Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133342e302f32332d3233203d3e2030.roa
File:                     32372e35302e3133342e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          IsUhBWt4jf7sLKyNbMOzbGiRoHIEXUUXqamC964pVAs=
Subject key identifier:   44:74:B7:D4:EB:EE:90:B6:D3:A0:90:59:8B:51:2A:3F:41:8A:FF:DD
Certificate issuer:       /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial:       72957CAE4C19EE75ECD83BD29424D04F2A373FFB
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133342e302f32332d3233203d3e2030.roa
Signing time:             Thu 16 Apr 2026 09:28:44 +0000
ROA not before:           Thu 16 Apr 2026 09:23:44 +0000
ROA not after:            Thu 15 Apr 2027 09:28:44 +0000
asID:                     0
IP address blocks:        27.50.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 09:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:95:7c:ae:4c:19:ee:75:ec:d8:3b:d2:94:24:d0:4f:2a:37:3f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
        Validity
            Not Before: Apr 16 09:23:44 2026 GMT
            Not After : Apr 15 09:28:44 2027 GMT
        Subject: CN=4474B7D4EBEE90B6D3A090598B512A3F418AFFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:7f:c3:44:52:4b:2d:be:db:15:e4:62:ff:
                    a7:cd:cf:99:bc:16:c1:40:ad:23:84:de:1d:ff:c1:
                    8f:64:a4:14:a3:1a:3f:e2:9d:ec:ba:1f:17:09:1f:
                    f3:55:1d:10:0b:d5:85:c0:f0:f6:ec:fe:fd:cf:1e:
                    c1:bb:1f:4c:e2:96:10:4e:3b:28:30:94:e0:1b:fd:
                    fe:cc:30:9d:33:5a:e6:5c:14:c9:53:d5:9b:86:ea:
                    cd:a1:24:6e:e4:e4:a1:21:d4:84:a5:cd:7e:5e:83:
                    c6:de:3b:93:9d:7e:a8:29:c2:8b:c9:81:31:0d:d7:
                    ac:a7:da:7d:fd:f4:b1:da:8f:f8:29:b3:4f:8a:6f:
                    b8:e8:f6:4b:c2:d1:fa:f7:13:fe:50:4b:2a:ea:4d:
                    13:0f:db:f1:ff:5b:e2:cd:57:ba:97:cd:aa:66:93:
                    b2:23:68:c8:ca:be:cb:2d:c1:4d:0d:28:70:1d:b6:
                    ac:23:d3:97:4c:6b:d9:be:57:5e:41:3b:7f:ae:89:
                    57:af:31:a4:55:22:8f:04:0f:b2:18:cc:20:62:0c:
                    79:ff:8c:18:fe:bc:77:08:fa:1a:6a:3e:eb:a3:0e:
                    fd:d5:98:23:78:c4:30:39:42:d1:a5:ad:da:15:7e:
                    3e:61:49:ac:0a:20:d2:1d:bc:3c:ab:63:a0:7d:65:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:B7:D4:EB:EE:90:B6:D3:A0:90:59:8B:51:2A:3F:41:8A:FF:DD
            X509v3 Authority Key Identifier:
                keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3133342e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:1c:55:2a:d2:0d:a0:c1:33:b0:2a:1d:66:ef:98:23:80:
         d5:f3:ac:c9:cb:5e:8f:40:dd:97:74:f2:a2:96:8f:7f:4a:40:
         8f:fb:75:14:57:61:c5:7e:ce:31:ad:36:50:35:19:9f:94:90:
         b8:40:2b:b0:5a:2e:36:57:79:47:a3:ec:b8:f8:01:99:6d:55:
         4b:d8:d1:4b:a9:b3:56:e5:48:cf:73:e4:e7:65:9d:e4:e9:02:
         60:f9:89:ff:f4:02:d0:77:7e:eb:b8:59:4a:76:18:36:bd:bf:
         44:82:e4:b7:0e:d0:32:d5:6c:8e:91:86:36:0d:64:b0:bf:e5:
         20:52:cf:43:eb:0c:f5:bd:15:74:17:d0:58:c3:ee:53:a9:96:
         37:1f:ef:c5:09:58:49:14:be:d9:83:aa:d4:62:62:f9:b9:c7:
         ac:55:1b:39:60:8e:c9:c2:1e:b4:7e:41:73:15:c4:74:4d:a7:
         86:0e:44:93:9c:6d:6c:69:e6:e2:65:86:e8:ff:d7:e7:d7:f3:
         b5:c8:59:6f:d3:48:c4:c3:20:bb:9a:87:1a:0d:1c:5d:d0:44:
         47:a7:e8:37:a1:30:f8:85:75:e9:35:e9:f6:d4:72:7e:85:e8:
         98:6c:be:ee:5e:9e:66:ea:5b:ca:84:fb:89:26:65:71:d1:ec:
         5c:79:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:51 2026 by rpki-client