Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34352e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e34352e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          E4h5WHnNoIXqFVFY21yVdSAzCg01RkP7IhQ0YUy/etE=
Subject key identifier:   66:DD:81:9B:28:EE:E3:81:FF:11:BB:3B:FD:41:0D:9E:75:38:80:23
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       44BE9C0AFBC56C6E7A56E1F647558FBDDD7685DD
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34352e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 08:25:06 +0000
ROA not before:           Fri 29 May 2026 08:20:06 +0000
ROA not after:            Fri 28 May 2027 08:25:06 +0000
asID:                     4837
IP address blocks:        180.188.45.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:be:9c:0a:fb:c5:6c:6e:7a:56:e1:f6:47:55:8f:bd:dd:76:85:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:20:06 2026 GMT
            Not After : May 28 08:25:06 2027 GMT
        Subject: CN=66DD819B28EEE381FF11BB3BFD410D9E75388023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:72:40:8f:48:11:8f:f3:8e:ce:ef:82:7d:
                    a7:a5:eb:18:c8:e1:db:be:01:57:55:a7:3b:5f:85:
                    14:49:7c:e6:27:2e:1c:0d:28:4f:2e:64:b6:64:31:
                    d5:fb:46:78:4a:52:72:4c:2f:ad:98:9f:38:55:37:
                    2c:5c:da:3f:7a:12:2d:4f:e6:71:6b:7b:49:f9:4b:
                    c0:fc:81:de:5a:52:2c:c6:48:fd:8a:f1:c9:f0:16:
                    cd:d9:e8:fa:5e:bc:73:74:b3:b8:c8:69:52:1e:ad:
                    36:ae:36:b4:1a:3b:93:b1:43:6f:ed:48:9c:ac:7c:
                    78:e5:64:51:52:bc:20:47:83:64:df:dc:e5:da:d5:
                    9a:af:d4:81:bb:fb:06:e0:d3:cb:12:e6:29:4f:92:
                    25:2c:f4:a0:cd:c0:3c:54:bd:72:d4:f6:f3:39:d3:
                    ef:54:05:85:40:0a:67:90:63:b7:d4:05:08:fe:56:
                    10:2e:eb:c9:d4:87:5c:6a:ee:ad:cf:da:9e:bf:c5:
                    cd:f9:3d:65:3d:44:43:15:05:39:9e:b7:07:9d:01:
                    25:2b:c2:f1:3a:5e:6b:6a:6f:1e:de:ef:17:4b:fb:
                    cf:14:25:41:b8:42:c0:51:b7:a2:6a:7d:c5:e3:c0:
                    b5:47:2c:01:d0:b0:51:bc:10:de:a6:15:7f:01:af:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DD:81:9B:28:EE:E3:81:FF:11:BB:3B:FD:41:0D:9E:75:38:80:23
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34352e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:7f:87:65:ec:b1:39:7c:2d:52:19:9a:de:05:5b:a6:7f:
         09:58:81:a3:44:9e:ea:4d:c8:62:2b:2e:c4:b2:35:69:2c:f0:
         4a:9b:bf:21:c2:e1:20:b0:d3:28:ff:0b:c3:c0:9d:5d:e0:cf:
         81:71:e3:e1:63:1c:d7:6e:42:b7:e7:e7:bc:d7:bd:d8:a7:12:
         e5:61:36:93:9d:f0:94:ad:6e:ae:c5:3d:2f:76:ee:84:fc:47:
         90:99:cb:db:08:d4:d2:15:18:2e:62:b8:92:39:ef:b2:4c:f2:
         c1:69:8a:96:41:07:86:4f:eb:ec:48:60:fd:8e:12:7a:48:f0:
         aa:5b:6f:e2:9a:39:3f:e2:24:d0:23:89:91:f9:4b:8b:f8:33:
         26:03:30:ae:4f:6b:43:5a:99:96:23:cd:48:05:38:20:bf:b3:
         54:4d:f2:24:94:5f:a1:0f:ed:62:57:94:3c:7f:71:4f:db:0c:
         fc:99:5a:57:c6:a8:1c:24:3d:f6:25:41:5f:45:71:ac:3b:c1:
         41:1d:11:d0:45:a0:a1:10:6d:05:84:0d:46:d7:36:a6:f6:08:
         56:81:77:0d:5b:6b:81:5f:3d:45:94:55:7c:7d:ef:9d:0e:b1:
         77:08:a7:81:75:69:9f:ff:74:ec:4c:77:98:c0:73:af:12:13:
         d9:f6:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:51 2026 by rpki-client