Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa
File:                     3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier:          BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=
Subject key identifier:   83:9A:20:BF:63:D7:93:E6:90:4F:C7:72:FB:4A:66:8B:4C:7B:94:EF
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       2BF259841C806B2344AFEAE5F8A63E1AC1B8E2AE
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa
Signing time:             Tue 14 Apr 2026 01:45:27 +0000
ROA not before:           Tue 14 Apr 2026 01:40:27 +0000
ROA not after:            Tue 13 Apr 2027 01:45:27 +0000
asID:                     146841
IP address blocks:        218.98.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f2:59:84:1c:80:6b:23:44:af:ea:e5:f8:a6:3e:1a:c1:b8:e2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:27 2026 GMT
            Not After : Apr 13 01:45:27 2027 GMT
        Subject: CN=839A20BF63D793E6904FC772FB4A668B4C7B94EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:22:32:fa:eb:ae:5f:8f:d8:63:96:10:1e:
                    93:d8:29:a3:fe:ab:cc:d6:10:36:7f:16:31:5f:f5:
                    f2:9c:bc:4d:45:85:0f:ba:92:59:e8:3e:bb:9e:35:
                    d8:fa:67:4c:e5:fc:41:5e:a3:c8:ca:ef:84:50:ac:
                    07:e5:98:b6:0a:f1:da:83:5f:fc:10:e8:1c:49:2c:
                    69:49:f2:bc:3a:46:7a:fd:76:87:4b:f7:41:5a:52:
                    09:40:19:c1:be:3f:d7:83:e8:96:7c:7e:01:dc:7e:
                    ff:18:92:4d:a3:98:ef:2b:f8:ca:0f:96:78:dc:7f:
                    fa:f2:e1:30:a8:22:49:eb:4f:18:2c:2c:71:bd:e5:
                    4e:8e:78:d8:ff:c1:1f:e9:20:ab:78:5e:fd:ef:13:
                    d3:20:af:ef:a4:07:ee:09:0b:96:7f:f3:3c:3b:e6:
                    f2:b8:b8:d4:3b:6b:75:2a:77:99:36:1a:d7:24:07:
                    90:28:d8:d4:2a:74:fe:69:0a:af:c2:34:31:f8:2f:
                    be:10:18:d6:3d:e0:58:2b:ea:2c:b4:9d:e2:ad:15:
                    08:5a:0b:83:81:b8:f7:44:06:1b:15:ce:d9:24:33:
                    2e:11:3c:4a:11:f7:d7:7e:0e:ee:16:3d:ea:f5:dc:
                    53:7f:d9:58:92:ef:8e:d4:f9:c8:a3:44:db:3b:96:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:20:BF:63:D7:93:E6:90:4F:C7:72:FB:4A:66:8B:4C:7B:94:EF
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:dc:3d:0c:eb:eb:b5:df:7b:23:ef:e9:44:03:d7:39:6e:2c:
         03:e2:65:b7:99:19:1f:79:90:d3:2b:a1:1e:e9:fc:6e:66:2d:
         7a:05:0f:9d:02:86:06:79:58:66:97:f2:c6:fb:bf:50:2b:c6:
         9d:a9:f0:f1:6c:1a:75:86:ce:86:43:f9:be:10:bb:93:31:7e:
         f1:d7:6b:cc:dc:61:45:b1:91:4f:83:d7:65:e4:05:d1:7a:aa:
         c9:2d:f4:fd:ab:74:fe:8a:d6:ee:17:59:88:f7:35:d8:96:b1:
         cc:ff:c3:57:81:87:8f:70:f6:e5:bf:51:54:35:ea:65:17:a8:
         85:81:99:e3:75:be:27:6c:5f:0f:f4:68:64:08:51:7f:fa:5f:
         66:4b:6b:ac:f1:8d:d0:8a:eb:a6:9e:cc:ca:53:21:54:83:cb:
         5f:b0:df:a6:83:2c:ec:16:18:10:2b:d1:46:79:fd:c7:53:03:
         ff:8d:2a:42:cc:07:5d:8c:5b:b7:76:07:64:e9:ae:53:8f:4b:
         73:c4:b4:5e:c1:70:14:78:d0:94:13:24:60:31:98:7d:46:42:
         35:e2:2b:e9:81:36:5c:d9:d1:3c:ba:a9:31:de:92:21:54:66:
         72:8f:b0:3d:83:f2:5a:4c:54:a0:82:38:50:22:a6:73:c3:fa:
         fd:ef:e1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:57 2026 by rpki-client