Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa
File:                     3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa (raw, json)
Hash identifier:          t1MCyz1DAzj9QfqaCIoPg515VmpgR6j+fB2e73NIxAE=
Subject key identifier:   80:AC:F6:9D:99:7D:4E:74:95:BB:77:E4:5F:E4:13:22:24:8E:89:32
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       50D0EF782B74EED12EE1AAB1A8FB816EFF23641B
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa
Signing time:             Mon 11 May 2026 02:11:44 +0000
ROA not before:           Mon 11 May 2026 02:06:44 +0000
ROA not after:            Mon 10 May 2027 02:11:44 +0000
asID:                     4837
IP address blocks:        150.242.235.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d0:ef:78:2b:74:ee:d1:2e:e1:aa:b1:a8:fb:81:6e:ff:23:64:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: May 11 02:06:44 2026 GMT
            Not After : May 10 02:11:44 2027 GMT
        Subject: CN=80ACF69D997D4E7495BB77E45FE41322248E8932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:e4:30:68:22:62:ad:a3:a9:44:67:54:8a:
                    f1:1f:00:76:c4:7d:91:41:59:8d:02:39:3f:d5:2b:
                    98:78:97:1b:b9:f2:da:2e:34:08:c7:a4:3c:e7:9b:
                    f9:2e:99:0d:dd:47:e8:84:f3:2b:b4:b3:e5:8d:01:
                    44:b6:b0:cb:d6:10:7a:35:d3:36:7a:4b:e6:cf:2f:
                    fc:48:8f:27:37:90:26:a5:a9:1a:16:1d:a3:40:a4:
                    7d:b0:5a:27:87:75:3e:81:ae:a2:5f:22:5e:c7:15:
                    ae:80:26:61:d3:72:88:ef:b2:2c:03:ec:31:11:7b:
                    07:54:d8:45:97:30:ab:4e:d7:8d:5b:d3:d1:10:f9:
                    3e:62:e2:7a:5c:b6:7c:9c:d8:12:93:d7:9c:df:92:
                    67:a4:5a:c0:21:dd:c7:c2:2a:8e:d4:f6:af:59:1f:
                    1a:a5:3d:15:43:ec:27:67:11:78:84:f3:25:08:c3:
                    4d:0a:a2:4f:b6:c7:53:9e:40:cf:82:77:e6:ab:94:
                    d4:8d:b6:ee:f8:7e:16:37:87:a3:94:2e:68:c3:a4:
                    1e:bf:c3:45:27:7e:f1:db:8d:44:a4:23:a1:b0:08:
                    d2:0a:1b:ac:e1:f8:f2:53:6c:a7:22:a5:bc:33:bc:
                    ab:cf:e6:a0:a9:db:3d:aa:6d:30:82:03:6a:8c:17:
                    2e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AC:F6:9D:99:7D:4E:74:95:BB:77:E4:5F:E4:13:22:24:8E:89:32
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3135302e3234322e3233352e302f32342d3332203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6b:49:19:d4:bd:b7:5e:13:89:89:39:f1:27:00:67:cc:08:
         6b:50:6c:b8:a1:2c:cb:3e:6c:8e:d1:44:15:b1:bf:e0:ef:df:
         fd:5a:1c:6c:1b:67:7f:2b:f3:a7:42:d5:c4:87:ab:1b:81:5e:
         80:a8:8c:bf:4e:ee:b7:2c:27:69:64:62:ff:bf:e7:3f:01:bc:
         8d:26:3b:96:95:b0:3f:6b:51:50:0f:a5:7f:f9:ad:90:d5:14:
         82:85:b6:50:b4:e0:f2:98:6f:08:b6:72:b4:53:33:a4:b5:86:
         16:ca:6c:68:5f:39:85:50:7f:8d:75:66:a0:f4:21:82:8e:9c:
         36:fe:4b:39:e0:5e:bf:4a:b1:c4:b3:0c:f5:a3:88:f8:1e:d9:
         4b:96:ef:36:32:a3:59:e1:d9:59:50:a4:9e:24:99:58:89:ef:
         c0:de:20:fd:6c:7e:4c:ef:08:57:48:a3:f2:6d:6b:07:5b:90:
         88:a7:61:7d:cc:6e:2b:35:c9:6b:c3:bf:0d:1c:f4:5a:31:f0:
         85:45:48:66:8d:0a:68:eb:9a:ce:50:db:d6:7c:9c:32:00:31:
         e2:10:7c:b5:a2:7d:29:a6:36:1d:f2:6a:7a:fc:af:e5:e8:1b:
         15:3c:93:44:01:90:5e:64:45:b7:b1:f6:25:87:a4:b0:37:a6:
         7f:e3:c0:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:37:10 2026 by rpki-client