Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137322e302f32342d3234203d3e203536303430.roa
File:                     3130312e3235312e3137322e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          ka9Uhgy71x8Q+V/BJI9vvkjfH4OLcFef6RFVM0uyYiA=
Subject key identifier:   D5:DB:5C:2B:6B:24:C6:6E:FF:8D:EB:71:FD:3F:09:6E:4C:C6:78:2C
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       0F23BEBAA52F113DDA6D9BA5FD19323095A92B22
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137322e302f32342d3234203d3e203536303430.roa
Signing time:             Wed 22 Jul 2026 06:50:48 +0000
ROA not before:           Wed 22 Jul 2026 06:45:48 +0000
ROA not after:            Wed 21 Jul 2027 06:50:48 +0000
asID:                     56040
IP address blocks:        101.251.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:23:be:ba:a5:2f:11:3d:da:6d:9b:a5:fd:19:32:30:95:a9:2b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: Jul 22 06:45:48 2026 GMT
            Not After : Jul 21 06:50:48 2027 GMT
        Subject: CN=D5DB5C2B6B24C66EFF8DEB71FD3F096E4CC6782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:a5:70:5e:a3:8d:a3:dd:54:42:6a:38:6e:
                    33:f2:0b:b7:07:63:95:2e:fb:4c:30:53:4d:83:9e:
                    8b:ac:a0:c6:4b:ad:5e:3a:84:05:60:e4:12:59:0c:
                    c3:70:c1:02:99:06:21:f8:6f:d9:c4:45:af:cd:2d:
                    e0:92:f7:4c:b4:92:09:92:5d:fa:63:ad:1a:0b:61:
                    14:2e:43:ab:34:95:8d:ca:96:05:66:16:18:92:76:
                    a2:63:91:25:57:18:55:9e:47:54:76:24:f1:88:4b:
                    ce:f6:2d:59:21:af:fb:40:bd:d8:96:fa:47:09:49:
                    73:55:3f:88:37:83:a7:44:94:a1:40:36:3e:92:ef:
                    f5:69:3b:61:dc:60:78:e2:cd:5e:a4:79:f7:32:0a:
                    c3:dc:ff:59:0c:2d:f0:b5:75:0c:86:9b:0e:f5:48:
                    2f:1f:fc:7c:49:86:74:da:ff:8b:d7:8d:eb:22:e9:
                    15:f2:2b:e5:12:5f:d3:76:ca:de:38:29:ca:0e:29:
                    9c:13:5c:c5:69:3e:de:b9:d2:2f:64:c3:c2:f1:98:
                    c6:0b:3a:82:ee:a6:2f:be:cf:3a:b5:55:bd:79:75:
                    1f:4c:ba:96:07:fa:53:3d:54:da:c0:26:37:e9:97:
                    49:c9:be:c7:14:d0:e4:e5:c4:95:58:03:e0:b8:17:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:5C:2B:6B:24:C6:6E:FF:8D:EB:71:FD:3F:09:6E:4C:C6:78:2C
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137322e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.251.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:92:98:00:05:71:a9:22:b5:ea:ba:5b:7a:8a:be:b9:90:6b:
         2d:96:e8:b2:fe:74:5f:f9:09:bf:62:6b:8f:12:a3:a4:b0:89:
         f8:a1:3a:52:0f:b0:63:f2:ee:0f:0f:64:20:b2:98:9a:30:89:
         b5:c6:a2:b9:46:e4:b3:5d:82:2f:07:b0:94:ad:18:9b:05:4a:
         85:4f:a8:6e:d9:93:b0:cd:27:1a:b4:bf:38:e0:4b:4b:c8:31:
         f0:2b:1f:5b:16:71:99:e6:1d:3e:0c:f7:2e:5b:2e:58:17:7f:
         82:cb:26:3d:85:67:56:91:67:7b:74:d9:32:3e:87:50:df:3f:
         e2:63:63:ee:81:a1:d6:ae:4b:03:65:fb:52:1c:b4:0f:4d:3b:
         84:6e:df:23:d8:31:db:4e:d1:8a:5f:ef:fc:8f:9d:ee:61:54:
         0f:ef:fc:10:ae:11:79:0a:3c:bd:dd:72:ea:63:a1:a1:e3:ab:
         5b:56:25:68:fe:74:24:b3:6e:b1:91:0f:70:8d:30:c6:4c:9f:
         83:5b:07:f0:32:df:a8:ef:5b:36:6e:7b:5d:0c:3c:2e:38:02:
         6b:55:75:b8:22:05:db:7d:ab:0b:00:78:42:7d:b2:8a:0f:45:
         18:ed:1f:69:57:bd:b2:d6:17:ee:e8:7d:43:d3:80:5f:02:d0:
         e9:42:c1:70
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDyO+uqUvET3abZul/RkyMJWpKyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA3MjIwNjQ1NDhaFw0yNzA3MjEwNjUwNDhaMDMxMTAvBgNV
BAMTKEQ1REI1QzJCNkIyNEM2NkVGRjhERUI3MUZEM0YwOTZFNENDNjc4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2qVwXqONo91UQmo4bjPyC7cH
Y5Uu+0wwU02DnousoMZLrV46hAVg5BJZDMNwwQKZBiH4b9nERa/NLeCS90y0kgmS
XfpjrRoLYRQuQ6s0lY3KlgVmFhiSdqJjkSVXGFWeR1R2JPGIS872LVkhr/tAvdiW
+kcJSXNVP4g3g6dElKFANj6S7/VpO2HcYHjizV6kefcyCsPc/1kMLfC1dQyGmw71
SC8f/HxJhnTa/4vXjesi6RXyK+USX9N2yt44KcoOKZwTXMVpPt650i9kw8LxmMYL
OoLupi++zzq1Vb15dR9MupYH+lM9VNrAJjfpl0nJvscU0OTlxJVYA+C4F6IbAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU1dtcK2skxm7/jetx/T8JbkzGeCwwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTU5NzQyNTIxOTQxMDMyOTcvMC8zMTMwMzEyZTMy
MzUzMTJlMzEzNzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGX7rDANBgkqhkiG9w0BAQsFAAOCAQEAY5KYAAVxqSK16rpbeoq+
uZBrLZbosv50X/kJv2JrjxKjpLCJ+KE6Ug+wY/LuDw9kILKYmjCJtcaiuUbks12C
LwewlK0YmwVKhU+obtmTsM0nGrS/OOBLS8gx8CsfWxZxmeYdPgz3LlsuWBd/gssm
PYVnVpFne3TZMj6HUN8/4mNj7oGh1q5LA2X7Uhy0D007hG7fI9gx207Ril/v/I+d
7mFUD+/8EK4ReQo8vd1y6mOhoeOrW1YlaP50JLNusZEPcI0wxkyfg1sH8DLfqO9b
Nm57XQw8LjgCa1V1uCIF232rCwB4Qn2yig9FGO0faVe9stYX7uh9Q9OAXwLQ6ULB
cA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:10:29 2026 by rpki-client