Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/3232332e32372e3138342e302f32342d3332203d3e203137363232.roa
File:                     3232332e32372e3138342e302f32342d3332203d3e203137363232.roa (raw, json)
Hash identifier:          eUIKT8kQjRrNxwg18snwM5Babeyv0hxbM26TJtQTSr0=
Subject key identifier:   88:4F:FB:D6:9F:96:38:B5:DE:24:48:74:21:91:AA:76:FC:58:87:0D
Certificate issuer:       /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
Certificate serial:       718C9654DB326A917C3A888FE8F2BC0A44F6841F
Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/3232332e32372e3138342e302f32342d3332203d3e203137363232.roa
Signing time:             Mon 27 Apr 2026 09:06:01 +0000
ROA not before:           Mon 27 Apr 2026 09:01:01 +0000
ROA not after:            Mon 26 Apr 2027 09:06:01 +0000
asID:                     17622
IP address blocks:        223.27.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8c:96:54:db:32:6a:91:7c:3a:88:8f:e8:f2:bc:0a:44:f6:84:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098
        Validity
            Not Before: Apr 27 09:01:01 2026 GMT
            Not After : Apr 26 09:06:01 2027 GMT
        Subject: CN=884FFBD69F9638B5DE2448742191AA76FC58870D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:85:e2:ac:a4:91:e9:d3:1f:1a:71:f4:37:
                    03:9d:9a:08:ce:b2:a5:cb:2f:c5:d1:8b:14:2b:16:
                    93:fd:ea:e1:15:2c:23:5c:22:39:bc:93:a1:58:28:
                    53:63:5a:26:ba:16:0f:67:02:11:93:14:36:04:22:
                    96:1d:e2:97:92:f8:18:37:ee:87:78:10:f4:d5:cc:
                    a1:6a:ff:da:5b:3a:fd:c6:75:60:87:39:b2:6c:95:
                    df:ef:c5:8d:d0:26:bd:20:24:dd:ad:a4:37:7b:7e:
                    0b:a8:16:40:32:eb:62:79:f0:42:30:08:df:8e:e2:
                    8e:c6:28:40:47:05:ab:48:e1:d2:20:d1:af:55:62:
                    6e:69:45:8e:00:00:82:60:65:51:9d:bc:6b:50:ab:
                    26:c2:07:0e:ae:7f:be:2c:1a:ff:28:0a:75:63:85:
                    b4:db:9d:82:08:ef:1d:96:33:52:fc:1b:4d:2d:1a:
                    f5:e3:95:02:32:b7:4a:88:2d:59:b7:8a:c8:bd:99:
                    1e:d4:85:23:71:ff:70:b8:4c:a7:eb:7a:55:2c:6e:
                    85:47:c3:f6:58:4c:05:9d:87:f5:17:e2:03:bd:57:
                    9b:cc:7e:3c:62:dc:e9:62:84:a7:33:e5:96:b1:2b:
                    5f:b8:49:58:2d:cf:29:c4:57:d9:89:84:66:e8:fb:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4F:FB:D6:9F:96:38:B5:DE:24:48:74:21:91:AA:76:FC:58:87:0D
            X509v3 Authority Key Identifier:
                keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/3232332e32372e3138342e302f32342d3332203d3e203137363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:6d:cb:cb:98:f8:d3:36:73:a9:6c:1b:26:10:38:15:c7:af:
         28:78:b8:3e:98:13:1c:79:a3:7c:d5:c1:ff:6f:c6:31:81:7e:
         cd:03:f9:75:ac:e2:70:53:e1:1f:56:b1:ed:49:05:bd:ef:0e:
         f8:c1:fc:90:52:06:71:62:29:13:0e:72:32:a4:05:40:13:42:
         e6:aa:17:c7:ae:41:18:64:78:b0:c6:44:56:94:1b:7b:bd:7a:
         5d:22:e9:03:f7:59:1e:52:21:28:76:38:ea:ed:fd:b5:8e:14:
         00:cc:13:c9:44:e6:8d:29:69:7a:e4:87:d6:20:f6:62:9c:03:
         7d:79:fe:7a:7f:0c:36:06:d2:77:09:28:a1:3f:1d:c7:88:40:
         46:54:ee:a7:0e:3f:83:40:c9:88:47:c9:7a:a8:c8:b3:1f:df:
         2d:7f:50:58:64:14:03:e7:c1:67:4f:29:15:35:45:a4:bc:0f:
         f1:08:e1:90:c2:f0:36:fa:77:d5:9d:76:60:da:14:45:ab:48:
         e9:80:61:37:e8:c0:90:c7:02:7f:cd:d5:6e:a2:75:e9:b2:18:
         d2:82:f0:9d:c7:33:35:69:c6:65:d7:f0:34:23:91:15:cb:01:
         e2:34:70:87:16:0e:56:ae:76:9b:25:71:39:ce:1a:2c:43:8c:
         27:4d:3b:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:46:36 2026 by rpki-client