Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139332e302f32342d3234203d3e203538353432.roa
File:                     3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier:          qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=
Subject key identifier:   C5:08:C4:4A:16:68:C4:3F:9C:97:E4:85:73:EE:7A:50:75:9F:B1:F1
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       1E09133CF6670CF0EA3B79DF82239D3E829F3DBC
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139332e302f32342d3234203d3e203538353432.roa
Signing time:             Tue 14 Apr 2026 01:45:48 +0000
ROA not before:           Tue 14 Apr 2026 01:40:48 +0000
ROA not after:            Tue 13 Apr 2027 01:45:48 +0000
asID:                     58542
IP address blocks:        218.98.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:09:13:3c:f6:67:0c:f0:ea:3b:79:df:82:23:9d:3e:82:9f:3d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:48 2026 GMT
            Not After : Apr 13 01:45:48 2027 GMT
        Subject: CN=C508C44A1668C43F9C97E48573EE7A50759FB1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:95:06:9f:8f:a0:fd:f0:93:d8:d7:47:6c:
                    84:da:af:d3:0f:27:75:d9:c8:0f:8a:85:21:db:ef:
                    fc:50:51:a5:0b:ce:db:bb:89:42:58:ab:1f:48:ae:
                    2e:af:11:a5:a9:4d:da:12:cc:fb:a7:ad:4a:c9:6f:
                    15:0f:72:c0:34:bf:83:70:8e:01:a7:5f:6b:87:e4:
                    b8:ae:51:22:6d:f9:0c:55:40:2e:11:d7:83:30:7d:
                    d9:fa:59:c8:7f:cc:a0:60:d9:2b:34:ef:69:c3:90:
                    3b:e0:d0:9b:ed:87:0b:32:ab:6d:22:3c:03:d2:60:
                    4a:8c:a3:31:3d:11:53:fc:7e:fa:ff:d4:ff:8f:99:
                    a0:92:bf:a5:96:5c:c2:6c:2a:35:45:ef:d5:a9:95:
                    f9:ef:1d:5c:c7:a2:01:cd:62:22:c9:6c:6b:d0:02:
                    29:0d:d0:4c:9c:5c:4e:42:5d:e9:d6:96:71:98:f5:
                    de:51:92:8e:d0:3d:d8:3f:21:27:41:55:05:4d:0c:
                    9a:62:19:07:bf:aa:eb:01:e5:ab:f5:62:6c:3b:6e:
                    91:9c:2e:da:25:35:e2:86:09:f2:5c:8a:4c:64:15:
                    43:dc:86:ed:e1:cf:97:4a:f4:e3:96:a9:43:a5:8a:
                    d7:ff:ac:34:f0:88:4e:2d:2d:60:f1:a0:9c:f2:ce:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:08:C4:4A:16:68:C4:3F:9C:97:E4:85:73:EE:7A:50:75:9F:B1:F1
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3139332e302f32342d3234203d3e203538353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:18:c2:e1:3e:10:7d:55:e7:e0:5f:a5:1e:23:2f:bd:41:ba:
         a4:aa:f0:13:4a:94:64:e6:e8:19:9f:51:6a:e5:7b:07:10:54:
         e9:02:9f:6d:a0:8f:81:75:83:6c:71:8f:f9:5d:11:fe:e3:e1:
         a7:1a:39:19:91:26:ac:a1:ef:6a:95:24:b4:00:5e:59:33:8b:
         9b:ab:62:57:04:57:3f:e5:5d:64:cf:6b:5f:37:cf:02:aa:08:
         07:75:79:5d:7d:3e:27:9d:32:68:8c:5b:9e:2a:b0:31:a0:6d:
         9c:45:68:b8:45:95:bf:fa:e8:39:39:1b:53:73:46:a4:47:7e:
         f3:6f:4c:b0:2d:56:59:f1:39:1d:96:16:24:ed:42:fa:06:65:
         7e:00:3d:1b:08:18:59:4b:58:6f:3f:02:c1:c1:29:73:b7:c2:
         31:58:31:5b:2a:ad:39:38:dd:c9:ad:c1:f5:b9:9f:c3:b8:f1:
         6b:52:27:f4:59:8d:4c:22:a1:d5:7d:8b:9d:a3:58:4a:15:92:
         79:6f:b5:ab:b4:6a:79:b9:f2:fd:92:06:7a:6e:2a:6f:03:5a:
         fd:67:cd:96:99:23:e4:1c:6b:c7:e3:d1:c3:ed:62:aa:f1:80:
         0b:eb:31:32:f2:ad:ba:97:18:97:a4:88:c1:55:bf:d9:63:15:
         05:ef:56:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:27 2026 by rpki-client