Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3135302e3234322e37362e302f32322d3232203d3e2034383038.roa
File:                     3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=
Subject key identifier:   44:92:5A:98:53:9A:D0:B9:F4:8A:D4:ED:17:71:9A:99:61:68:C5:E3
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       3279891D1B256268B4F667F86F5B0FFE6C3FE8A3
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3135302e3234322e37362e302f32322d3232203d3e2034383038.roa
Signing time:             Mon 13 Apr 2026 08:15:04 +0000
ROA not before:           Mon 13 Apr 2026 08:10:04 +0000
ROA not after:            Mon 12 Apr 2027 08:15:04 +0000
asID:                     4808
IP address blocks:        150.242.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:79:89:1d:1b:25:62:68:b4:f6:67:f8:6f:5b:0f:fe:6c:3f:e8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 13 08:10:04 2026 GMT
            Not After : Apr 12 08:15:04 2027 GMT
        Subject: CN=44925A98539AD0B9F48AD4ED17719A996168C5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0d:5f:c0:79:4a:67:4a:d2:6d:e4:fb:ce:5d:
                    61:24:8e:35:ab:65:08:e3:02:84:8a:05:82:e5:c9:
                    2a:8d:3f:52:46:d0:1b:71:39:e4:a6:d2:44:be:6b:
                    49:11:85:07:0c:fd:4a:c3:07:70:d7:65:de:cb:df:
                    90:de:87:ff:80:7c:90:51:e2:10:59:e8:35:80:73:
                    b9:34:34:aa:b4:4b:93:86:8d:be:e0:e0:7b:f2:b7:
                    f0:98:b6:d5:8f:27:c0:eb:87:a9:90:f4:e8:7f:86:
                    6f:80:15:43:9b:d2:64:8b:37:55:93:57:05:e9:20:
                    cd:c8:b9:f5:5d:50:74:0b:0e:d9:07:5a:39:34:cf:
                    10:4b:80:51:04:36:58:6f:de:fa:06:6c:cb:64:74:
                    d0:1a:85:f4:c2:b3:41:f8:01:7f:7d:71:7c:e9:95:
                    b3:6c:09:dd:78:58:0b:da:0c:c9:b2:e1:30:7e:25:
                    15:bb:a4:68:a8:9d:a1:2c:58:31:40:99:64:74:a1:
                    35:79:43:be:0f:0f:02:47:8f:d1:69:5c:85:0c:78:
                    6e:e1:82:e7:e6:2b:b0:10:de:ad:d3:0d:ae:87:3c:
                    af:79:7f:38:0a:23:93:dd:0f:22:66:f5:ad:83:8a:
                    02:45:6d:4b:ab:c8:28:b5:d1:10:74:dc:b7:25:ec:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:5A:98:53:9A:D0:B9:F4:8A:D4:ED:17:71:9A:99:61:68:C5:E3
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3135302e3234322e37362e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:54:0f:aa:8b:3d:26:b6:4c:27:08:1e:a0:9d:46:2c:4b:b8:
         90:da:ca:32:c3:7f:22:40:28:6f:bc:b4:f9:fd:7b:d0:9b:60:
         2e:2d:62:f3:67:07:2c:8a:ee:77:86:fd:c5:1d:90:9c:8b:65:
         0c:d5:bd:1e:3a:cb:12:cf:ae:ed:a5:83:cd:07:8d:d6:3d:48:
         5d:6a:82:9b:7b:60:e4:98:f2:a2:a5:d8:3a:98:e7:cd:e6:b5:
         80:0d:71:e1:a1:f7:60:5b:ca:94:88:30:08:c6:f5:40:42:3b:
         9e:1c:c4:83:50:1d:71:d8:b5:73:d9:4f:38:55:46:a8:aa:ae:
         39:4a:a8:7f:ab:d1:7b:cc:f2:a4:31:b8:07:a9:ff:4a:d3:06:
         59:f3:02:ae:4b:93:d5:87:5f:8c:21:1b:68:64:76:41:f0:f6:
         ed:90:85:ed:be:6e:e1:7e:3a:a4:6c:01:c3:7e:90:92:23:06:
         76:01:95:72:76:4b:80:7e:cb:4a:25:ae:a5:1a:ec:96:ff:b9:
         89:65:94:ff:ea:df:5f:9c:d5:42:71:a4:5f:39:05:27:d5:f5:
         bc:29:9f:20:6a:24:df:bd:eb:c7:5d:b8:1f:bd:79:33:02:9f:
         03:07:3b:57:e4:50:62:61:e1:73:2a:26:f2:2f:b4:36:31:39:
         23:33:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:02:03 2026 by rpki-client