Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa
File:                     3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier:          pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=
Subject key identifier:   1A:B0:5E:F0:69:AC:57:FD:C9:B5:D4:DF:E4:59:45:D9:D8:5B:1D:E7
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       4D2173FC5A99D2D5EB82DB0A7A2825FC5C2B6ED0
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa
Signing time:             Mon 27 Apr 2026 10:24:23 +0000
ROA not before:           Mon 27 Apr 2026 10:19:23 +0000
ROA not after:            Mon 26 Apr 2027 10:24:23 +0000
asID:                     134700
IP address blocks:        183.81.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:73:fc:5a:99:d2:d5:eb:82:db:0a:7a:28:25:fc:5c:2b:6e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: Apr 27 10:19:23 2026 GMT
            Not After : Apr 26 10:24:23 2027 GMT
        Subject: CN=1AB05EF069AC57FDC9B5D4DFE45945D9D85B1DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:b3:a9:43:7e:f0:0d:c1:00:b7:bf:d9:67:
                    52:55:2b:b0:78:0a:96:d0:50:6e:2e:3c:28:b2:38:
                    7a:27:e1:0e:c3:85:88:58:f5:70:42:c7:08:a5:86:
                    be:1b:3e:4c:a9:fa:f7:f4:4e:3b:77:71:79:29:05:
                    87:e8:bc:be:0c:8e:5c:05:41:7a:45:31:1b:7e:e0:
                    52:88:89:ee:4c:89:7c:0d:75:4a:3f:70:6e:4e:79:
                    d7:b1:6f:40:05:cb:6c:df:f5:9e:b0:c8:0d:d5:3f:
                    ab:89:f1:e5:8a:09:dc:d0:68:3b:51:0e:3f:66:82:
                    26:43:45:a6:e1:0f:fa:7a:3e:dc:90:20:f2:39:be:
                    56:f6:9d:dd:85:51:0b:9c:fb:dc:37:d5:ea:7e:89:
                    fa:94:71:5c:12:4c:3d:df:ef:d6:2e:e2:2a:f8:ad:
                    f5:5f:77:df:8f:97:9b:3e:df:6f:4c:fa:bd:84:df:
                    e0:51:7d:bf:50:00:f6:f0:a5:7d:86:60:77:d9:b2:
                    ef:36:8f:0d:14:f5:36:8b:19:1c:08:46:b2:d2:66:
                    00:9f:a3:34:a9:77:01:5c:01:5c:a4:ca:c4:aa:6b:
                    d4:af:b6:da:69:bf:33:dd:38:38:85:76:d2:e1:39:
                    76:bf:42:e5:8d:5b:a6:d3:75:58:ec:13:6d:1c:17:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B0:5E:F0:69:AC:57:FD:C9:B5:D4:DF:E4:59:45:D9:D8:5B:1D:E7
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:06:df:54:df:20:01:14:99:d0:54:36:9e:8b:31:77:a9:41:
         a9:e5:f2:86:cd:fe:97:ad:2e:33:6a:1a:08:93:a4:b1:20:36:
         03:88:85:9e:a6:68:c6:db:d4:4e:67:af:76:09:15:87:08:d7:
         25:52:44:57:f3:be:ec:29:84:d6:23:3e:51:f7:62:86:b8:8d:
         50:00:3f:09:94:be:02:f4:76:e3:31:72:25:4a:e7:b7:0e:32:
         9e:f2:bf:d8:9a:4c:73:0c:8c:2e:7c:33:45:13:04:98:37:81:
         40:59:0e:11:d1:53:c4:d5:29:35:f5:db:7d:1b:04:b6:01:32:
         a5:00:54:b0:a9:79:9a:8d:80:78:1f:b3:d5:20:9a:d7:d5:6d:
         2e:80:12:0f:d6:b6:a5:51:d0:04:74:21:61:61:e4:76:ff:df:
         cf:42:08:7f:38:40:90:34:a7:c0:cc:5b:f0:e9:4f:4d:9c:2e:
         b4:9b:ae:ab:e3:1e:31:c3:70:67:fd:8d:d0:99:3f:e5:47:4a:
         76:42:6d:85:b6:37:46:5e:68:58:08:1d:50:fd:39:8c:6e:c3:
         e8:1d:15:d9:1c:e3:71:5a:fd:dc:39:5c:ec:e1:a4:da:16:6e:
         0d:ec:10:4f:09:2d:85:a7:86:ec:35:bf:6d:7d:33:38:ea:29:
         f6:1c:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:45 2026 by rpki-client