Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/32372e302e3136362e302f32332d3233203d3e203633363134.roa
File:                     32372e302e3136362e302f32332d3233203d3e203633363134.roa (raw, json)
Hash identifier:          ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=
Subject key identifier:   7C:4E:5F:3B:F3:E0:CE:4D:5C:5C:3C:6C:23:19:19:E2:64:21:BB:2F
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       7656ACCF15C7D593668E05EFACEA2B789C0DF5DD
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/32372e302e3136362e302f32332d3233203d3e203633363134.roa
Signing time:             Tue 12 May 2026 09:05:12 +0000
ROA not before:           Tue 12 May 2026 09:00:12 +0000
ROA not after:            Tue 11 May 2027 09:05:12 +0000
asID:                     63614
IP address blocks:        27.0.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:56:ac:cf:15:c7:d5:93:66:8e:05:ef:ac:ea:2b:78:9c:0d:f5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 12 09:00:12 2026 GMT
            Not After : May 11 09:05:12 2027 GMT
        Subject: CN=7C4E5F3BF3E0CE4D5C5C3C6C231919E26421BB2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:e9:32:1b:c2:e3:0d:1e:cd:89:f0:18:1d:
                    3d:4a:b6:45:5e:58:b6:e9:b3:16:ca:9c:d6:6a:6b:
                    ac:26:00:45:19:00:d0:df:5f:11:e9:a7:41:73:9f:
                    cd:3b:10:94:ed:ba:3b:84:78:54:35:d8:c3:a3:db:
                    66:7a:6d:31:84:52:25:60:f2:f3:2f:d4:06:3e:f3:
                    53:83:37:32:11:3a:e2:9a:9c:5f:36:1c:45:45:ce:
                    fa:f5:8e:fa:f2:17:65:48:aa:36:bf:2f:df:a9:16:
                    84:3f:68:60:02:82:cc:7b:52:ed:05:51:2f:a1:21:
                    67:59:37:f9:b3:34:96:4d:67:a2:07:e8:42:0d:e7:
                    27:b0:8e:f8:bc:78:ff:99:e1:1f:44:52:10:09:da:
                    a5:a0:14:a0:91:48:40:56:2a:db:94:0c:62:5f:6e:
                    bc:5a:8b:24:f0:9a:cc:a6:0d:c7:9f:8a:47:b1:9c:
                    00:30:09:70:f0:e5:bd:0e:23:44:02:c8:93:c5:f0:
                    42:db:96:dc:8d:b8:17:07:1e:d9:f7:b9:46:c1:35:
                    ed:13:02:44:49:1b:74:f7:01:f2:03:4f:10:f3:29:
                    51:f0:86:4a:cc:3d:42:9e:43:fd:00:18:7d:b8:b8:
                    c7:e1:f1:ed:85:49:89:b5:2e:1e:7c:07:28:12:a7:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:5F:3B:F3:E0:CE:4D:5C:5C:3C:6C:23:19:19:E2:64:21:BB:2F
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/32372e302e3136362e302f32332d3233203d3e203633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:9f:fc:4b:51:83:47:4a:be:00:86:d4:e9:94:f9:b7:bd:41:
         d9:e7:77:0f:15:a5:f9:b4:2f:cb:d0:11:1e:75:23:3f:bc:b4:
         14:5a:6d:2a:55:df:fd:3a:a2:17:53:66:e7:5a:5a:a9:d4:86:
         8f:8e:a4:e1:c5:5f:23:dc:64:c3:51:cf:fb:5c:a9:63:33:01:
         50:2a:92:fb:a7:87:92:ce:36:97:fc:bc:84:f4:95:38:18:b8:
         a0:19:40:d2:56:2c:3c:d6:15:d1:35:6c:f8:68:8f:43:3b:56:
         09:dd:18:c1:8c:ab:eb:c4:64:83:5c:94:fb:3b:93:70:44:39:
         9e:41:cb:a7:09:7d:17:ef:30:09:ab:44:e5:e4:60:5a:7e:9d:
         d5:c0:cc:d1:91:22:3a:ac:1e:73:a2:2a:c0:8a:42:2d:42:6d:
         d3:25:d8:bc:26:69:94:30:d5:92:99:89:66:6c:3f:32:17:60:
         e9:c7:e5:50:b9:d6:2e:2a:91:8e:28:50:b3:4f:9f:7d:4b:70:
         e1:f9:4b:c6:20:72:d2:08:c4:2d:94:82:5e:3a:15:ca:9b:f6:
         98:84:6b:82:0a:29:64:56:a9:3e:25:2a:32:1e:9e:3f:9a:46:
         81:c6:35:83:62:a8:94:1f:40:95:ed:9a:e0:2c:02:15:56:19:
         ee:90:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:13 2026 by rpki-client