Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34342e302f32342d3234203d3e203534383031.roa
File:                     3138302e3138382e34342e302f32342d3234203d3e203534383031.roa (raw, json)
Hash identifier:          AwuWaZ8evTGwXVYxgq9j9Md3R866e0cpKpuyxKrPzUw=
Subject key identifier:   B4:3F:E5:79:BC:5F:55:90:6C:4E:1B:BC:F8:0E:3A:5D:3C:FD:E3:69
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       11ADD0860937433727D3BB0036476D4F2096D217
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34342e302f32342d3234203d3e203534383031.roa
Signing time:             Fri 29 May 2026 08:25:07 +0000
ROA not before:           Fri 29 May 2026 08:20:07 +0000
ROA not after:            Fri 28 May 2027 08:25:07 +0000
asID:                     54801
IP address blocks:        180.188.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ad:d0:86:09:37:43:37:27:d3:bb:00:36:47:6d:4f:20:96:d2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:20:07 2026 GMT
            Not After : May 28 08:25:07 2027 GMT
        Subject: CN=B43FE579BC5F55906C4E1BBCF80E3A5D3CFDE369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:29:cc:2e:55:28:c0:60:f1:d0:47:7c:c3:
                    5e:21:ae:c0:91:cb:5c:5c:05:93:4a:62:02:c7:70:
                    23:ea:1e:e9:f2:68:91:dd:90:81:29:a3:ca:61:13:
                    2a:eb:aa:1a:81:46:97:09:6a:51:6f:0f:2f:74:3a:
                    f3:2e:c4:ff:28:aa:c7:8f:c5:96:bd:c9:99:7f:82:
                    02:ce:83:c0:3a:8c:88:f4:7a:db:d8:da:e2:6e:7d:
                    87:db:97:fe:c5:b5:85:6e:3a:84:d7:ec:db:0a:f9:
                    11:c9:bf:84:b8:f7:38:a1:9f:42:99:60:11:90:f0:
                    4f:12:51:7f:6c:4c:7e:53:da:fe:05:4f:73:b0:d6:
                    20:12:7f:fe:f5:0d:db:fd:cb:59:73:31:fe:43:56:
                    20:be:31:6b:e0:b4:a1:9a:d2:49:97:e2:05:7c:79:
                    31:3b:1d:8b:95:2a:5a:da:01:6d:b8:ac:70:ae:d4:
                    67:02:58:3c:3d:84:ab:20:8b:16:c5:6c:94:64:53:
                    01:d9:be:bf:93:f0:64:b0:5e:69:f6:42:08:13:ac:
                    5e:84:97:09:43:de:0d:88:e2:33:3a:be:0d:cc:71:
                    cf:7f:e3:9d:86:d4:74:7f:92:15:50:9e:2f:24:ed:
                    fc:f7:c2:e5:13:73:e4:32:29:61:03:0d:aa:d3:fa:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3F:E5:79:BC:5F:55:90:6C:4E:1B:BC:F8:0E:3A:5D:3C:FD:E3:69
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34342e302f32342d3234203d3e203534383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:09:14:4d:ca:47:cd:b6:f2:c3:37:c7:7c:8a:3c:27:f1:b5:
         61:1c:04:87:6a:a2:91:98:72:f5:27:f8:5b:d1:3b:02:1c:2f:
         cb:67:e4:3b:fb:b6:c8:55:28:a2:6f:93:3d:d6:65:16:b4:71:
         2e:eb:be:55:65:32:d2:1f:e0:be:be:65:33:06:63:e2:ef:73:
         aa:59:13:00:eb:f8:16:40:c6:39:18:13:22:72:23:d2:2a:a6:
         bb:e1:bf:a0:31:40:b0:62:fd:ab:af:17:7c:98:b1:4d:26:3a:
         49:10:1f:64:b3:9a:f1:50:13:25:48:57:2b:05:57:11:fe:4d:
         e0:85:d4:3a:a4:05:ab:f7:5c:eb:9d:e4:96:d3:e4:1e:4b:89:
         5f:22:82:4a:e7:48:f3:e5:97:68:02:72:69:c8:da:4f:af:03:
         b1:bb:e3:04:a3:db:41:15:87:c2:1f:2d:0b:0d:0c:c8:99:68:
         6e:e0:6b:10:01:97:7e:a1:35:01:aa:15:2b:d0:86:bc:6e:47:
         03:76:a4:52:39:23:9e:fc:49:49:0d:c4:66:e4:48:6d:18:fb:
         6a:36:d7:56:13:48:c9:47:ae:81:9e:33:be:de:d6:35:95:78:
         42:74:b5:60:6e:6d:c9:7d:65:c3:03:2a:92:e9:d0:ca:47:87:
         a8:38:1e:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:20 2026 by rpki-client