Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e33372e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          iV5DDteKSfppvWKmEJwY2y9WotVzA1b+alwhrO68+9Q=
Subject key identifier:   6A:3C:F0:8B:BB:6B:15:26:1A:E5:96:CC:7F:79:4C:9C:47:A2:43:33
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       34E75B2CDD9385A0A08F5C8FD1C6F26914A2E42D
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 06:00:25 +0000
ROA not before:           Fri 29 May 2026 05:55:25 +0000
ROA not after:            Fri 28 May 2027 06:00:25 +0000
asID:                     4837
IP address blocks:        180.188.37.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e7:5b:2c:dd:93:85:a0:a0:8f:5c:8f:d1:c6:f2:69:14:a2:e4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:55:25 2026 GMT
            Not After : May 28 06:00:25 2027 GMT
        Subject: CN=6A3CF08BBB6B15261AE596CC7F794C9C47A24333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:94:ef:d3:76:a8:1d:8d:46:9f:b1:ff:32:
                    77:be:18:7d:54:bd:ca:80:41:b5:ed:f5:eb:ba:bc:
                    a5:17:4e:94:d8:9c:20:c7:86:2a:b9:3f:a3:7f:65:
                    08:33:25:f3:f1:7f:d1:1a:c1:a8:d9:42:56:8d:11:
                    f9:53:6d:14:39:94:5e:a4:ab:76:c9:09:96:bd:5a:
                    58:9e:25:b4:c2:b9:1f:e6:d6:86:ab:90:85:54:b2:
                    88:61:7c:38:9d:27:7e:20:22:79:ea:af:8d:4f:99:
                    84:b1:92:57:5f:df:fe:f6:b6:1e:3d:f5:21:78:e2:
                    45:7e:9d:ca:ef:73:f7:39:d9:fb:94:b2:d6:b7:61:
                    2b:a2:1a:c8:5f:d4:cc:43:25:42:89:bc:99:71:7d:
                    9e:46:d5:49:bf:39:09:fa:ff:0b:0b:a1:17:25:3d:
                    53:5e:b7:0c:ce:b8:ad:92:df:08:a6:63:14:0d:fb:
                    2a:29:1b:73:87:fb:0c:c0:36:f8:10:8d:59:30:33:
                    b7:be:31:82:c2:d2:9c:fb:bf:a5:7b:31:e3:ea:5d:
                    3d:ae:78:2b:13:8b:f3:ed:c5:56:56:b9:2b:3b:98:
                    1e:ec:35:22:99:2b:f5:a1:24:41:4c:16:62:b7:9d:
                    49:b6:79:c6:18:56:4c:97:e4:6d:24:c9:6a:85:44:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3C:F0:8B:BB:6B:15:26:1A:E5:96:CC:7F:79:4C:9C:47:A2:43:33
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33372e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:34:b6:bd:e7:be:17:35:42:17:17:d6:f6:bd:97:13:60:
         1c:ce:ab:52:20:65:77:d2:c6:28:90:42:c4:a1:76:27:73:41:
         08:62:65:1e:e2:f0:c2:f9:19:2f:18:04:39:d7:51:37:0e:2e:
         71:5c:d3:66:95:c0:0c:c3:58:d6:b9:00:9a:48:a9:9e:65:e1:
         12:33:09:60:75:67:7a:26:f7:e3:50:ac:1d:42:0c:86:78:27:
         59:92:03:da:40:c6:1c:17:a7:d3:7e:28:20:3e:ae:b4:a8:2f:
         d1:7c:b7:68:75:d2:bf:c9:db:8b:aa:c3:5e:90:ac:a9:91:fd:
         e4:d4:86:96:89:41:7b:93:d2:65:63:72:f1:65:52:dd:5a:38:
         29:1a:db:2b:7d:ca:15:fd:9d:c9:8c:f8:08:e9:f1:fa:e4:7c:
         b9:82:2e:cc:c4:20:94:c6:df:6a:be:66:d1:63:e5:5d:9b:78:
         b5:e4:43:9e:40:eb:24:a2:88:b1:4c:1e:65:95:f7:72:29:c9:
         33:7d:5b:fd:c4:02:0b:21:14:f8:1b:9b:14:fc:69:eb:c1:78:
         68:11:51:5e:25:4e:77:4f:4d:1e:5f:ba:19:00:af:10:94:c8:
         f2:f0:ff:07:cd:c0:b6:a3:e7:f2:23:30:59:d6:5f:99:a0:01:
         1d:33:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:52:41 2026 by rpki-client