Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34362e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e34362e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          csMg85G3U644eYQjvTJ4Ql9O/Npy3DjvM7/Jv2bkH+k=
Subject key identifier:   CA:47:C8:99:AB:C2:B6:D4:05:DD:F6:DB:38:FF:C5:8E:C0:9B:50:1F
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       407F07A290E0265182510335E026390948B2EDF1
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34362e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 08:25:07 +0000
ROA not before:           Fri 29 May 2026 08:20:07 +0000
ROA not after:            Fri 28 May 2027 08:25:07 +0000
asID:                     4837
IP address blocks:        180.188.46.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7f:07:a2:90:e0:26:51:82:51:03:35:e0:26:39:09:48:b2:ed:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:20:07 2026 GMT
            Not After : May 28 08:25:07 2027 GMT
        Subject: CN=CA47C899ABC2B6D405DDF6DB38FFC58EC09B501F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:05:6c:93:71:4f:de:b0:4c:31:8f:66:9c:
                    45:1e:d6:aa:8c:94:c9:62:9c:bf:44:42:df:21:68:
                    06:5b:a6:42:94:88:44:40:b9:99:88:c4:7b:c8:b7:
                    5e:09:c7:f1:b3:c0:39:c4:a4:50:60:67:57:6b:51:
                    13:77:68:4a:de:5b:dd:fa:96:4c:0e:00:e3:78:68:
                    93:da:d9:ce:a2:e8:59:a9:f9:1a:03:cd:51:40:d1:
                    4c:cb:4d:d4:42:75:1b:5f:b6:c4:e3:32:1f:aa:29:
                    59:13:a3:41:15:dd:47:cf:2a:e1:97:8c:87:08:dc:
                    dc:2d:09:f9:dd:ce:a5:15:68:ba:b6:26:17:9f:5e:
                    da:16:a3:ee:db:ed:02:bf:7c:14:01:6d:12:ce:99:
                    49:34:7d:0d:93:9b:fd:30:8f:66:ea:25:21:e5:80:
                    63:8e:e4:42:b6:8f:4f:1b:19:c8:5c:44:f8:f5:89:
                    ab:23:71:16:cd:58:cc:49:4d:bb:3b:42:c9:21:d8:
                    f9:f9:1f:38:7b:ee:1d:71:95:7a:f5:b4:cf:9c:c1:
                    56:53:4e:e9:3c:a1:ec:d3:dd:1e:7c:cc:b0:2e:32:
                    47:14:41:9f:73:90:1d:de:de:c1:cc:03:21:de:33:
                    0f:20:ae:51:d1:d5:2f:e0:2a:be:60:85:09:f1:cb:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:C8:99:AB:C2:B6:D4:05:DD:F6:DB:38:FF:C5:8E:C0:9B:50:1F
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34362e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3f:b7:45:18:69:d8:af:cf:fc:0c:46:a0:b0:88:be:ed:63:
         24:a7:b3:ae:c2:a4:5c:b5:da:af:e1:87:d3:69:a2:bd:69:8c:
         d0:e2:64:89:e5:c4:94:a3:2d:f2:b6:90:4d:6d:71:3d:61:69:
         f2:ca:ae:06:99:83:bc:5b:83:0d:a8:9c:8a:f7:2e:83:c3:0e:
         9a:85:5e:96:91:bb:50:93:3c:3a:49:a7:b7:5b:ff:17:01:d5:
         8b:f2:6e:fd:e2:1c:fd:1b:c5:4a:33:42:8d:e7:bc:25:33:33:
         db:94:99:2f:29:4b:66:65:ba:63:34:e5:50:d2:4e:77:4d:c5:
         fb:09:a6:f9:1a:95:32:f8:26:6f:17:58:07:33:ed:ba:85:64:
         3c:e4:cc:12:45:05:dc:17:59:e7:d1:b3:11:19:7a:61:43:99:
         b9:5f:de:4b:6a:a1:b5:23:fd:5a:13:91:5a:48:7b:50:4f:09:
         2f:41:2f:22:a7:4e:5d:c6:3e:c5:b2:84:5f:c3:17:bc:c6:90:
         67:d6:b0:3c:4a:c2:f8:2e:3c:f4:db:64:f3:6a:3e:b5:80:1d:
         58:0e:3d:42:fd:7c:f3:14:55:14:b2:51:04:fb:ab:8a:f7:b0:
         77:67:6a:e9:f9:df:ad:2b:10:83:e8:63:c4:ef:51:82:7e:db:
         9b:79:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:47 2026 by rpki-client