Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e34382e302f32302d3234203d3e203337393633.roa
File:                     3131302e37362e34382e302f32302d3234203d3e203337393633.roa (raw, json)
Hash identifier:          LtC8RzHh7EbRr5/DXsPn3/kNp3I+Is8WPl/3olH7Ijs=
Subject key identifier:   27:7C:9D:4A:77:EB:73:40:88:53:19:3A:23:C8:51:73:67:7B:B5:F3
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       737C1E5ECC59709E5B69A1E5719B8F6C7EB9B446
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e34382e302f32302d3234203d3e203337393633.roa
Signing time:             Fri 27 Mar 2026 16:06:43 +0000
ROA not before:           Fri 27 Mar 2026 16:01:43 +0000
ROA not after:            Fri 26 Mar 2027 16:06:43 +0000
asID:                     37963
IP address blocks:        110.76.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7c:1e:5e:cc:59:70:9e:5b:69:a1:e5:71:9b:8f:6c:7e:b9:b4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Mar 27 16:01:43 2026 GMT
            Not After : Mar 26 16:06:43 2027 GMT
        Subject: CN=277C9D4A77EB73408853193A23C85173677BB5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:7b:c5:22:97:f6:e0:e0:53:bd:4a:3a:1f:
                    a7:c4:6f:5f:82:ac:fb:fb:9b:b9:8a:d8:8b:24:ce:
                    47:64:cc:de:66:ed:36:07:3c:2c:d5:7d:e2:f6:96:
                    dc:a5:07:c5:a8:a5:64:41:06:30:29:93:85:9f:94:
                    ac:86:24:84:ed:1a:42:89:8e:ce:4c:44:c5:3c:f3:
                    9d:39:45:7c:e4:ca:d4:93:2f:30:29:a9:81:da:a6:
                    a7:3d:ef:98:36:ee:ef:e7:c0:b0:bc:a0:fd:a4:c9:
                    8f:e5:93:a3:a4:1b:fb:04:29:b6:bc:e0:34:2e:c6:
                    c1:9c:63:27:f8:38:d6:44:6d:4c:69:2f:85:7d:70:
                    2c:4b:c7:d9:aa:43:ca:8b:b8:c1:40:b0:a2:9e:6b:
                    16:94:34:89:6d:d7:fc:5f:2b:30:15:28:b5:50:1a:
                    5c:50:39:09:e3:1a:13:56:2f:9f:5a:9e:d8:35:91:
                    d9:2d:7a:42:09:8c:b0:45:30:35:67:d8:8c:8a:f5:
                    13:bf:ba:a4:33:c9:15:0b:8e:df:41:69:3f:03:60:
                    b9:7f:15:d8:aa:f5:3f:4b:35:19:5e:09:f9:b7:78:
                    32:91:22:ea:99:72:e4:6e:ec:7f:f7:6d:0a:bb:1d:
                    a3:76:a0:2b:6e:09:85:24:90:76:46:d2:0b:8d:46:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7C:9D:4A:77:EB:73:40:88:53:19:3A:23:C8:51:73:67:7B:B5:F3
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3131302e37362e34382e302f32302d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:43:6a:4a:aa:75:9c:6d:ef:34:9a:7e:06:81:e5:36:be:41:
         93:eb:0c:3d:32:54:54:50:cc:a2:ea:ef:a3:6d:ce:17:cd:03:
         d5:82:9d:8f:99:f0:50:f0:9f:4d:e9:17:93:15:9b:c3:50:83:
         33:71:d7:a1:34:bd:cd:26:b1:2e:72:ce:f7:9f:a7:45:19:74:
         cf:00:54:af:39:92:77:b0:cc:f3:b8:68:8c:98:08:58:3b:03:
         2c:b4:f5:b0:10:06:03:63:26:85:be:e4:66:e9:ab:24:45:50:
         3b:0a:15:50:aa:56:1c:44:03:f4:47:a5:76:47:fa:ae:8c:42:
         a7:63:77:e4:20:e8:22:7e:c3:07:63:26:02:ef:9d:b1:04:88:
         fe:46:b2:c8:7d:0c:84:09:3b:80:68:53:a2:2c:fe:70:14:b6:
         4a:f9:ae:e7:f6:4a:a7:13:ee:14:c0:19:aa:52:b9:d7:88:2e:
         e1:65:60:28:7f:cf:04:52:59:46:bd:ae:8b:f1:be:d4:6d:a4:
         34:e7:5a:48:fb:4c:a6:d1:b2:05:a1:a9:c9:d5:b5:a5:56:2f:
         0b:83:7a:40:ce:05:db:7a:2d:d6:fd:d0:7a:20:ae:77:6f:d3:
         81:77:bf:0a:c1:06:c9:17:de:f7:b7:28:ce:ba:06:81:15:32:
         e8:4c:85:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:55 2026 by rpki-client