Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa
File:                     3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa (raw, json)
Hash identifier:          +HjXpsObooFxMgYry0JztncJM4mrrAryw27ZM/3Lsx8=
Subject key identifier:   6D:D8:69:AD:A3:18:70:51:AD:66:B3:75:54:99:3E:FF:2A:1A:A0:F2
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       0F1FB594A053C170082173D7C521AC30E74A7E41
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa
Signing time:             Wed 27 May 2026 09:24:04 +0000
ROA not before:           Wed 27 May 2026 09:19:04 +0000
ROA not after:            Wed 26 May 2027 09:24:04 +0000
asID:                     133775
IP address blocks:        180.188.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1f:b5:94:a0:53:c1:70:08:21:73:d7:c5:21:ac:30:e7:4a:7e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 27 09:19:04 2026 GMT
            Not After : May 26 09:24:04 2027 GMT
        Subject: CN=6DD869ADA3187051AD66B37554993EFF2A1AA0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:da:75:b7:6b:b0:65:d0:fa:f5:f8:68:f4:
                    89:76:b7:fa:a8:90:cd:82:08:3c:41:8d:02:95:b3:
                    09:e2:90:ec:4e:47:e3:c9:fe:fb:bf:66:9a:ea:68:
                    7d:6a:f3:9a:d1:18:31:91:5f:92:f8:b5:4c:88:a4:
                    c3:27:31:df:6f:99:19:b3:cb:11:8c:77:8d:75:67:
                    96:3a:3f:8f:97:52:d0:03:18:64:3d:f4:e8:a4:f5:
                    d9:8c:73:eb:29:eb:c6:95:d3:1a:8c:4a:2f:f1:b5:
                    a0:98:b6:ce:e7:b5:89:8e:ea:16:c1:fe:82:fd:28:
                    e4:f1:9a:5c:af:c8:a7:16:a3:30:65:6a:61:36:1c:
                    22:3e:a4:42:02:7e:13:1f:29:bb:2b:96:69:51:af:
                    54:42:78:02:9e:79:b9:62:9a:d6:85:fd:93:da:10:
                    21:d0:ce:09:8b:6f:29:46:82:da:9e:1f:b5:0d:c3:
                    54:f5:88:f7:05:08:06:07:66:59:05:61:32:1b:4c:
                    02:39:51:89:26:47:6d:bf:2f:c1:eb:4d:c4:0d:fd:
                    67:7d:ed:61:37:26:ea:de:20:af:2e:5c:c7:3c:29:
                    0f:59:e2:11:dc:a6:3b:f1:96:ca:c9:51:1d:67:cb:
                    4b:fb:bb:d1:42:d0:2d:50:18:59:a6:42:de:25:46:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D8:69:AD:A3:18:70:51:AD:66:B3:75:54:99:3E:FF:2A:1A:A0:F2
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34302e302f32322d3232203d3e20313333373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:43:26:22:1d:ff:1e:0e:f2:d8:56:9a:4d:56:b8:3e:7b:b4:
         3d:33:ea:c7:c1:89:61:3b:2e:e6:ad:90:57:0d:af:11:79:ba:
         8e:14:1d:fc:9f:72:1b:9e:d2:39:4c:00:02:5d:1b:bf:21:1d:
         c2:f4:3a:d3:c4:e1:e0:6d:39:7f:b1:70:e8:f5:64:51:f3:78:
         be:78:34:55:b4:86:f0:2f:f7:47:2c:5f:bf:69:c4:cd:8c:24:
         e3:89:54:59:a9:08:a9:25:c0:3a:6d:80:4f:20:16:f6:13:42:
         6c:65:1d:ca:fd:f5:c0:4d:06:1d:18:2c:e3:f5:4f:5d:7e:49:
         7c:ba:f4:d6:13:19:60:e4:a4:c5:3d:fc:25:56:55:07:12:2f:
         85:0b:81:b0:00:13:65:f3:ad:06:b6:fc:57:f4:56:54:e3:71:
         69:bb:8d:5a:59:6a:db:16:5c:41:27:6c:e5:a2:b6:d9:8d:2c:
         37:fa:59:17:29:ab:43:3d:44:6d:7b:2c:37:ad:30:96:85:22:
         e7:6b:24:c4:69:94:69:39:9d:b6:d4:ea:2c:92:82:43:78:43:
         c7:8c:07:d0:b2:76:bf:a1:1b:9f:65:03:e0:cd:40:24:72:d0:
         6c:ca:82:65:f0:25:23:e4:9b:12:c3:c7:b0:22:8c:55:9d:99:
         2e:ba:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:39 2026 by rpki-client