Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa
File:                     3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier:          8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=
Subject key identifier:   80:20:66:36:84:A8:21:C1:74:EC:4B:52:07:33:30:B7:A5:01:A5:EB
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       68B445839D700450610E01E32C129E6002AAB159
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa
Signing time:             Tue 14 Apr 2026 01:45:28 +0000
ROA not before:           Tue 14 Apr 2026 01:40:28 +0000
ROA not after:            Tue 13 Apr 2027 01:45:28 +0000
asID:                     146841
IP address blocks:        218.98.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b4:45:83:9d:70:04:50:61:0e:01:e3:2c:12:9e:60:02:aa:b1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:28 2026 GMT
            Not After : Apr 13 01:45:28 2027 GMT
        Subject: CN=8020663684A821C174EC4B52073330B7A501A5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:d6:42:e6:d5:c1:2b:04:db:6b:e2:bc:fc:
                    6a:c9:8b:9b:68:b2:0c:77:d2:a6:ea:29:32:77:e9:
                    29:cc:c7:b7:d4:51:f7:ac:d3:6b:2f:0c:6a:ca:f0:
                    97:5d:68:c5:e7:f2:7f:34:03:ae:b0:0f:2c:fc:65:
                    16:9f:b6:82:d5:21:d2:43:7d:4b:02:76:89:17:38:
                    bf:1b:67:75:36:b1:d1:95:6a:35:33:5f:1e:0f:fa:
                    f7:73:6c:94:2a:5d:07:ef:9a:26:63:ba:bc:d1:87:
                    ee:d5:36:4b:00:0f:8c:ec:c5:96:e3:6a:5c:74:77:
                    62:65:20:8d:56:0d:a7:d9:7b:0f:77:09:d4:8d:73:
                    d4:c6:7c:34:56:44:47:83:c6:7c:b5:25:f3:b7:7d:
                    5e:7a:88:0d:1a:e4:af:0f:47:64:23:bf:9e:9f:53:
                    28:c7:b5:45:31:5a:2e:f8:7b:79:fd:83:07:90:32:
                    69:c0:86:61:22:ad:a1:0f:7b:ee:fe:bd:4e:18:5d:
                    ec:b8:ec:7f:e8:21:7b:8f:af:eb:0f:cb:0c:18:11:
                    7b:5c:dc:3b:2f:3a:69:70:61:49:c7:eb:a4:a6:34:
                    d1:32:3f:15:82:0d:22:6a:f0:ea:9d:00:fc:24:99:
                    76:fe:c6:79:40:f9:79:b8:e4:e7:b2:bc:57:88:26:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:20:66:36:84:A8:21:C1:74:EC:4B:52:07:33:30:B7:A5:01:A5:EB
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:2e:71:92:4f:a8:1c:6a:6b:c1:9f:3e:03:e2:a4:d2:75:
         c7:3b:45:7d:a5:00:59:51:d5:1b:3e:ac:51:02:9c:a7:6a:04:
         dd:71:5c:8f:63:e6:8e:6e:77:1b:0a:94:0e:a5:4d:8b:39:50:
         6c:81:9d:f9:39:7a:f0:c8:43:10:f7:af:39:d5:28:30:c3:d2:
         da:fd:e5:4b:f6:e9:3b:e9:c7:b5:8d:e4:ce:14:c8:2a:71:57:
         9a:59:63:22:26:af:eb:75:56:a3:c6:1e:42:35:81:23:b9:6a:
         ff:ff:2d:cc:a6:32:b8:17:1e:fc:3e:98:bc:3f:fe:4d:39:46:
         a3:05:a8:b4:b4:ce:df:df:55:aa:17:3d:a5:76:0e:35:00:ea:
         83:0d:10:e8:70:dc:d2:48:0f:80:bb:61:42:8a:89:fb:63:ab:
         1b:6c:68:ec:db:cc:a8:7e:d9:f8:9e:1f:e9:8c:c6:0d:9d:c9:
         69:da:f0:f8:fe:16:fe:77:99:13:eb:3f:5e:92:e2:73:fc:a1:
         b0:5a:e9:e8:8b:f5:ad:8a:ed:98:6c:fa:66:48:8b:b1:a4:44:
         35:97:9e:39:61:c0:ab:b6:77:38:24:4f:7e:70:66:cf:cb:57:
         cf:0f:0e:ea:22:ea:69:dc:df:4d:66:8e:68:36:ec:67:3a:b5:
         7a:59:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:30:45 2026 by rpki-client