Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa
File:                     3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          jlaDUIT24l99BM/gLCA+csfz1+ZxnYSyDFWpIpgEXTY=
Subject key identifier:   61:16:ED:69:7E:64:5C:C0:01:27:4A:1C:3C:64:26:5A:AB:1D:A7:D2
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       5C1B1D05F01FADAB2351203933A0022C405904AD
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa
Signing time:             Wed 22 Jul 2026 06:50:48 +0000
ROA not before:           Wed 22 Jul 2026 06:45:48 +0000
ROA not after:            Wed 21 Jul 2027 06:50:48 +0000
asID:                     56040
IP address blocks:        101.251.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1b:1d:05:f0:1f:ad:ab:23:51:20:39:33:a0:02:2c:40:59:04:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: Jul 22 06:45:48 2026 GMT
            Not After : Jul 21 06:50:48 2027 GMT
        Subject: CN=6116ED697E645CC001274A1C3C64265AAB1DA7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:61:af:3b:f4:81:a6:d9:2d:ca:a4:9d:15:
                    2a:39:92:d5:48:20:87:15:ee:b8:13:99:3e:d5:7c:
                    0c:e4:2f:54:dc:8c:d9:93:30:36:7b:05:c2:1c:86:
                    ea:e1:4c:b3:64:9e:a8:4a:be:b1:2b:49:51:d4:85:
                    1f:ef:dd:b8:0e:98:2b:3a:62:69:d4:ba:e6:4b:86:
                    f6:25:cf:12:00:2a:78:50:38:c2:04:60:20:14:82:
                    85:98:9a:b6:56:b4:88:05:33:14:c4:5b:7a:51:1b:
                    ad:e9:88:27:8f:f1:ed:fa:1c:c3:9d:6a:1b:ce:7f:
                    37:4a:ed:0b:27:73:f5:c8:88:a2:08:eb:64:ce:ae:
                    5f:41:44:52:ab:7c:60:bc:58:96:21:b8:c3:12:59:
                    f8:21:e6:05:da:02:a2:1d:a6:67:01:c0:a8:8e:dd:
                    e5:b1:b5:e5:fe:51:a9:5b:97:c3:65:ff:50:83:3b:
                    ae:e6:7d:d3:f9:cf:3f:12:69:6c:10:2b:20:2e:08:
                    bd:ae:78:ee:96:20:ca:9a:52:2a:18:9c:b8:6f:09:
                    58:8b:85:d7:44:27:3a:aa:1c:76:db:4b:98:d1:b4:
                    44:23:d4:8e:2c:0f:c8:5a:f0:9e:b7:05:63:d1:cf:
                    a5:4a:5e:73:1a:09:ec:9d:19:db:ef:73:4f:f0:38:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:16:ED:69:7E:64:5C:C0:01:27:4A:1C:3C:64:26:5A:AB:1D:A7:D2
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3137332e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.251.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:45:64:6f:b3:85:3d:8c:4d:3c:82:65:a4:5f:14:bd:38:76:
         b3:57:85:13:98:ea:46:fc:bc:77:02:9c:cc:7a:93:e3:e2:82:
         17:0e:3c:06:4d:78:ca:d9:07:3c:08:8a:c6:6b:37:ee:69:ee:
         a0:2f:18:fc:99:87:a6:6a:c0:49:f8:17:1d:5d:08:63:66:ad:
         94:d0:0a:e7:c8:37:24:42:c2:aa:51:0b:24:d2:24:f9:ff:50:
         7e:80:b8:80:47:5f:46:33:88:37:2f:5a:f1:3f:49:39:18:ac:
         07:45:3f:ae:b7:d1:91:65:07:cb:90:1f:4c:16:0b:48:49:ca:
         ac:0a:05:e1:69:f5:a6:5a:7a:46:fd:0e:44:5a:f9:48:10:c8:
         5c:d9:17:f7:1f:dd:19:b9:17:03:e5:cb:28:6b:fa:5e:f3:b7:
         6e:49:68:67:cd:fd:b2:99:23:41:91:a6:33:ba:34:c6:f7:bd:
         24:62:a1:29:9a:9c:42:fe:12:b3:24:85:59:e5:d9:b2:cd:08:
         fd:fd:d3:ef:ef:9c:16:d2:3e:16:69:f8:79:b0:0d:ab:50:4d:
         cf:97:2d:ce:65:e4:54:bd:ce:ce:cd:8e:b4:0d:e4:ec:bc:8b:
         32:7a:8b:a3:c3:07:cb:4e:b9:b7:96:f0:c3:ce:6f:da:42:a2:
         2f:83:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:48:33 2026 by rpki-client