Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139322e302f32342d3234203d3e203538353432.roa
File:                     3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier:          ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=
Subject key identifier:   E2:7F:9D:49:74:0A:D7:51:2B:14:B8:8F:8B:0D:48:34:12:B1:D8:72
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       1EA45BAE8ABBA44CB32D9A177E26FD576BD47686
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139322e302f32342d3234203d3e203538353432.roa
Signing time:             Tue 14 Apr 2026 01:45:27 +0000
ROA not before:           Tue 14 Apr 2026 01:40:27 +0000
ROA not after:            Tue 13 Apr 2027 01:45:27 +0000
asID:                     58542
IP address blocks:        218.98.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a4:5b:ae:8a:bb:a4:4c:b3:2d:9a:17:7e:26:fd:57:6b:d4:76:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:27 2026 GMT
            Not After : Apr 13 01:45:27 2027 GMT
        Subject: CN=E27F9D49740AD7512B14B88F8B0D483412B1D872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:22:6d:34:6d:58:96:5a:b2:2c:71:6d:f8:
                    cf:da:d2:ef:9b:c1:e3:ff:f9:39:9b:71:03:15:c1:
                    99:da:56:c0:05:1d:c2:4d:42:9b:9e:ed:b7:37:c5:
                    c1:30:d4:e4:f9:aa:68:72:4c:0f:1c:8f:e2:b1:a9:
                    6e:62:3c:9c:49:0c:97:2a:ea:67:58:02:43:dc:8b:
                    84:31:74:c7:37:41:28:ef:f7:53:5d:6b:8f:cd:09:
                    fc:73:cb:21:f6:a5:85:3d:e6:66:e9:fd:5a:06:c8:
                    16:07:2e:49:ad:e0:e6:cc:98:78:3b:c8:49:75:d6:
                    32:bf:9f:fa:af:d4:38:60:02:d7:f0:98:50:6c:6a:
                    80:75:42:89:74:48:e9:b7:e9:3a:d2:ae:2a:3d:a7:
                    a5:db:73:d9:c3:20:ff:6f:cd:28:bd:c1:fe:29:47:
                    85:74:de:c0:6a:e1:11:b2:de:a3:d9:33:6e:95:46:
                    18:18:aa:b2:32:2d:a8:b3:9c:dd:19:90:88:f0:ae:
                    ba:6f:7e:bf:db:21:24:24:6d:f8:1e:8f:53:d9:de:
                    45:9b:45:c9:16:99:52:a4:63:b6:f1:f0:18:87:77:
                    92:d0:69:11:d3:f2:50:3f:72:0e:b1:4a:7a:88:13:
                    61:d1:89:44:cc:8a:57:52:c9:ed:56:ad:42:9f:a0:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7F:9D:49:74:0A:D7:51:2B:14:B8:8F:8B:0D:48:34:12:B1:D8:72
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139322e302f32342d3234203d3e203538353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:9d:26:d4:b1:53:8c:2f:a7:f6:d5:44:89:8a:b6:19:79:
         18:0f:3c:ee:16:c4:67:16:81:c6:26:94:ea:0d:9e:b0:ce:6c:
         9e:70:ea:41:98:2f:a6:83:bf:1f:20:b5:4e:d1:bd:70:7b:76:
         76:12:ed:45:07:cc:b8:4d:84:37:e4:ad:3c:c5:59:e0:5e:68:
         e2:06:33:dc:5c:05:dd:d9:85:0c:47:7d:42:91:e8:42:3a:35:
         27:15:6b:0d:cb:e0:a2:98:78:63:ae:27:3f:39:23:2e:a6:81:
         40:aa:36:cb:a4:85:fa:8d:f6:04:a7:8d:87:7b:7e:6e:a5:b1:
         52:b1:41:17:c1:9a:33:af:2f:ac:1d:ad:c2:89:7c:7a:b6:dc:
         72:c8:09:d9:86:e5:9a:06:59:21:57:8f:e7:f2:73:13:84:7c:
         d8:f2:40:ef:82:96:5e:28:97:a4:a9:f5:61:31:16:71:3a:6c:
         ec:cb:b2:dc:17:39:74:e4:74:0e:c8:33:97:2d:13:18:8d:73:
         92:73:ab:71:d4:c2:74:51:1e:8d:9c:90:a9:ae:d7:bb:d4:82:
         c6:dc:b5:d7:2f:4d:88:14:c1:1c:1e:41:cc:21:40:3a:29:06:
         0c:0f:5d:49:f6:0f:fe:3f:9c:d0:0f:2d:d9:79:a7:b7:7a:e3:
         21:c0:46:a9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHqRbroq7pEyzLZoXfib9V2vUdoYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0
RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjdaFw0yNzA0MTMwMTQ1MjdaMDMxMTAvBgNV
BAMTKEUyN0Y5RDQ5NzQwQUQ3NTEyQjE0Qjg4RjhCMEQ0ODM0MTJCMUQ4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhVSJtNG1YllqyLHFt+M/a0u+b
weP/+TmbcQMVwZnaVsAFHcJNQpue7bc3xcEw1OT5qmhyTA8cj+KxqW5iPJxJDJcq
6mdYAkPci4QxdMc3QSjv91Nda4/NCfxzyyH2pYU95mbp/VoGyBYHLkmt4ObMmHg7
yEl11jK/n/qv1DhgAtfwmFBsaoB1Qol0SOm36TrSrio9p6Xbc9nDIP9vzSi9wf4p
R4V03sBq4RGy3qPZM26VRhgYqrIyLaiznN0ZkIjwrrpvfr/bISQkbfgej1PZ3kWb
RckWmVKkY7bx8BiHd5LQaRHT8lA/cg6xSnqIE2HRiUTMildSye1WrUKfoEZlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU4n+dSXQK11ErFLiPiw1INBKx2HIwHwYDVR0j
BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0
NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDU0Mzc4NzUzMjc0Njc1NS8wLzMyMzEzODJlMzkz
ODJlMzEzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANpiwDANBgkqhkiG9w0BAQsFAAOCAQEAYKSdJtSxU4wvp/bVRImKthl5
GA887hbEZxaBxiaU6g2esM5snnDqQZgvpoO/HyC1TtG9cHt2dhLtRQfMuE2EN+St
PMVZ4F5o4gYz3FwF3dmFDEd9QpHoQjo1JxVrDcvgoph4Y64nPzkjLqaBQKo2y6SF
+o32BKeNh3t+bqWxUrFBF8GaM68vrB2twol8erbccsgJ2YblmgZZIVeP5/JzE4R8
2PJA74KWXiiXpKn1YTEWcTps7Muy3Bc5dOR0Dsgzly0TGI1zknOrcdTCdFEejZyQ
qa7Xu9SCxty11y9NiBTBHB5BzCFAOikGDA9dSfYP/j+c0A8t2Xmnt3rjIcBGqQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:47 2026 by rpki-client