Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3139322e302f31382d3138203d3e2030.roa
File:                     32372e35302e3139322e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier:          MBb7AzieE/TA+26kXDcbcXdRl3K8Ikq6r5KvdQDFoiY=
Subject key identifier:   82:31:3B:C6:9B:EB:0E:31:9E:BE:75:C6:E2:F0:BE:01:40:10:1D:62
Certificate issuer:       /CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
Certificate serial:       1324EDDB9E10D05EF336EE43D6F9EF173E109BF3
Authority key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3139322e302f31382d3138203d3e2030.roa
Signing time:             Thu 16 Apr 2026 09:28:44 +0000
ROA not before:           Thu 16 Apr 2026 09:23:44 +0000
ROA not after:            Thu 15 Apr 2027 09:28:44 +0000
asID:                     0
IP address blocks:        27.50.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 09:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:24:ed:db:9e:10:d0:5e:f3:36:ee:43:d6:f9:ef:17:3e:10:9b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9
        Validity
            Not Before: Apr 16 09:23:44 2026 GMT
            Not After : Apr 15 09:28:44 2027 GMT
        Subject: CN=82313BC69BEB0E319EBE75C6E2F0BE0140101D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:59:1b:17:7d:7e:37:a7:c0:cf:8a:4d:91:
                    3b:9b:40:01:3c:dd:b0:d0:5c:f2:72:74:08:c6:07:
                    d0:f2:0c:de:2d:47:c1:99:ac:dc:fc:b3:8f:90:82:
                    d1:51:5a:d7:6e:8a:d5:b5:29:ac:98:fe:16:e1:2d:
                    87:d8:71:be:33:14:1e:18:7d:a5:a3:c8:c8:d6:e8:
                    92:a2:12:f9:ef:47:36:b7:64:6e:0d:59:8b:2f:00:
                    ca:b6:74:5d:a4:ff:98:5c:94:c3:af:de:29:01:3d:
                    4a:4e:9f:57:ec:e5:28:e0:35:aa:60:c9:7a:ab:1b:
                    83:7f:31:90:8e:99:f7:8a:06:3e:1b:0e:43:cb:a9:
                    df:60:e1:ef:a3:e8:53:93:f0:ee:d6:1e:7a:5a:b5:
                    a9:a9:e6:ec:27:3e:72:ee:76:74:db:3c:95:0b:f2:
                    bd:9f:3d:bc:1a:a8:d9:21:80:a4:2c:e1:e1:17:e9:
                    a9:67:e6:55:a5:c7:76:dd:46:1e:db:2e:f9:b1:65:
                    79:1d:e5:c9:ae:8c:41:f1:d7:91:5d:e0:be:db:66:
                    7c:57:52:5e:c5:63:d2:00:90:2c:45:4b:6b:59:53:
                    e0:32:c3:80:4d:b9:de:eb:43:77:58:57:2d:95:ae:
                    53:7a:ab:54:57:55:ac:ad:ec:07:49:e8:f9:56:24:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:3B:C6:9B:EB:0E:31:9E:BE:75:C6:E2:F0:BE:01:40:10:1D:62
            X509v3 Authority Key Identifier:
                keyid:90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/32372e35302e3139322e302f31382d3138203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.50.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:90:d3:1c:d2:d5:d4:06:4e:01:c6:67:1c:9c:4b:e2:96:ea:
         3c:a6:de:ff:4f:1d:27:e4:ca:0a:d3:35:ab:a2:cf:6e:e5:d7:
         e9:cf:57:fb:3b:61:17:28:00:71:5d:37:f6:cb:13:69:df:ba:
         15:0a:2b:7f:b4:f8:11:72:5c:2c:a2:8a:c1:5e:2d:c8:83:fb:
         70:2a:5e:e9:c3:0b:4c:ee:9a:a2:49:da:39:ef:a1:52:90:0b:
         68:2e:22:d8:34:ae:fb:dc:44:b5:28:0e:51:b0:24:b3:b6:f6:
         41:7d:65:d2:db:d4:88:32:10:44:9d:96:c5:aa:f1:cf:63:5e:
         71:8d:1f:83:c3:b5:75:8a:5c:a1:22:1d:50:8c:54:cc:98:5e:
         07:69:e0:e5:8c:bf:a2:e1:48:0c:0a:9f:f3:71:a6:69:09:f2:
         0e:b7:50:76:96:2e:39:00:6c:f8:cd:0c:fe:79:99:bf:d4:20:
         20:49:68:65:82:aa:0d:20:b1:d7:16:68:31:ec:ce:83:87:43:
         93:c5:19:74:a5:5b:e0:c9:ab:3a:ad:4a:2b:fe:5d:32:d5:ea:
         75:67:54:75:d5:57:bc:9a:2c:cb:0f:30:34:03:5e:ec:4e:66:
         23:3b:58:e5:15:2d:3a:cc:fd:f1:33:cf:c0:b8:0c:99:c0:ac:
         a2:b7:15:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:42 2026 by rpki-client