Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37372e302f32342d3234203d3e20313337373938.roa
File:                     3231302e37362e37372e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          VcJRj2qDC4dJVO9GS/bULKUc3EJf+3o1NsQxWHUg/mw=
Subject key identifier:   7D:94:06:40:FB:55:12:0A:DE:E9:AB:75:06:DA:0A:5D:0F:61:5A:E8
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       3736B9901879D856E3593B9ED0BC7146BD144B64
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37372e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:44:48 +0000
ROA not before:           Thu 16 Apr 2026 08:39:48 +0000
ROA not after:            Thu 15 Apr 2027 08:44:48 +0000
asID:                     137798
IP address blocks:        210.76.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:36:b9:90:18:79:d8:56:e3:59:3b:9e:d0:bc:71:46:bd:14:4b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:39:48 2026 GMT
            Not After : Apr 15 08:44:48 2027 GMT
        Subject: CN=7D940640FB55120ADEE9AB7506DA0A5D0F615AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:62:eb:34:68:0e:3c:39:66:69:9c:39:0e:
                    b2:26:7c:fb:74:2e:25:54:60:1e:73:27:ec:ef:85:
                    50:2c:0c:1e:6f:22:55:7f:b1:fc:22:60:e8:44:9a:
                    42:28:82:f7:0b:52:4e:21:40:09:90:bb:33:71:9c:
                    bc:97:12:e7:c0:d7:dd:df:fb:01:ae:00:96:3d:79:
                    11:c0:d0:2f:bf:19:49:ac:bf:9b:0f:01:03:98:92:
                    34:6c:a1:fc:c3:7a:ac:8d:84:e2:7f:32:a4:be:de:
                    76:38:a1:31:c4:e4:f5:c4:f6:b5:2f:eb:b5:5f:e9:
                    19:b4:7d:e2:2c:98:24:39:29:25:2e:dd:90:97:57:
                    ea:82:da:c5:5d:c1:5a:5d:fb:59:48:76:81:ff:1e:
                    65:f2:e8:d7:99:86:20:76:02:d5:91:60:85:5d:32:
                    b3:a9:d8:dc:73:a6:8c:95:bc:36:a6:88:f8:c1:ea:
                    db:28:98:dd:c3:d2:ef:98:fc:a4:4d:2d:07:45:20:
                    f4:ee:34:9e:bf:26:79:15:8c:0d:28:d4:0b:cf:56:
                    f9:a8:78:5e:c0:68:94:64:69:b4:bf:4f:cc:7c:8c:
                    41:f1:5c:30:28:9e:e5:a0:07:9f:d4:8b:1b:7e:da:
                    8f:13:ca:dd:27:94:37:79:31:1c:42:c6:3e:71:99:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:94:06:40:FB:55:12:0A:DE:E9:AB:75:06:DA:0A:5D:0F:61:5A:E8
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e37372e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:b8:ad:dc:03:a0:96:67:7b:85:cc:fb:aa:a5:06:dd:08:
         6f:80:5d:c9:36:33:5e:81:0d:e0:ea:5a:5b:6a:a3:d9:f4:ff:
         65:22:29:59:35:70:e0:21:46:be:4d:de:03:d8:7d:0c:59:87:
         f5:76:8a:60:c3:51:1a:b7:ca:48:a2:41:45:bc:ed:5e:8f:cf:
         95:33:eb:f8:dc:87:60:e9:e4:50:e2:9a:a9:d8:03:de:f8:21:
         23:1e:fa:bf:39:51:9c:53:f9:d4:5a:81:e3:7d:08:17:e1:ca:
         c9:15:fe:25:e2:00:ae:31:48:90:cc:e7:8c:03:66:bd:49:27:
         a6:b4:a4:55:b6:69:b7:43:fb:33:4d:90:35:7c:10:f6:d4:15:
         ff:56:40:07:4c:84:72:a3:a0:c7:7a:ea:94:c3:b8:85:f3:4a:
         fe:bf:bf:24:c9:31:35:5f:70:29:e8:8b:af:ab:46:80:18:b5:
         d4:4a:5a:49:71:17:f9:7a:cc:69:38:26:46:7b:77:11:81:05:
         ee:86:c1:53:9f:f9:83:86:b7:d3:1f:65:c2:3a:a0:14:61:77:
         ab:f5:1a:24:f2:30:5d:e6:e8:0a:14:d2:eb:12:d2:1a:02:dd:
         22:61:9f:5f:21:f7:a8:69:cb:23:da:ee:c3:68:96:ac:cc:d9:
         04:d5:90:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:29 2026 by rpki-client