Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32342d3234203d3e203233363530.roa
File:                     32372e302e3230342e302f32342d3234203d3e203233363530.roa (raw, json)
Hash identifier:          kmojd1hZzl8eLQcyhLIgSj+c6qsc+7TrYy2dOio3d9M=
Subject key identifier:   A1:30:C8:32:62:44:5E:A1:C4:E4:14:CC:99:8F:59:D1:7A:97:D0:D0
Certificate issuer:       /CN=9B22C19D842E45AA84439366694E4C828C309CEE
Certificate serial:       7B0AB14F0AEE73E1C9038682EEB7FCB5AF6DB956
Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32342d3234203d3e203233363530.roa
Signing time:             Thu 16 Apr 2026 09:10:33 +0000
ROA not before:           Thu 16 Apr 2026 09:05:33 +0000
ROA not after:            Thu 15 Apr 2027 09:10:33 +0000
asID:                     23650
IP address blocks:        27.0.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0a:b1:4f:0a:ee:73:e1:c9:03:86:82:ee:b7:fc:b5:af:6d:b9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE
        Validity
            Not Before: Apr 16 09:05:33 2026 GMT
            Not After : Apr 15 09:10:33 2027 GMT
        Subject: CN=A130C83262445EA1C4E414CC998F59D17A97D0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:67:eb:5a:cc:a7:6e:a7:54:28:b0:3e:0d:
                    6b:9a:38:dd:23:8b:79:2f:86:3e:d0:5d:58:94:a9:
                    04:bf:26:16:d1:7e:84:5b:ea:ab:16:c4:27:00:18:
                    d1:12:42:9d:81:d1:ea:61:c9:fd:0f:81:0d:cf:cd:
                    40:b8:61:83:86:ea:b7:8b:4a:9f:6f:2d:68:f1:77:
                    6d:e9:29:93:b2:d6:bc:b0:27:da:e1:3a:04:13:9e:
                    c5:39:58:eb:73:4e:d2:43:db:0e:0f:6a:7a:58:0c:
                    03:5f:e7:66:f2:59:28:c4:30:eb:ea:0b:22:02:a8:
                    69:1f:44:34:14:3e:d3:6d:3a:60:c2:56:e2:77:96:
                    86:06:0c:1f:2e:07:3e:c2:84:21:50:0e:f3:ca:cb:
                    61:15:fe:eb:de:5d:28:cf:73:a0:ba:c0:d4:d2:bc:
                    f5:18:1d:ab:e4:f5:95:4a:13:b5:58:c6:e1:d0:66:
                    41:84:62:eb:ae:ba:bc:5b:25:76:6d:8a:72:3a:45:
                    30:fd:3d:eb:d6:fd:57:6c:ce:db:a0:8b:3c:26:9e:
                    f4:12:8b:1d:be:b2:b8:39:3c:dc:bf:6a:c3:45:1d:
                    31:b4:ce:51:5f:3f:79:74:d9:33:f9:b4:9f:72:52:
                    3c:e1:5e:73:73:3f:fa:1d:68:a3:4b:d4:5c:c5:c8:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:C8:32:62:44:5E:A1:C4:E4:14:CC:99:8F:59:D1:7A:97:D0:D0
            X509v3 Authority Key Identifier:
                keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32342d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:17:92:58:8d:d7:7f:54:0d:4e:65:aa:4e:2f:2d:04:85:
         a8:6b:e3:65:44:dc:55:db:4d:dc:57:49:9c:7c:64:e1:d7:de:
         14:0e:ab:12:ca:0f:54:a6:79:33:02:69:93:0c:6c:b9:58:50:
         94:e2:d9:60:65:6b:eb:5b:3c:eb:5a:67:79:28:37:0d:ab:b8:
         54:21:fc:25:0f:a2:95:89:ca:1a:30:e1:05:cf:ed:3a:4b:40:
         eb:a9:8f:b7:9d:99:1b:1c:f2:9b:b9:c9:df:86:46:06:94:82:
         f5:3e:10:a1:21:80:6c:fb:65:36:eb:b5:e3:cf:f0:1c:62:a5:
         47:13:f5:db:60:62:89:ca:de:8d:13:a9:be:69:f8:1d:b4:7b:
         89:32:c5:07:2b:e1:2c:61:1f:30:93:44:eb:77:80:bc:e5:a4:
         99:b4:46:8a:fd:59:cc:8e:81:ef:cd:63:07:50:6b:0f:3c:09:
         43:5f:5c:9e:53:b4:aa:02:27:a6:95:6d:43:fd:df:67:a3:41:
         1f:77:a0:05:9b:fb:5b:1e:45:a6:cd:00:18:a9:98:f5:85:56:
         84:9d:e4:90:eb:ef:fc:78:cf:a4:e7:99:72:1d:bd:c0:c6:82:
         84:46:1c:76:45:36:d3:d8:1b:6a:4e:08:c6:32:92:58:e1:b4:
         6b:02:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:39 2026 by rpki-client