Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34372e302f32342d3235203d3e2034383337.roa
File:                     3138302e3138382e34372e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          PSMZt05TdK/OUWgYqTSdqUdmeLptKpOstNV2PEYnMvU=
Subject key identifier:   A0:33:87:7A:16:74:D9:03:0A:BC:63:D8:3B:0C:E5:57:6C:3B:6F:E6
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       0D0FAD5B7EC5BE06B13CB1931A1796301197C742
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34372e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 08:25:06 +0000
ROA not before:           Fri 29 May 2026 08:20:06 +0000
ROA not after:            Fri 28 May 2027 08:25:06 +0000
asID:                     4837
IP address blocks:        180.188.47.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0f:ad:5b:7e:c5:be:06:b1:3c:b1:93:1a:17:96:30:11:97:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 08:20:06 2026 GMT
            Not After : May 28 08:25:06 2027 GMT
        Subject: CN=A033877A1674D9030ABC63D83B0CE5576C3B6FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:b3:77:a6:83:f7:df:d0:ed:21:2e:fe:d8:
                    8c:0b:99:99:4b:e1:51:4a:41:c9:5c:4d:3f:2e:f3:
                    e3:3c:b3:11:2f:43:12:33:9f:49:6f:62:37:65:d6:
                    c0:fc:5f:2e:38:a4:3c:27:b9:1a:2c:78:75:2b:d4:
                    39:8a:88:bc:7f:4d:c2:8d:b4:b7:99:07:c6:dd:78:
                    34:4d:c6:6e:8a:f1:0c:2e:01:55:04:ae:25:f7:05:
                    2e:86:b0:36:2c:cd:a7:57:b1:a0:2e:1d:2a:af:d3:
                    d1:83:bf:86:3a:ab:d0:ec:ce:9c:3d:c5:d9:42:1a:
                    8a:e3:3a:f1:f0:9c:1d:93:64:29:d0:ef:a1:c6:3d:
                    92:41:77:fb:cb:d6:5c:80:57:97:08:68:83:0b:83:
                    b8:96:d9:cf:03:38:83:a1:bb:5d:18:b5:c4:28:0e:
                    a0:df:10:63:dc:a0:c8:69:5a:4d:e4:07:ee:89:2e:
                    bb:62:f4:e4:c5:f5:22:c1:8f:3f:11:d0:1e:e9:91:
                    7f:b4:fb:59:cd:24:22:1c:2d:bc:74:7a:8f:d1:48:
                    8c:a5:44:98:0c:c0:77:c1:d5:0a:d0:e3:b8:a7:60:
                    39:97:00:31:10:c6:cc:c9:22:6b:18:2c:76:90:55:
                    57:92:9d:0d:e9:eb:34:a1:85:40:83:6a:47:1a:9e:
                    8b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:33:87:7A:16:74:D9:03:0A:BC:63:D8:3B:0C:E5:57:6C:3B:6F:E6
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3138302e3138382e34372e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:43:b7:78:39:ad:6f:cf:fe:82:31:7e:8b:41:64:1a:7a:d9:
         f1:fb:07:5a:93:a0:23:cc:8c:10:83:ec:a9:c7:05:55:f1:27:
         6d:2e:c2:e3:c7:7e:db:3b:83:cc:a1:40:19:11:27:d4:60:48:
         62:d4:2e:0b:12:15:55:bd:b3:0c:30:dc:4c:2e:0b:07:b8:33:
         64:69:56:27:69:f5:79:4e:db:e1:a9:f0:57:63:e1:99:72:cb:
         9c:b2:30:3e:80:96:d7:3e:fb:7c:3a:af:9f:90:04:79:ed:ce:
         ab:f4:20:59:7a:14:28:34:3e:4d:90:21:9a:75:10:f9:4e:b3:
         a6:5c:9f:94:33:bd:d8:b8:06:eb:4d:23:97:7c:8f:e4:ad:3f:
         ac:29:05:31:34:52:fd:5f:f9:5c:83:08:3e:e8:94:cd:3a:ff:
         73:8c:2d:da:4b:a6:a4:51:53:4d:16:6d:58:d1:32:62:a9:d6:
         d1:68:5b:51:66:c2:58:83:13:94:98:6a:47:4c:ad:8e:b0:95:
         73:23:2c:23:57:2a:39:7f:03:6e:3a:27:43:b5:42:96:a1:48:
         a1:a0:2b:37:b7:3b:2a:91:1b:85:35:79:a1:af:f8:c8:8c:b0:
         8c:47:ea:cd:71:01:1e:c5:d4:4e:b5:12:fe:42:e7:07:4b:66:
         b0:9c:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:58 2026 by rpki-client