExMDM0QzdBNDlGOUJEQTFEREUzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrWfhORnOD7GOtMRfBGhmgi0o
NqcXA5tG5s1tgI2g1YfpAzpgCQOV/iHBqTAhA4IUYPz56UU6e+x6CvoiTD0Peda6
ABLnTg9IJ/9o91Bmd9nC5aCvd/rdQRwsvzDbGqu8NChAQ/PoBrl79XH3l990kN+r
gorxj/y1ev9sJ8fPA2gguDqf89TJaUWK4wXyuQvLRgXaIrmzHbZF4rawKjPAQulW
E2EVlhQ2DaEM58iDMdukEt2eoZmu3aeOuUqWeo3BK/Gds/m2dVCRbTaD116jVswG
T2k9AVOhZXlFjOftvDSwXmZ+FcHdf4f7o/HF1VaXOci7HlZDZV7+4uAWKtzDAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUQue2D3ugDUfsEQNMekn5vaHd42UwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3NDI1MjE5NDEwMzI5Ny8wLzMxMzgzMDJlMzEz
ODM4MmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALS8JTANBgkqhkiG9w0BAQsFAAOCAQEAYp060q0/iWv2+ftAwJqAi9Hl
7Pe+hL4mcRyYqHIiUZQt2ul6sohTtop3LGDlO2aoGBYwxr1vzlmwhA2nXF+pGAI2
/ElcwEypOJ2CnTibyQX9v9Hn8CJydpElBMn9ZDtR+CBxEReT75UFKi34sfuLbnv3
ZpZoTReatf0WuBUcNzZ7B0vOoI9TyjzTDaXScW6knktk/srkFHm+0HBksRnQOBjt
Zr5b9Z9WKaWg1Gjly+597vFSHdSA2jDm6pDO+p+Z3FWoj35zu4TZSkqXVHdLeb/4
wE6LHi8vkgY4FHi9MCnLp2G5bFbfMnz2rcNuWPm8FQ9g4ZdcUpq5eFMSbEGQaw==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:46 2026 by rpki-client