Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/32372e3130392e3132342e302f32322d3232203d3e2034383131.roa
File:                     32372e3130392e3132342e302f32322d3232203d3e2034383131.roa (raw, json)
Hash identifier:          rYu/eBQM4h8/XihKL8IwRwGboqy1k9QH6j6PxhBjm+I=
Subject key identifier:   17:8C:1F:C0:10:BE:F3:CA:55:C6:65:47:F0:27:9F:EB:2A:5E:93:7C
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       2FDD324CCD88709DDB8217A2D9749B324C922B5D
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/32372e3130392e3132342e302f32322d3232203d3e2034383131.roa
Signing time:             Mon 27 Apr 2026 07:56:55 +0000
ROA not before:           Mon 27 Apr 2026 07:51:55 +0000
ROA not after:            Mon 26 Apr 2027 07:56:55 +0000
asID:                     4811
IP address blocks:        27.109.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:dd:32:4c:cd:88:70:9d:db:82:17:a2:d9:74:9b:32:4c:92:2b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 27 07:51:55 2026 GMT
            Not After : Apr 26 07:56:55 2027 GMT
        Subject: CN=178C1FC010BEF3CA55C66547F0279FEB2A5E937C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d7:e5:31:40:c6:93:f8:23:7f:87:e2:00:e9:
                    48:e8:a0:5b:8b:6b:8c:04:e4:a5:16:82:03:67:a2:
                    26:0e:76:dd:cd:5a:90:28:7d:7d:73:10:b2:0f:ab:
                    47:53:37:61:3f:e3:c8:b6:f7:cb:1d:96:d6:9d:f0:
                    a6:67:5d:0e:4c:f1:b2:83:7e:16:49:36:e2:9b:37:
                    c2:ac:bf:cd:7f:da:07:1b:ee:17:23:c0:e9:a9:6d:
                    0e:28:d6:4d:5d:c1:62:63:22:52:5b:9a:10:5f:77:
                    01:43:c5:a8:e7:c0:ab:bb:5e:15:f8:a1:42:77:b2:
                    27:6f:e2:a2:61:b9:e4:3f:6d:bd:b8:de:c9:77:76:
                    12:0b:4a:fe:ea:67:16:fa:b5:10:37:f8:06:ac:a6:
                    6d:cd:85:55:9e:2c:7b:17:d8:60:f7:10:51:2b:14:
                    00:71:ed:10:23:7a:81:33:b7:22:c0:12:32:95:fd:
                    21:59:58:fe:94:83:38:0b:d5:60:75:d1:c8:af:9e:
                    98:ed:f1:95:2e:bd:50:65:53:f4:53:15:2b:69:e9:
                    36:5f:2e:b5:ed:8c:ae:a2:87:09:b5:af:fc:fb:2e:
                    05:09:02:e9:37:b4:93:df:4e:ec:a1:6c:66:0f:f9:
                    4d:2f:5f:e3:27:30:76:6c:b7:ff:90:04:18:0e:03:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8C:1F:C0:10:BE:F3:CA:55:C6:65:47:F0:27:9F:EB:2A:5E:93:7C
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/32372e3130392e3132342e302f32322d3232203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.109.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:e1:54:cc:f2:a4:91:bb:97:c5:fb:59:1b:8a:11:02:41:22:
         16:5c:05:98:35:ef:f1:2f:fe:1b:10:bc:95:d9:0b:e5:56:10:
         5c:a7:88:96:4d:32:e4:e0:73:b6:91:1d:0d:ce:b7:67:c6:d4:
         7a:da:bc:5b:bb:26:47:3c:e5:0d:fa:fc:b4:8e:07:83:68:10:
         41:23:99:4f:a0:3f:84:1b:1d:d9:2e:75:a8:22:7d:88:96:bf:
         b0:37:46:2f:ab:e6:28:eb:8e:81:78:b5:38:79:4f:e4:ad:e4:
         26:dd:65:96:99:4e:1d:e8:4e:33:75:a2:d7:bd:76:28:52:3b:
         a8:f3:03:71:9f:98:67:3a:eb:57:89:04:27:ef:66:9a:10:39:
         03:60:70:1b:32:8b:0d:41:f3:69:e0:f1:00:65:dd:d2:24:74:
         61:b0:b4:39:1b:5e:2a:51:c4:00:b3:4e:79:12:2c:1b:f1:b1:
         4f:f1:b4:e1:33:34:99:da:26:dc:3a:09:00:ed:8b:e2:8d:04:
         c8:50:ee:32:8e:81:ae:31:8e:5f:36:7a:75:a1:ed:93:cd:6f:
         87:e6:77:5e:a4:8a:e8:e1:8e:c2:f7:26:52:d8:a3:16:21:73:
         ae:e1:33:b3:51:62:13:25:14:e6:23:70:d1:d0:15:73:09:cf:
         44:9b:be:4a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUL90yTM2IcJ3bghei2XSbMkySK10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwNzUxNTVaFw0yNzA0MjYwNzU2NTVaMDMxMTAvBgNV
BAMTKDE3OEMxRkMwMTBCRUYzQ0E1NUM2NjU0N0YwMjc5RkVCMkE1RTkzN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ1+UxQMaT+CN/h+IA6UjooFuL
a4wE5KUWggNnoiYOdt3NWpAofX1zELIPq0dTN2E/48i298sdltad8KZnXQ5M8bKD
fhZJNuKbN8Ksv81/2gcb7hcjwOmpbQ4o1k1dwWJjIlJbmhBfdwFDxajnwKu7XhX4
oUJ3sidv4qJhueQ/bb243sl3dhILSv7qZxb6tRA3+Aaspm3NhVWeLHsX2GD3EFEr
FABx7RAjeoEztyLAEjKV/SFZWP6UgzgL1WB10civnpjt8ZUuvVBlU/RTFStp6TZf
LrXtjK6ihwm1r/z7LgUJAuk3tJPfTuyhbGYP+U0vX+MnMHZst/+QBBgOA0JPAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUF4wfwBC+88pVxmVH8Cef6ypek3wwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3NDA1MTE1MjY4MDcxNDI3LzAvMzIzNzJlMzEzMDM5
MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAhttfDANBgkqhkiG9w0BAQsFAAOCAQEAj+FUzPKkkbuXxftZG4oRAkEiFlwF
mDXv8S/+GxC8ldkL5VYQXKeIlk0y5OBztpEdDc63Z8bUetq8W7smRzzlDfr8tI4H
g2gQQSOZT6A/hBsd2S51qCJ9iJa/sDdGL6vmKOuOgXi1OHlP5K3kJt1llplOHehO
M3Wi1712KFI7qPMDcZ+YZzrrV4kEJ+9mmhA5A2BwGzKLDUHzaeDxAGXd0iR0YbC0
ORteKlHEALNOeRIsG/GxT/G04TM0mdom3DoJAO2L4o0EyFDuMo6BrjGOXzZ6daHt
k81vh+Z3XqSK6OGOwvcmUtijFiFzruEzs1FiEyUU5iNw0dAVcwnPRJu+Sg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:47 2026 by rpki-client