Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37372e302e302f31372d3137203d3e203234313337.roa
File:                     3131302e37372e302e302f31372d3137203d3e203234313337.roa (raw, json)
Hash identifier:          vFT248uRD9dRV6l6REbq38YYVSQHghdQGQxcqm5CnYY=
Subject key identifier:   14:F4:BE:1E:CF:6A:6F:0A:0A:89:59:41:7F:88:25:1D:77:56:28:3E
Certificate issuer:       /CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
Certificate serial:       27C0E017BC74DCC631CE99008F6F81BC1C278369
Authority key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37372e302e302f31372d3137203d3e203234313337.roa
Signing time:             Wed 15 Apr 2026 07:09:15 +0000
ROA not before:           Wed 15 Apr 2026 07:04:15 +0000
ROA not after:            Wed 14 Apr 2027 07:09:15 +0000
asID:                     24137
IP address blocks:        110.77.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c0:e0:17:bc:74:dc:c6:31:ce:99:00:8f:6f:81:bc:1c:27:83:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE
        Validity
            Not Before: Apr 15 07:04:15 2026 GMT
            Not After : Apr 14 07:09:15 2027 GMT
        Subject: CN=14F4BE1ECF6A6F0A0A8959417F88251D7756283E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:c6:be:ca:80:97:a6:6c:a5:1f:87:13:37:
                    be:e7:ed:3e:7b:c7:08:b5:26:f3:7e:27:86:92:fd:
                    44:49:5c:62:2e:c1:e4:1a:34:d3:5a:5e:a3:6c:05:
                    57:55:b8:49:a6:75:0d:c3:98:01:1b:8d:52:35:d2:
                    44:93:42:7f:f3:38:60:31:d5:7b:26:cc:e8:16:2a:
                    9e:94:33:e7:4e:87:ab:1f:82:8f:54:4a:28:7a:ce:
                    ad:c2:1d:61:b9:0a:fc:e5:f8:01:83:64:ea:f9:41:
                    13:08:8b:83:a4:e1:e4:28:e2:1e:c8:c9:69:3c:6e:
                    ab:e2:7f:91:58:ba:87:49:d1:e4:2b:05:05:07:5f:
                    25:22:84:cc:bc:7c:aa:60:42:83:71:7e:a1:d4:8d:
                    08:fd:5a:68:92:63:55:3f:a0:f1:c1:d7:38:4a:57:
                    89:5e:5c:8f:e5:f5:1a:10:62:0d:70:4f:e8:07:f1:
                    cb:7a:26:e2:d4:57:47:3d:bc:f1:ab:a4:b7:15:cc:
                    65:e7:7d:7d:da:a1:8a:f6:39:08:cf:ba:8d:5c:78:
                    e0:6c:94:49:b8:08:d9:1b:8d:4e:9f:5c:2b:b1:62:
                    76:06:97:e4:ae:98:8f:f6:91:15:31:e7:81:d9:cf:
                    ea:0c:88:89:14:a1:3c:2f:c2:8c:25:64:47:05:3c:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F4:BE:1E:CF:6A:6F:0A:0A:89:59:41:7F:88:25:1D:77:56:28:3E
            X509v3 Authority Key Identifier:
                keyid:83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/3131302e37372e302e302f31372d3137203d3e203234313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.77.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         07:26:24:54:dc:09:14:7a:e8:32:e3:5c:d8:f7:87:74:d5:e4:
         e9:2c:b8:50:cd:76:e7:75:cd:09:25:d8:e5:0a:66:42:50:38:
         9f:4a:80:d4:6c:80:cf:a0:10:ee:78:db:d9:17:9d:fc:61:b5:
         08:55:47:9a:aa:a8:42:4c:0e:71:76:37:ee:d7:84:fc:64:c8:
         20:5f:6f:48:13:c9:2b:50:a5:f7:5d:e6:dd:27:c2:30:9d:cb:
         8a:33:b8:ba:c6:72:ee:3f:0a:60:ba:14:02:c8:4a:23:bb:4a:
         2e:fe:36:9b:00:c5:b5:76:5b:1b:3c:f3:62:40:48:5e:c1:4f:
         11:98:0a:29:30:71:ea:79:bc:be:3f:20:be:f1:1a:a3:38:24:
         46:75:b2:1c:08:5b:b6:aa:cb:bd:89:14:48:28:1f:76:ac:20:
         1a:4e:16:1a:8d:11:09:5a:9f:21:ae:57:7b:e5:ca:11:97:3b:
         25:fd:24:bf:05:02:48:7a:18:bc:ec:00:e0:f0:89:42:98:15:
         45:cb:06:3d:23:b4:4a:c1:32:7b:c8:ee:a5:a0:dc:10:69:ca:
         da:26:ec:a8:5c:1b:fd:5e:cb:0a:69:92:c0:4e:b0:fa:f2:b8:
         47:c7:ab:ba:8a:9b:e7:b1:61:4c:1b:de:cc:73:d9:4c:aa:29:
         3b:e4:49:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:46 2026 by rpki-client