Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa
File:                     3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (raw, json)
Hash identifier:          uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=
Subject key identifier:   E0:B6:D0:13:E0:1E:04:EF:54:DF:07:59:6D:49:01:3C:8A:EC:95:A4
Certificate issuer:       /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
Certificate serial:       54F20639E0CDF38BCF3B06106FD7CACFEBFEB845
Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa
Signing time:             Mon 27 Apr 2026 10:24:23 +0000
ROA not before:           Mon 27 Apr 2026 10:19:23 +0000
ROA not after:            Mon 26 Apr 2027 10:24:23 +0000
asID:                     134700
IP address blocks:        183.81.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f2:06:39:e0:cd:f3:8b:cf:3b:06:10:6f:d7:ca:cf:eb:fe:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1
        Validity
            Not Before: Apr 27 10:19:23 2026 GMT
            Not After : Apr 26 10:24:23 2027 GMT
        Subject: CN=E0B6D013E01E04EF54DF07596D49013C8AEC95A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:ac:89:49:26:df:2e:9d:60:73:41:84:63:
                    b6:ff:05:aa:4f:b1:ef:c7:4c:2d:ad:f8:2e:95:d5:
                    0b:cf:7c:5d:2e:e6:a3:e1:b9:cc:c5:1b:5a:e8:24:
                    57:1b:1f:61:16:96:1a:e3:8b:a6:f7:ea:58:13:7e:
                    20:11:08:cf:27:6e:e1:9c:3c:e4:26:07:ea:b5:56:
                    c8:23:df:8e:cb:93:56:30:a4:20:da:e4:80:f1:1a:
                    10:77:2d:7e:b1:b7:9b:42:44:54:36:63:3c:dd:f8:
                    a1:cc:c5:21:39:27:af:7c:54:f7:9f:27:9a:02:76:
                    36:7a:2e:e4:31:b9:c0:b7:a3:e1:50:ee:a5:9a:f5:
                    6b:b6:1a:4c:f2:4a:55:e7:4e:f2:44:c8:bd:17:25:
                    26:ea:e3:e3:a0:f4:af:1d:ab:1f:a5:47:4d:fc:ca:
                    03:9c:4b:60:b8:a3:d0:2d:f9:7c:2e:36:b9:3f:e5:
                    9f:a6:49:74:b4:9d:54:a8:01:ba:50:18:8b:df:a1:
                    39:3a:e6:0c:c1:ee:b9:f3:af:07:2b:be:e8:ed:b2:
                    4f:fb:73:60:e1:9e:ba:26:ab:4e:e3:31:05:0c:b4:
                    f5:c3:70:94:6a:96:b1:b5:cb:72:a0:11:df:12:c8:
                    77:94:ae:37:4c:fb:54:4c:2d:50:e0:49:47:ed:8e:
                    1e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:D0:13:E0:1E:04:EF:54:DF:07:59:6D:49:01:3C:8A:EC:95:A4
            X509v3 Authority Key Identifier:
                keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:08:85:c7:80:ea:39:01:b5:cd:95:42:e6:13:3d:28:24:e9:
         e2:0d:17:3e:f1:4d:c8:4b:d4:8e:41:09:42:71:d9:2b:bf:71:
         87:cc:31:0a:34:83:ff:34:3f:e1:ce:05:17:33:6f:5d:dd:53:
         61:b4:28:2a:87:f9:30:3f:8e:d1:f7:60:69:00:b1:7b:be:68:
         5f:c8:87:07:40:c2:e0:c9:6f:89:ea:0b:2e:28:9d:c9:03:b9:
         80:3f:56:38:9c:41:60:35:eb:db:66:63:d9:87:a0:4d:4e:1d:
         3e:90:d3:51:97:79:27:3a:b1:f0:1a:67:26:36:a1:8c:5f:35:
         5c:7d:bc:b6:b3:0f:70:48:d3:70:3b:e1:1f:7c:bb:10:22:26:
         97:3d:cc:36:d3:a6:7b:71:83:98:b2:92:ba:49:be:61:51:ab:
         ae:97:c1:3e:64:14:d5:a0:82:c4:f4:20:74:1b:68:29:63:79:
         3d:30:5f:6b:5f:58:dc:2b:ee:06:3d:30:bd:8c:b2:0b:95:90:
         db:f7:da:a8:11:4d:11:ae:ad:52:47:0e:77:d6:4a:a5:f3:0c:
         3e:34:d9:5d:a2:a2:27:f9:d1:cb:16:57:c4:e0:1f:36:75:01:
         72:c9:2f:d1:ba:cb:15:b4:e4:b2:5b:67:83:68:20:99:83:d7:
         11:94:11:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:41:47 2026 by rpki-client