Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e3130382e302f32342d3234203d3e203137343930.roa
File:                     36312e32382e3130382e302f32342d3234203d3e203137343930.roa (raw, json)
Hash identifier:          fncXqOd2R+5Fk1BqsrlCFUki0Yj3TQ3y2SYjcEIQInU=
Subject key identifier:   81:1E:48:26:2D:8F:E2:82:52:82:0B:F9:E3:90:3B:01:46:A5:48:A9
Certificate issuer:       /CN=5253565A27C06C800009631402F5A6EE85C46456
Certificate serial:       3D7ACC3F72469CB39BC5B44BA19D08EF4429B2E1
Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e3130382e302f32342d3234203d3e203137343930.roa
Signing time:             Wed 13 May 2026 05:40:33 +0000
ROA not before:           Wed 13 May 2026 05:35:33 +0000
ROA not after:            Wed 12 May 2027 05:40:33 +0000
asID:                     17490
IP address blocks:        61.28.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7a:cc:3f:72:46:9c:b3:9b:c5:b4:4b:a1:9d:08:ef:44:29:b2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456
        Validity
            Not Before: May 13 05:35:33 2026 GMT
            Not After : May 12 05:40:33 2027 GMT
        Subject: CN=811E48262D8FE28252820BF9E3903B0146A548A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:33:f8:31:9a:32:34:0b:c2:fa:33:d4:1d:
                    47:dc:bf:8d:f7:61:1c:23:90:bc:cc:a6:f5:03:69:
                    37:78:e8:af:cb:1b:18:98:5a:b9:70:e7:47:60:05:
                    98:9f:80:68:60:25:07:ed:75:83:54:d8:de:19:08:
                    78:40:83:04:94:cb:99:3e:c7:30:74:3f:6b:9a:a2:
                    bd:44:74:42:84:69:8d:80:b3:9c:dd:63:dc:6a:2e:
                    37:1a:97:38:70:c4:68:9e:f7:2d:b5:b3:25:3c:55:
                    cb:f2:74:6a:25:0f:b2:b0:ff:2e:a0:fb:c7:43:b6:
                    5d:c0:7f:f6:a6:69:d3:62:fa:9e:d9:22:1f:84:cc:
                    f6:27:55:c7:d4:26:f2:78:a2:7e:26:79:79:16:89:
                    e4:4f:91:38:e5:ba:c6:83:b2:3d:b2:7f:66:af:5b:
                    2e:70:92:f8:93:78:fd:39:30:6c:56:32:68:19:06:
                    db:62:40:4c:b8:11:20:d3:17:97:ac:15:14:ec:53:
                    af:f2:0f:0b:9d:71:10:54:7b:30:0d:82:97:7b:72:
                    f8:fb:92:76:16:9a:23:44:22:a4:ce:f2:0c:8b:a1:
                    a4:af:17:91:ea:25:5b:a5:51:d7:29:3c:9f:d8:dd:
                    60:fc:a8:db:22:92:aa:2c:92:25:09:c3:90:f7:e7:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:48:26:2D:8F:E2:82:52:82:0B:F9:E3:90:3B:01:46:A5:48:A9
            X509v3 Authority Key Identifier:
                keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/36312e32382e3130382e302f32342d3234203d3e203137343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.28.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:74:99:29:24:03:3f:da:17:aa:6f:aa:54:f1:ba:9e:24:
         b5:dc:ae:7a:db:34:c5:bc:fd:1a:d2:d2:d5:c8:66:64:c7:2c:
         ab:cb:56:9c:c0:d2:17:f0:11:ac:34:f1:48:b4:b2:eb:f4:5c:
         5f:45:57:04:30:36:1a:b1:29:10:c3:9f:fc:97:a9:ca:08:be:
         91:6b:63:a4:c2:6d:86:16:7c:00:46:ef:d5:a7:27:d6:ab:90:
         ed:73:fb:f7:52:9c:fe:53:c1:3f:12:13:96:24:e9:c0:a6:81:
         96:d6:5d:8f:8b:bf:46:bd:9e:c2:d3:82:fc:de:d1:2b:94:a8:
         ac:48:c8:90:25:68:35:3a:75:87:57:45:24:c2:15:8f:22:93:
         7b:e4:b6:5d:6e:b5:53:66:13:4b:43:8d:02:60:84:93:a3:f6:
         98:ef:77:5f:25:a9:c6:b4:08:e5:8d:cc:88:c6:a7:28:a3:8c:
         a3:c5:24:d0:51:e7:d6:48:3d:35:6f:25:fa:08:50:d7:03:ed:
         dc:50:99:13:83:a0:c3:bc:3e:24:ec:48:35:72:0e:97:e5:ef:
         9d:42:49:46:fd:2c:81:28:d4:00:ca:b5:68:c2:e7:03:b2:c1:
         d8:4b:3e:60:7d:ad:18:11:78:56:22:49:02:97:9b:16:7c:84:
         79:f5:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:36 2026 by rpki-client