Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34342e302f32322d3232203d3e20313333373735.roa
File:                     3138302e3138382e34342e302f32322d3232203d3e20313333373735.roa (raw, json)
Hash identifier:          5r0EvvYt+heRq9Qf6QbO+l3nbbWD5+Q8X9+qTOyv81E=
Subject key identifier:   09:EF:B7:33:CE:3E:C5:65:6B:E9:F2:88:DF:AB:11:78:87:D1:51:7E
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       470A08AA3050BB70ED9F769EC77DEF12F49FEBE3
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34342e302f32322d3232203d3e20313333373735.roa
Signing time:             Fri 29 May 2026 08:25:07 +0000
ROA not before:           Fri 29 May 2026 08:20:07 +0000
ROA not after:            Fri 28 May 2027 08:25:07 +0000
asID:                     133775
IP address blocks:        180.188.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0a:08:aa:30:50:bb:70:ed:9f:76:9e:c7:7d:ef:12:f4:9f:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:20:07 2026 GMT
            Not After : May 28 08:25:07 2027 GMT
        Subject: CN=09EFB733CE3EC5656BE9F288DFAB117887D1517E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:a7:e8:2f:ac:b4:fd:0d:d9:4b:d9:25:9f:
                    0e:26:25:69:b9:3e:f8:aa:dc:85:b4:b0:94:0a:6f:
                    6a:95:72:e7:1f:16:1d:eb:47:9b:9e:0f:03:9b:9e:
                    8e:50:bd:40:c7:6b:17:e5:0a:bd:8a:d7:29:22:32:
                    7b:9a:46:58:70:14:4d:fc:4e:e3:df:a3:80:74:24:
                    73:de:6e:fa:9d:b1:9c:f2:a6:63:7b:ad:3e:a8:86:
                    7f:be:44:8f:0b:36:f4:af:96:53:75:0b:04:3a:cd:
                    92:10:df:e0:57:e3:b5:72:b6:b3:71:56:a8:cd:cf:
                    52:d6:08:95:65:b9:89:89:b8:b4:82:2b:fc:0a:05:
                    73:df:58:24:44:9f:52:76:71:56:6b:73:b4:d4:0d:
                    e4:75:5c:70:d8:dd:cf:e7:c4:16:39:88:74:64:b3:
                    68:42:b1:bf:d2:d1:25:92:91:5d:0b:82:17:0b:6d:
                    1a:96:7d:3b:42:71:8e:75:f8:99:65:c4:2f:79:de:
                    56:37:39:2f:75:fe:a5:6d:6b:bd:a9:a2:ba:34:9f:
                    e2:fc:f3:06:81:0e:0b:65:1c:0d:06:53:c9:f8:80:
                    26:db:3d:2e:38:5f:ec:05:4f:b1:56:43:68:6f:41:
                    b5:6e:bc:08:37:88:dd:3f:10:b1:12:fa:a6:cb:1b:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:B7:33:CE:3E:C5:65:6B:E9:F2:88:DF:AB:11:78:87:D1:51:7E
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34342e302f32322d3232203d3e20313333373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:b7:0a:a7:92:a8:40:ee:26:3f:38:67:d7:53:ec:20:3c:a4:
         b3:61:b4:40:8d:2a:f0:16:ee:15:03:00:d2:5e:0c:30:fd:b9:
         77:57:b9:0c:fa:48:ca:d7:f0:ca:bc:45:cf:5a:42:ab:72:3a:
         03:32:48:2e:98:5e:44:38:92:97:43:64:fe:f0:11:6d:fe:bc:
         80:e1:c3:7b:0c:13:f3:68:87:33:d1:3d:b6:b1:6e:55:37:ac:
         ec:bd:60:0f:0b:1a:58:9b:5d:22:6a:3f:6b:84:c5:46:7d:14:
         e8:d6:64:04:89:6e:e2:c5:3e:51:94:bf:3a:1a:83:42:58:11:
         4a:5b:7e:2a:a4:1f:e9:22:73:17:c8:62:63:a1:8b:98:17:05:
         9e:ab:0c:90:fb:86:fa:6a:c8:cd:fa:b5:0b:e0:d3:f2:1b:b3:
         29:d4:3e:a6:5f:df:1c:e0:09:bf:3f:d6:b4:a5:a9:09:9e:b2:
         82:65:24:a5:63:fe:c8:39:e8:4f:36:9a:01:1e:8e:2e:c7:21:
         29:aa:ac:7b:8d:60:0e:25:0f:83:5d:aa:7c:b6:45:53:fb:d3:
         b2:c4:04:3c:ab:7d:14:52:5e:2a:cc:ad:4b:e2:93:b3:51:f4:
         13:7e:a0:47:bf:92:c2:5b:13:33:7b:f2:a9:73:b2:c0:d3:98:
         04:0f:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:35 2026 by rpki-client