Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa
File:                     3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier:          W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=
Subject key identifier:   0D:72:C9:FC:AE:99:98:66:26:78:C3:65:3E:C9:55:49:67:98:FD:9C
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       17C90A01590A2ADD5784E0E98181931592A01F70
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa
Signing time:             Tue 14 Apr 2026 01:45:27 +0000
ROA not before:           Tue 14 Apr 2026 01:40:27 +0000
ROA not after:            Tue 13 Apr 2027 01:45:27 +0000
asID:                     146841
IP address blocks:        218.98.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:0a:01:59:0a:2a:dd:57:84:e0:e9:81:81:93:15:92:a0:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:27 2026 GMT
            Not After : Apr 13 01:45:27 2027 GMT
        Subject: CN=0D72C9FCAE9998662678C3653EC955496798FD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:b7:33:e7:f6:2d:8e:62:4e:bc:e1:c2:9a:
                    db:22:da:a1:dc:49:f1:fe:cb:1b:ed:0d:03:0d:4e:
                    45:24:8e:81:c1:33:e2:27:f7:e3:54:73:01:d8:0c:
                    91:d1:d2:fd:d1:74:bf:a7:bc:c5:87:5a:56:a9:d3:
                    09:59:9e:3f:8d:9a:56:3c:c3:ab:a5:95:9c:90:15:
                    32:46:c7:00:1e:0c:a4:87:92:66:cb:cc:3a:a9:49:
                    ab:23:fd:ff:ca:7d:c0:dc:eb:d8:8e:11:de:85:59:
                    75:7b:b2:32:67:38:e7:95:ab:d4:fa:33:de:ff:b0:
                    2f:56:2f:a3:41:1e:33:57:96:05:21:ba:d6:89:1a:
                    73:9e:e8:7e:f2:1e:ee:5c:de:9f:0b:d0:82:54:9c:
                    e7:e4:61:01:53:cb:b8:3f:bf:29:26:cf:6c:d7:84:
                    05:9a:36:ab:34:9c:a8:70:7e:59:2d:e5:4d:17:c6:
                    91:8f:be:05:97:b3:90:e0:b0:a2:79:c1:aa:02:02:
                    d4:35:02:ed:cf:bf:79:39:43:54:ef:49:58:98:3c:
                    06:0b:d5:b6:c4:39:c3:ad:fc:ff:96:6c:37:55:db:
                    5b:46:84:7a:9d:a7:ef:08:10:6c:db:68:92:b0:0f:
                    db:c2:47:66:fb:27:33:a5:36:5f:67:48:17:63:d7:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:C9:FC:AE:99:98:66:26:78:C3:65:3E:C9:55:49:67:98:FD:9C
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d3:f6:17:dc:1d:29:fe:f0:1c:d3:d2:94:de:c8:ec:38:44:
         83:8d:0f:9b:6d:b0:8f:c7:ee:e1:ce:31:13:06:22:6a:7f:d3:
         eb:78:32:9c:ff:0e:d2:2c:42:af:69:a1:9e:89:b1:e6:26:56:
         ef:99:7d:ad:b1:9e:0c:f5:c1:7e:a1:60:5c:b7:f9:cd:c1:2a:
         66:1c:39:e1:61:6e:58:4c:94:31:e6:3c:88:0b:1d:ab:30:3a:
         63:4c:34:70:86:03:7e:7c:67:64:bc:9c:58:9a:08:66:5b:e9:
         5b:5a:36:02:a7:71:6b:fd:84:fd:3f:71:97:66:a7:83:aa:fa:
         1d:99:25:49:8b:16:cc:9f:b2:a5:8c:2b:32:e9:06:c9:77:a9:
         f1:a7:61:aa:e3:fb:c5:85:08:b5:46:a5:34:dd:e7:27:75:c1:
         9f:e5:a4:71:ed:3a:cf:69:e6:e4:74:06:b4:4e:b1:72:3f:c1:
         53:c6:51:7b:5d:b7:b7:ad:b5:69:a3:8a:cd:4e:95:97:1b:c7:
         ff:54:09:54:7c:4d:66:cc:a3:1f:35:03:55:9f:a8:78:58:29:
         e1:43:3d:81:e6:bf:6c:f9:9d:4f:35:97:ec:90:c8:e6:29:57:
         eb:21:71:3a:1a:6d:d9:c7:62:1c:46:bb:8f:10:e7:dc:7c:d3:
         06:be:20:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:53 2026 by rpki-client