Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e2034383337.roa
File:                     3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=
Subject key identifier:   EE:5C:3A:B6:14:0B:D4:13:39:A5:20:EA:CF:7F:21:78:A7:59:53:15
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       04F41E27499F886E8FE32F26479C26EB0AD4DABF
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e2034383337.roa
Signing time:             Tue 14 Apr 2026 01:45:27 +0000
ROA not before:           Tue 14 Apr 2026 01:40:27 +0000
ROA not after:            Tue 13 Apr 2027 01:45:27 +0000
asID:                     4837
IP address blocks:        218.98.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f4:1e:27:49:9f:88:6e:8f:e3:2f:26:47:9c:26:eb:0a:d4:da:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:27 2026 GMT
            Not After : Apr 13 01:45:27 2027 GMT
        Subject: CN=EE5C3AB6140BD41339A520EACF7F2178A7595315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:37:82:6c:25:a9:79:f3:d6:e0:b1:01:19:
                    72:d5:0b:4b:10:b6:a4:2d:58:98:d3:c8:d3:e7:2f:
                    4f:9d:4d:d4:40:30:e5:81:de:07:e1:09:44:c2:2a:
                    d2:5f:50:3b:4c:8e:5f:6f:9e:c3:f3:41:7c:ab:29:
                    7e:35:1d:06:ce:82:bd:dc:d4:55:db:e8:3c:d3:8d:
                    91:ed:42:5a:04:10:b3:ef:5d:ba:29:53:fd:9c:f6:
                    49:53:28:e4:9e:a0:94:b5:42:9d:02:31:5d:87:63:
                    98:07:6c:d1:db:85:c1:85:04:ee:f6:7a:d5:a8:0f:
                    c3:86:45:e9:90:5e:ba:48:18:64:2d:6c:9d:a2:52:
                    cc:1f:82:1a:bf:81:84:a2:05:5f:56:89:fa:c3:56:
                    ad:d7:d8:0a:6b:89:90:f3:96:aa:cb:9d:d7:13:3e:
                    6f:8b:17:d9:5d:e7:b9:e9:6f:f4:69:50:8c:1f:7f:
                    5f:80:16:bd:ea:76:52:a7:04:0d:1d:51:75:38:e6:
                    f9:e2:b9:12:eb:ba:9b:69:35:b8:8b:f3:74:3f:fa:
                    d4:b2:5e:ad:05:42:c9:0f:5b:56:bc:8c:92:35:ec:
                    f1:17:9e:05:f5:f7:00:c6:0a:e5:17:00:f3:89:77:
                    02:90:e5:f2:51:2f:3e:fb:0a:fa:02:e1:66:6f:9a:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5C:3A:B6:14:0B:D4:13:39:A5:20:EA:CF:7F:21:78:A7:59:53:15
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3137362e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:35:18:ee:b2:d5:0f:e6:83:1c:b4:f8:12:50:b8:ba:50:a9:
         b5:7d:7c:18:76:6b:5e:b0:33:6c:da:6e:6e:a4:9d:34:94:63:
         47:04:29:ad:ac:d8:fb:61:6c:cb:51:bf:a8:27:b5:fd:b2:7a:
         85:16:08:5c:41:41:fe:89:30:e2:c2:01:2e:3d:1d:d1:67:6b:
         9d:8b:fe:8f:23:87:40:53:50:f2:8d:0d:c1:0d:a0:20:ab:ba:
         fb:41:12:02:13:6f:b4:aa:ac:03:d1:14:ee:ad:15:12:d6:79:
         3f:e0:f3:ef:ed:b0:88:8d:11:3c:86:c7:42:d9:a3:ca:8c:15:
         3e:49:cc:a0:54:cc:f7:62:bb:b6:bd:b3:d8:d9:7a:e8:49:51:
         2f:18:86:64:f3:3e:25:e5:56:f5:f4:40:56:6a:c4:bc:23:d8:
         3b:87:75:e7:2a:44:b1:12:26:6c:b7:a8:29:fb:81:30:ea:fa:
         0a:73:94:48:cf:d6:f0:a2:84:ec:71:f5:03:bb:ef:4b:90:61:
         1e:af:28:b9:d2:b0:ef:10:dc:9f:f7:d0:ba:25:8c:5c:1d:54:
         16:7b:da:20:b6:ee:a5:2d:a6:b2:a9:84:67:ae:b6:fa:48:2c:
         de:2d:12:b1:4a:a5:98:c5:5c:17:5a:dc:c2:08:f5:0b:6a:e7:
         73:06:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:41 2026 by rpki-client