Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa
File:                     3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier:          NlDd9BCZI1vexAS9RN7hym8yGfxboK98UaNTFRfwRVg=
Subject key identifier:   1C:69:1D:D7:29:40:84:4A:DC:EE:E3:AE:08:EA:46:44:97:CA:6B:03
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       783003E1B6D3F2F74155C027ECC4C60AEC162739
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa
Signing time:             Mon 20 Apr 2026 07:28:08 +0000
ROA not before:           Mon 20 Apr 2026 07:23:08 +0000
ROA not after:            Mon 19 Apr 2027 07:28:08 +0000
asID:                     9808
IP address blocks:        125.254.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:30:03:e1:b6:d3:f2:f7:41:55:c0:27:ec:c4:c6:0a:ec:16:27:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: Apr 20 07:23:08 2026 GMT
            Not After : Apr 19 07:28:08 2027 GMT
        Subject: CN=1C691DD72940844ADCEEE3AE08EA464497CA6B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:18:e2:b6:ac:18:cb:b0:c8:c4:4d:d4:c9:
                    9a:e8:06:b4:d6:34:c6:64:ce:b3:cb:92:e2:4b:06:
                    a2:1a:dc:6a:cb:ef:9c:15:b5:b4:94:45:15:6c:bb:
                    c0:87:e2:04:c4:58:46:8a:e5:70:b7:d5:c1:ad:79:
                    78:6e:21:ef:5e:cb:96:42:24:ce:0d:48:36:75:26:
                    36:71:cc:bd:61:12:b7:21:8a:46:7a:0d:2e:bc:60:
                    48:df:39:e2:36:48:58:bc:8d:02:82:ff:0c:dd:1c:
                    45:9b:d4:64:02:85:64:32:e5:8d:cd:4c:1c:38:20:
                    52:87:a1:e6:75:dd:f8:a9:a3:f1:28:df:f6:89:95:
                    6d:65:cf:64:53:7b:c4:7c:82:32:55:ef:3b:91:d4:
                    76:a1:59:69:40:6b:44:33:83:df:7a:cc:46:e6:d9:
                    c6:59:1c:ca:70:e5:0c:5c:0e:68:dd:40:71:a8:4a:
                    ff:27:83:40:22:90:6f:ac:e6:0d:fb:4a:dc:5d:62:
                    3c:5c:14:b7:80:5d:6b:01:c1:cb:f9:ff:0f:f2:45:
                    f5:02:b7:e2:db:af:46:c0:8c:56:b3:63:09:63:11:
                    f4:ed:5a:9f:4b:d1:c3:4f:b4:6c:d1:5a:56:d0:be:
                    9e:72:3c:86:90:05:d4:3e:17:d4:4b:08:3d:2b:31:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:1D:D7:29:40:84:4A:DC:EE:E3:AE:08:EA:46:44:97:CA:6B:03
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3132352e3235342e3138342e302f32322d3232203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.254.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:e0:95:bb:ff:cc:9b:68:e2:f5:08:70:00:5d:57:8c:0a:
         45:df:b8:b2:ab:fb:31:a4:52:9d:2e:54:49:0f:4a:cb:0c:75:
         83:9f:4e:bb:5e:d9:93:ff:ee:5a:14:49:79:f5:23:c0:2b:b9:
         24:7b:05:dd:bd:c9:b8:f0:9d:90:66:d6:99:eb:33:16:3d:f3:
         9f:b5:70:19:ca:74:08:70:9c:90:4d:df:d2:be:b6:05:9a:f6:
         46:cb:c3:5f:08:0b:a3:21:ef:02:9f:b5:d3:88:21:dc:47:df:
         81:8a:b5:b0:c6:d4:03:b5:4a:5a:ca:21:c1:80:71:b9:be:68:
         8c:4b:a5:42:7e:bf:bc:89:de:e7:1e:b0:54:0a:3d:9c:4f:ed:
         64:06:91:02:29:bc:01:14:ba:89:f2:c8:08:9f:91:f7:9b:b8:
         fa:98:38:aa:8c:bc:89:f5:6a:30:e5:41:eb:5b:80:0d:2d:4e:
         e4:e7:12:62:ec:60:82:81:52:53:7e:3b:f5:8a:5a:ed:10:74:
         57:e7:b6:9d:8d:b7:0e:eb:02:19:3b:96:00:cf:42:2c:65:43:
         94:47:0a:1f:da:e3:3e:69:c0:81:a8:bb:fd:a7:e1:7c:b4:11:
         dc:16:3c:83:8a:36:a6:96:28:46:3a:1e:d6:95:d4:a9:51:4f:
         11:90:c7:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:23:38 2026 by rpki-client