Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa
File:                     3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier:          lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=
Subject key identifier:   96:84:A9:8C:93:73:5A:4E:00:78:5C:AC:C4:9D:52:42:70:35:05:4E
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       60215EA51E4735DF1E9F936784A1B04882D95CB8
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa
Signing time:             Mon 27 Apr 2026 10:24:23 +0000
ROA not before:           Mon 27 Apr 2026 10:19:23 +0000
ROA not after:            Mon 26 Apr 2027 10:24:23 +0000
asID:                     134700
IP address blocks:        183.81.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:21:5e:a5:1e:47:35:df:1e:9f:93:67:84:a1:b0:48:82:d9:5c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: Apr 27 10:19:23 2026 GMT
            Not After : Apr 26 10:24:23 2027 GMT
        Subject: CN=9684A98C93735A4E00785CACC49D52427035054E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:54:74:66:bb:de:ba:f6:2e:2f:a4:92:83:
                    fb:a8:4e:0b:9d:76:86:61:82:85:8e:97:1e:06:84:
                    28:7f:ec:b4:88:17:7f:82:f9:ab:64:e1:bd:5c:4b:
                    08:c4:b0:0a:a4:9d:bf:72:32:c6:3f:3c:58:82:b7:
                    d2:04:0f:96:a1:e5:9a:5b:de:4a:b1:8d:cf:cb:58:
                    38:84:48:58:83:d1:d8:73:ab:6f:16:a0:a1:85:07:
                    9f:db:ec:0b:34:13:5b:24:22:c4:2c:99:59:e8:10:
                    8f:e9:5e:90:40:cd:db:78:bd:12:cc:15:58:76:ac:
                    f2:32:e2:7f:ba:17:5f:89:41:84:a9:1f:78:a3:a2:
                    5d:43:15:30:b8:0b:30:9d:f5:55:23:d3:c4:d2:b1:
                    95:06:f6:cb:e3:9f:b6:57:89:e3:37:96:f2:88:47:
                    d2:0c:31:9a:f0:3b:db:d1:36:a9:2b:a8:6e:a3:bb:
                    f2:1c:fc:52:c7:27:98:4b:da:22:09:5c:bd:ba:fe:
                    ae:2b:23:c4:04:62:3a:7c:97:9b:a8:e6:00:ec:4e:
                    28:6a:18:f6:05:0b:20:72:c3:d2:80:95:87:b4:3c:
                    66:34:64:0c:ca:94:ac:7d:e7:aa:d2:24:bf:7b:0b:
                    b2:6b:80:82:6a:3b:17:f1:39:4d:0a:0b:72:e9:0b:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:84:A9:8C:93:73:5A:4E:00:78:5C:AC:C4:9D:52:42:70:35:05:4E
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:74:83:94:05:aa:4a:30:78:3d:fc:63:bd:4d:16:e3:49:2f:
         9b:05:f2:d0:53:c9:30:f9:33:01:22:f2:3d:55:11:54:6f:19:
         3a:62:5f:64:a2:41:a1:cc:5c:0e:ba:db:8c:37:c2:69:7f:4c:
         4b:36:2f:b5:59:75:4f:15:80:51:72:89:c3:68:0f:0f:42:ca:
         b5:a7:e9:61:28:ae:ad:aa:56:63:cc:4f:ba:c8:20:79:e1:67:
         70:a1:46:d3:99:12:3e:92:51:56:04:bc:ab:3f:1f:c2:84:8c:
         80:73:52:b5:0b:5c:c6:aa:a8:71:4a:fc:6a:0a:df:1b:4e:e4:
         2a:4c:97:00:06:fc:e4:2a:63:30:6f:18:09:2e:03:9d:28:97:
         d6:04:7f:9f:c9:10:8c:81:a8:96:98:2c:47:f3:2e:a0:19:b9:
         10:2c:ce:01:c9:35:25:82:80:c7:b1:e8:44:41:a4:7a:46:4a:
         11:b0:65:85:1b:d5:eb:5e:9a:65:15:7c:e8:c5:1e:cc:3d:8a:
         2c:3c:be:d8:aa:d3:0f:4f:8c:91:62:fc:2e:63:5e:4e:86:ca:
         48:f5:c3:1c:df:90:3c:b1:62:a2:9c:d5:19:66:73:f8:9b:c4:
         3b:82:40:e4:47:8a:85:b2:4e:cc:c1:27:ba:1b:b7:8b:55:31:
         7a:c5:3d:25
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUYCFepR5HNd8en5NnhKGwSILZXLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1
M0Y5MzdFMTAeFw0yNjA0MjcxMDE5MjNaFw0yNzA0MjYxMDI0MjNaMDMxMTAvBgNV
BAMTKDk2ODRBOThDOTM3MzVBNEUwMDc4NUNBQ0M0OUQ1MjQyNzAzNTA1NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ulR0ZrveuvYuL6SSg/uoTgud
doZhgoWOlx4GhCh/7LSIF3+C+atk4b1cSwjEsAqknb9yMsY/PFiCt9IED5ah5Zpb
3kqxjc/LWDiESFiD0dhzq28WoKGFB5/b7As0E1skIsQsmVnoEI/pXpBAzdt4vRLM
FVh2rPIy4n+6F1+JQYSpH3ijol1DFTC4CzCd9VUj08TSsZUG9svjn7ZXieM3lvKI
R9IMMZrwO9vRNqkrqG6ju/Ic/FLHJ5hL2iIJXL26/q4rI8QEYjp8l5uo5gDsTihq
GPYFCyByw9KAlYe0PGY0ZAzKlKx956rSJL97C7JrgIJqOxfxOU0KC3LpCwkPAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUloSpjJNzWk4AeFysxJ1SQnA1BU4wHwYDVR0j
BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0
NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC8zMTM4MzMyZTM4
MzEyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEALdRrTANBgkqhkiG9w0BAQsFAAOCAQEA3HSDlAWqSjB4PfxjvU0W
40kvmwXy0FPJMPkzASLyPVURVG8ZOmJfZKJBocxcDrrbjDfCaX9MSzYvtVl1TxWA
UXKJw2gPD0LKtafpYSiurapWY8xPusggeeFncKFG05kSPpJRVgS8qz8fwoSMgHNS
tQtcxqqocUr8agrfG07kKkyXAAb85CpjMG8YCS4DnSiX1gR/n8kQjIGolpgsR/Mu
oBm5ECzOAck1JYKAx7HoREGkekZKEbBlhRvV616aZRV86MUezD2KLDy+2KrTD0+M
kWL8LmNeTobKSPXDHN+QPLFiopzVGWZz+JvEO4JA5EeKhbJOzMEnuhu3i1UxesU9
JQ==
-----END CERTIFICATE-----
Generated at Wed May 13 17:10:38 2026 by rpki-client