Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e33392e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          SOwO9rB7mGUDe11y4baBOk+QeBowGE9TgS6DFdz7NZk=
Subject key identifier:   12:B7:FA:6B:36:96:90:89:0E:EB:76:2C:01:C5:73:52:97:95:91:C1
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       10152C7B342D85BB3F3A0187D90BFE0F23CF36A5
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 06:00:25 +0000
ROA not before:           Fri 29 May 2026 05:55:25 +0000
ROA not after:            Fri 28 May 2027 06:00:25 +0000
asID:                     4837
IP address blocks:        180.188.39.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:15:2c:7b:34:2d:85:bb:3f:3a:01:87:d9:0b:fe:0f:23:cf:36:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:55:25 2026 GMT
            Not After : May 28 06:00:25 2027 GMT
        Subject: CN=12B7FA6B369690890EEB762C01C57352979591C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:cc:72:63:15:91:7f:20:a7:04:cf:82:90:
                    15:66:06:0f:92:5f:d3:e5:cb:39:11:d0:11:0d:10:
                    2a:92:72:f6:9a:39:4c:78:65:21:25:22:42:9f:2d:
                    b0:27:d2:dd:95:19:22:3b:5b:79:f4:09:64:67:44:
                    4b:88:df:30:04:56:10:31:aa:dd:b7:e7:df:c1:6d:
                    55:19:31:79:75:2b:be:0e:df:20:6b:9d:55:18:5e:
                    97:06:0a:e8:47:13:ee:99:5b:54:bb:16:e2:80:c0:
                    b6:60:c4:4b:89:e4:b2:c1:82:93:d0:1c:cd:c5:64:
                    87:a8:ec:00:b7:13:a3:7a:db:51:32:66:d8:63:11:
                    81:93:93:d5:ee:c4:cc:63:03:07:19:6f:7d:37:9f:
                    a8:d6:20:45:dc:f2:04:f5:24:0b:77:83:11:fb:92:
                    61:c2:d7:78:71:0c:ad:66:7b:df:ff:78:12:e2:66:
                    7a:09:b9:69:0d:62:3c:c2:52:23:59:d9:3e:0a:2c:
                    bf:11:26:00:cd:2e:57:96:0f:49:de:b4:16:fa:89:
                    70:11:d8:c6:0e:53:44:c3:76:30:35:7b:db:0e:2e:
                    95:db:ca:9f:15:1c:3f:04:45:a8:b3:66:f4:46:b9:
                    00:69:ae:de:99:c0:d3:a0:bf:bd:16:0d:00:83:cb:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B7:FA:6B:36:96:90:89:0E:EB:76:2C:01:C5:73:52:97:95:91:C1
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e33392e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:2c:d4:0c:70:2f:73:9c:a1:e9:26:f4:68:a8:fa:5f:0a:
         32:ae:31:bd:5d:f1:ba:39:5c:b7:8e:6e:11:8e:ba:a4:20:32:
         6d:48:d6:4f:02:40:e0:26:83:66:fd:48:74:9b:79:e7:86:ff:
         28:dd:c1:cb:4e:5e:8a:05:b9:a7:f5:21:d1:fe:fb:b3:e1:9e:
         23:af:2b:08:08:4a:db:23:79:cd:1b:5e:ee:c2:c1:49:cc:80:
         37:5a:a8:ea:25:f7:bc:5d:86:de:d8:a8:95:f8:3c:8e:8a:43:
         95:11:bb:cc:f5:04:b5:7f:b8:cb:7a:7d:9e:7c:7b:1d:c2:d9:
         7f:f3:e9:14:ec:03:e5:99:35:82:e7:c6:e1:95:d7:b9:5f:b1:
         90:a2:a6:95:f6:d4:a6:e7:66:d4:79:11:45:ac:f3:d3:98:ea:
         aa:04:68:fd:55:09:36:3f:c4:b1:65:52:9a:a8:77:fc:c6:ca:
         e8:7f:18:1a:25:22:9f:c4:ff:1b:50:be:ce:ef:18:03:42:33:
         0d:28:d4:38:3e:3a:dc:30:d9:68:bf:a7:b5:07:b8:4f:d7:e5:
         f1:b8:0a:8b:72:4f:2a:46:6e:2b:ce:59:c0:36:1b:48:5f:45:
         e6:95:11:8f:0e:bb:f2:4f:7c:4e:22:fe:ec:2c:b8:36:a2:77:
         75:0e:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:13 2026 by rpki-client