Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e34332e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          okrHve8OCFfcI1437/le8FVLsh+IWwtSWRM+L0LPT/o=
Subject key identifier:   80:2E:3F:E2:3B:9D:2A:88:EB:37:3D:57:F5:F7:9E:65:61:F6:0F:1A
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       31573190050C041B13370295B5631941F96830ED
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3235203d3e2034383337.roa
Signing time:             Wed 27 May 2026 09:24:04 +0000
ROA not before:           Wed 27 May 2026 09:19:04 +0000
ROA not after:            Wed 26 May 2027 09:24:04 +0000
asID:                     4837
IP address blocks:        180.188.43.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:57:31:90:05:0c:04:1b:13:37:02:95:b5:63:19:41:f9:68:30:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 27 09:19:04 2026 GMT
            Not After : May 26 09:24:04 2027 GMT
        Subject: CN=802E3FE23B9D2A88EB373D57F5F79E6561F60F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:ab:ba:0c:71:26:54:85:77:31:fe:95:09:
                    2f:cb:9d:72:17:df:a6:13:0e:ec:28:59:46:1f:68:
                    c8:b0:ab:cf:18:54:d2:b6:2d:40:e8:68:0f:f2:dc:
                    cb:d7:51:7e:bb:d8:a5:e6:f3:16:0f:8e:46:27:9f:
                    1a:36:54:93:85:a5:ea:c7:aa:03:08:44:5f:89:96:
                    84:87:b2:e6:b0:f5:a1:0c:74:87:ac:3a:60:6a:4d:
                    a6:25:f5:40:19:83:eb:ba:5f:57:66:9b:1d:ba:24:
                    f5:67:39:d1:b1:f6:d6:01:ba:b0:d3:d2:24:6a:2b:
                    84:72:a6:4d:f8:4f:a4:4c:85:36:42:fa:a5:2a:52:
                    f6:9d:00:a5:95:47:1f:ff:57:c5:6a:a4:76:a7:38:
                    71:7a:bb:98:5f:9b:80:1b:e9:23:e5:b3:40:b1:49:
                    cd:ad:98:68:7c:70:27:ae:20:fe:33:7e:5b:2e:63:
                    39:69:17:b6:10:62:e5:01:10:cd:5e:5d:ff:d9:fa:
                    c7:74:6c:6e:c4:52:3d:74:38:25:2c:a7:fe:11:f1:
                    fa:6e:a1:46:de:91:57:fd:12:4b:23:25:3b:c6:29:
                    34:a1:d5:b5:e7:dc:06:ef:4d:c7:a2:26:3e:1e:fe:
                    63:73:c0:3f:5d:72:37:7b:f3:a1:d0:2e:5d:dd:72:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:3F:E2:3B:9D:2A:88:EB:37:3D:57:F5:F7:9E:65:61:F6:0F:1A
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34332e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:2c:26:9a:33:2c:8e:1e:7f:3f:bb:f8:a9:0d:05:01:4e:
         56:04:18:03:85:67:27:c4:30:74:e5:95:f2:76:28:6a:9f:5d:
         15:4b:62:c3:9d:56:50:c4:bc:ca:da:c2:b8:e1:13:15:42:94:
         27:bd:e5:f3:fb:fa:bc:09:23:08:fb:17:48:5d:bd:74:87:da:
         75:dc:80:22:cb:26:52:96:62:8e:5a:c1:84:fe:63:a7:7b:b6:
         a0:22:ec:23:62:43:10:fe:86:3b:82:2d:91:53:32:6c:2b:2b:
         9e:6e:36:d7:a9:4e:b4:50:67:fe:03:d5:0b:d6:2c:49:ba:8f:
         33:a0:c2:fe:67:5a:9b:9c:55:d4:65:8b:d3:35:d4:68:1b:f7:
         c0:99:7b:10:99:b0:16:e2:13:27:12:13:5e:64:59:dc:a9:e0:
         08:4d:88:90:06:f1:4c:ad:3d:7b:93:7f:2e:5a:74:9d:e0:9b:
         cb:67:4f:a1:6d:32:a0:60:88:23:f1:56:c6:db:57:f5:24:7a:
         15:73:f1:f1:2f:8a:91:a4:f0:0d:33:6b:6a:91:4d:66:1e:74:
         ce:62:c6:5a:3d:9e:78:35:d5:e9:4f:cd:b4:85:a9:cd:76:4c:
         fc:0e:64:12:f1:54:fd:72:0c:18:7b:69:27:54:7f:af:a4:83:
         cf:86:b9:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUMVcxkAUMBBsTNwKVtWMZQfloMO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjcwOTE5MDRaFw0yNzA1MjYwOTI0MDRaMDMxMTAvBgNV
BAMTKDgwMkUzRkUyM0I5RDJBODhFQjM3M0Q1N0Y1Rjc5RTY1NjFGNjBGMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoKu6DHEmVIV3Mf6VCS/LnXIX
36YTDuwoWUYfaMiwq88YVNK2LUDoaA/y3MvXUX672KXm8xYPjkYnnxo2VJOFperH
qgMIRF+JloSHsuaw9aEMdIesOmBqTaYl9UAZg+u6X1dmmx26JPVnOdGx9tYBurDT
0iRqK4Rypk34T6RMhTZC+qUqUvadAKWVRx//V8VqpHanOHF6u5hfm4Ab6SPls0Cx
Sc2tmGh8cCeuIP4zflsuYzlpF7YQYuUBEM1eXf/Z+sd0bG7EUj10OCUsp/4R8fpu
oUbekVf9EksjJTvGKTSh1bXn3AbvTceiJj4e/mNzwD9dcjd786HQLl3dcoEZAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUgC4/4judKojrNz1X9feeZWH2DxowHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzEzODMwMmUzMTM4
MzgyZTM0MzMyZTMwMmYzMjM0MmQzMjM1MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALS8KzANBgkqhkiG9w0BAQsFAAOCAQEAgtwsJpozLI4efz+7+KkNBQFOVgQY
A4VnJ8QwdOWV8nYoap9dFUtiw51WUMS8ytrCuOETFUKUJ73l8/v6vAkjCPsXSF29
dIfaddyAIssmUpZijlrBhP5jp3u2oCLsI2JDEP6GO4ItkVMybCsrnm4216lOtFBn
/gPVC9YsSbqPM6DC/mdam5xV1GWL0zXUaBv3wJl7EJmwFuITJxITXmRZ3KngCE2I
kAbxTK09e5N/Llp0neCby2dPoW0yoGCII/FWxttX9SR6FXPx8S+KkaTwDTNrapFN
Zh50zmLGWj2eeDXV6U/NtIWpzXZM/A5kEvFU/XIMGHtpJ1R/r6SDz4a50g==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client