Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3234203d3e203536303430.roa
File:                     3138302e3138382e34332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          Q55xkXPkHfHkfFTamq6/Z8WS9RqlLwHn71XeA+TlHlM=
Subject key identifier:   D8:3E:E1:E9:81:6B:05:D1:74:62:BF:8E:D2:10:64:30:D4:34:8F:CF
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       52CD102EB806D8091DA2620F9000C862FA32F11D
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3234203d3e203536303430.roa
Signing time:             Wed 27 May 2026 09:24:04 +0000
ROA not before:           Wed 27 May 2026 09:19:04 +0000
ROA not after:            Wed 26 May 2027 09:24:04 +0000
asID:                     56040
IP address blocks:        180.188.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cd:10:2e:b8:06:d8:09:1d:a2:62:0f:90:00:c8:62:fa:32:f1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 27 09:19:04 2026 GMT
            Not After : May 26 09:24:04 2027 GMT
        Subject: CN=D83EE1E9816B05D17462BF8ED2106430D4348FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:e9:c6:43:3a:fc:98:6d:d3:d8:82:e4:1a:
                    9c:58:75:c8:88:3d:47:67:48:1f:d4:cd:50:49:53:
                    95:b0:64:18:b0:8f:b4:fa:1b:fb:a0:5a:87:e9:72:
                    7c:8c:2b:4f:c5:09:2d:c6:70:92:e0:f1:fb:ee:c5:
                    42:c7:f5:7b:9a:22:04:05:e9:cf:94:8a:7e:ab:e6:
                    f2:c2:b4:d9:47:ec:5b:c4:5e:d3:0c:67:9c:c2:89:
                    d0:75:3b:d4:5e:d8:1a:59:f9:6b:9b:40:eb:f5:59:
                    63:8f:e6:bf:70:06:d5:05:86:83:e8:bc:af:28:3b:
                    75:ac:4f:12:88:a8:7b:ea:0a:e4:c6:61:98:d9:60:
                    16:b7:9d:96:98:8f:cd:a7:b7:5c:cd:94:70:f9:d4:
                    bb:b8:eb:a8:b8:24:a9:df:f2:0c:73:59:87:a8:67:
                    19:29:64:43:77:83:fa:52:f6:90:22:a7:80:77:21:
                    3d:52:09:41:3c:b0:92:47:10:58:53:31:55:ab:8c:
                    fc:3b:66:3d:34:bc:6e:07:79:e8:af:29:a5:e1:2f:
                    a2:32:37:ad:05:b4:1f:34:72:a1:2a:45:69:12:35:
                    17:7d:d9:6f:e7:92:37:a0:43:11:a8:b4:85:d4:d1:
                    f8:d6:7d:43:4a:9f:bb:3f:5f:32:ff:21:3c:6a:ae:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3E:E1:E9:81:6B:05:D1:74:62:BF:8E:D2:10:64:30:D4:34:8F:CF
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:29:1d:3f:fe:83:0e:86:66:9e:4b:26:f0:e1:e2:46:38:
         5f:13:a2:55:7f:4c:67:f8:ac:65:36:b1:97:6a:3f:ba:b0:e3:
         5a:2a:51:d2:a9:97:e1:90:4b:d4:ce:cf:31:82:1c:36:71:6e:
         71:4f:91:45:39:52:b8:f9:51:97:61:49:a1:f5:16:5c:0b:8a:
         c6:67:c7:b5:4d:72:be:3a:d9:2e:84:aa:6e:97:8f:4e:04:1a:
         83:f6:8d:ee:2b:1b:6f:5b:2b:3b:eb:48:55:20:fb:dc:37:f2:
         8d:c2:f6:fb:d4:fc:e4:48:ea:5a:be:1e:39:92:c8:23:a3:21:
         75:be:15:9b:24:08:0c:86:c0:9f:ff:1a:ac:40:c3:b1:06:4b:
         fb:af:4e:bb:64:a5:4d:a3:59:b0:e4:44:fc:ce:48:1f:31:67:
         28:07:29:67:2b:4d:17:e7:1a:e8:5e:3c:bd:17:0d:e5:d8:d7:
         8a:7b:fc:77:19:c2:65:b7:e0:d5:4b:1d:f9:79:a1:b6:0b:04:
         fe:da:68:82:57:9f:ad:af:7e:0d:eb:82:70:ce:c5:0e:a3:27:
         54:07:dd:1d:be:6d:08:13:a4:9f:28:e1:94:9d:2c:47:99:17:
         5d:15:23:ec:9f:d3:88:79:7e:52:7f:6c:23:17:bf:d9:c2:7c:
         5d:39:ae:23
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUs0QLrgG2AkdomIPkADIYvoy8R0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjcwOTE5MDRaFw0yNzA1MjYwOTI0MDRaMDMxMTAvBgNV
BAMTKEQ4M0VFMUU5ODE2QjA1RDE3NDYyQkY4RUQyMTA2NDMwRDQzNDhGQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEenGQzr8mG3T2ILkGpxYdciI
PUdnSB/UzVBJU5WwZBiwj7T6G/ugWofpcnyMK0/FCS3GcJLg8fvuxULH9XuaIgQF
6c+Uin6r5vLCtNlH7FvEXtMMZ5zCidB1O9Re2BpZ+WubQOv1WWOP5r9wBtUFhoPo
vK8oO3WsTxKIqHvqCuTGYZjZYBa3nZaYj82nt1zNlHD51Lu466i4JKnf8gxzWYeo
ZxkpZEN3g/pS9pAip4B3IT1SCUE8sJJHEFhTMVWrjPw7Zj00vG4HeeivKaXhL6Iy
N60FtB80cqEqRWkSNRd92W/nkjegQxGotIXU0fjWfUNKn7s/XzL/ITxqrmeLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU2D7h6YFrBdF0Yr+O0hBkMNQ0j88wHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3NDI1MjE5NDEwMzI5Ny8wLzMxMzgzMDJlMzEz
ODM4MmUzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALS8KzANBgkqhkiG9w0BAQsFAAOCAQEADDApHT/+gw6GZp5LJvDh4kY4
XxOiVX9MZ/isZTaxl2o/urDjWipR0qmX4ZBL1M7PMYIcNnFucU+RRTlSuPlRl2FJ
ofUWXAuKxmfHtU1yvjrZLoSqbpePTgQag/aN7isbb1srO+tIVSD73DfyjcL2+9T8
5EjqWr4eOZLII6Mhdb4VmyQIDIbAn/8arEDDsQZL+69Ou2SlTaNZsORE/M5IHzFn
KAcpZytNF+ca6F48vRcN5djXinv8dxnCZbfg1Usd+XmhtgsE/tpoglefra9+DeuC
cM7FDqMnVAfdHb5tCBOknyjhlJ0sR5kXXRUj7J/TiHl+Un9sIxe/2cJ8XTmuIw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:50 2026 by rpki-client