Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32312d3231203d3e2039383038.roa
File:                     3131332e31382e3132382e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier:          gMy1rZqb+LzobrG1/I5mSHoehrX6jvVnxEDEXNbeSNI=
Subject key identifier:   D2:D2:EE:D3:E1:3C:10:E7:F3:47:55:47:66:C8:C3:C6:10:01:BA:D1
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       56C3003F9ECBE9633F921B586E81722E1AA63C32
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32312d3231203d3e2039383038.roa
Signing time:             Mon 01 Jun 2026 08:24:23 +0000
ROA not before:           Mon 01 Jun 2026 08:19:23 +0000
ROA not after:            Mon 31 May 2027 08:24:23 +0000
asID:                     9808
IP address blocks:        113.18.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 08:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c3:00:3f:9e:cb:e9:63:3f:92:1b:58:6e:81:72:2e:1a:a6:3c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: Jun  1 08:19:23 2026 GMT
            Not After : May 31 08:24:23 2027 GMT
        Subject: CN=D2D2EED3E13C10E7F347554766C8C3C61001BAD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:7b:6b:5b:b0:e9:5c:c8:a7:43:c7:04:8c:
                    75:d3:a0:f2:d4:a7:cc:64:74:c5:5b:30:4f:32:d1:
                    1a:10:1e:59:a9:16:f9:50:1e:a9:de:f7:d9:f5:0f:
                    b6:98:2b:c0:5d:bb:43:0a:a3:32:c0:6f:6c:f1:cc:
                    3b:e5:3e:6f:00:ad:c3:3b:b1:3f:30:88:13:d3:71:
                    38:c9:d2:67:84:ba:76:40:52:73:b6:23:6b:32:b6:
                    d9:0b:3c:71:9f:a7:fc:ad:6c:82:6b:15:75:09:84:
                    27:76:3b:1a:f5:b0:87:3b:57:46:2a:ea:75:50:65:
                    90:f2:af:c6:96:ac:00:17:eb:55:32:fc:80:03:05:
                    aa:3d:59:2d:36:b7:36:1a:a8:ec:f6:aa:5e:c1:5a:
                    78:95:7d:8d:09:1d:a7:6c:ae:20:3e:a1:d1:ad:96:
                    0c:49:87:e7:59:cf:61:47:7d:cf:ca:2f:c6:a0:34:
                    80:6d:67:c3:2f:de:02:13:5f:ce:cc:c3:bd:77:2c:
                    f3:d5:ee:93:33:f6:5a:de:e1:d7:88:5e:d7:c2:f4:
                    d0:f0:fa:c2:1d:40:7a:90:8f:39:4b:0d:40:8a:aa:
                    81:25:c2:31:73:0a:b7:16:79:99:65:8c:12:ca:de:
                    5a:74:28:af:13:8b:c4:2e:da:6d:c9:2f:7b:78:b0:
                    17:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:EE:D3:E1:3C:10:E7:F3:47:55:47:66:C8:C3:C6:10:01:BA:D1
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3132382e302f32312d3231203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.18.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:7f:9d:f5:e9:54:53:62:0f:b8:c9:ae:e7:e2:de:4e:db:
         83:70:e6:83:70:3c:08:66:3c:0c:4e:45:e5:59:75:1e:69:35:
         6f:32:c1:12:34:01:6e:f1:aa:ef:96:55:1c:16:14:c2:70:e5:
         a8:b0:00:70:30:77:62:43:dc:0c:4e:03:85:c8:ae:1d:6d:7e:
         da:da:82:64:bf:51:e9:34:43:34:f2:13:c0:a8:a0:06:94:dc:
         c5:aa:97:2e:b1:87:ee:12:40:97:ce:a1:7b:05:80:95:06:8a:
         5e:c8:b8:8f:f6:e5:5e:46:e9:c8:10:48:bd:a5:2c:11:86:a4:
         b3:de:51:67:2a:c3:62:be:eb:a2:66:b9:e9:32:db:bd:b8:4e:
         64:b6:3d:de:33:ec:7f:31:aa:dc:ce:a5:4d:68:a4:9a:25:d4:
         d4:f0:01:d4:0b:03:2b:08:8b:cb:47:26:ca:bb:f8:0e:43:a1:
         51:37:99:dc:a9:fb:c0:d4:2d:74:2c:c9:09:b8:1c:83:c7:78:
         c7:fa:f6:5f:a8:b7:e1:8d:1f:09:3d:2d:46:10:42:d1:67:0b:
         8c:ef:60:9b:65:4a:43:6d:fd:e4:c9:f5:84:28:6b:2a:f2:ed:
         2c:04:6d:56:23:91:8c:79:d1:1a:49:80:13:40:82:33:53:a5:
         0b:b4:52:9a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUVsMAP57L6WM/khtYboFyLhqmPDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz
OTc5NDQwNjAeFw0yNjA2MDEwODE5MjNaFw0yNzA1MzEwODI0MjNaMDMxMTAvBgNV
BAMTKEQyRDJFRUQzRTEzQzEwRTdGMzQ3NTU0NzY2QzhDM0M2MTAwMUJBRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrXtrW7DpXMinQ8cEjHXToPLU
p8xkdMVbME8y0RoQHlmpFvlQHqne99n1D7aYK8Bdu0MKozLAb2zxzDvlPm8ArcM7
sT8wiBPTcTjJ0meEunZAUnO2I2syttkLPHGfp/ytbIJrFXUJhCd2Oxr1sIc7V0Yq
6nVQZZDyr8aWrAAX61Uy/IADBao9WS02tzYaqOz2ql7BWniVfY0JHadsriA+odGt
lgxJh+dZz2FHfc/KL8agNIBtZ8Mv3gITX87Mw713LPPV7pMz9lre4deIXtfC9NDw
+sIdQHqQjzlLDUCKqoElwjFzCrcWeZlljBLK3lp0KK8Ti8Qu2m3JL3t4sBe9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU0tLu0+E8EOfzR1VHZsjDxhAButEwHwYDVR0j
BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD
NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4NDY4MjI3LzAvMzEzMTMzMmUzMTM4
MmUzMTMyMzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3ESgDANBgkqhkiG9w0BAQsFAAOCAQEAXRh/nfXpVFNiD7jJrufi3k7bg3Dm
g3A8CGY8DE5F5Vl1Hmk1bzLBEjQBbvGq75ZVHBYUwnDlqLAAcDB3YkPcDE4Dhciu
HW1+2tqCZL9R6TRDNPITwKigBpTcxaqXLrGH7hJAl86hewWAlQaKXsi4j/blXkbp
yBBIvaUsEYaks95RZyrDYr7roma56TLbvbhOZLY93jPsfzGq3M6lTWikmiXU1PAB
1AsDKwiLy0cmyrv4DkOhUTeZ3Kn7wNQtdCzJCbgcg8d4x/r2X6i34Y0fCT0tRhBC
0WcLjO9gm2VKQ2395Mn1hChrKvLtLARtViORjHnRGkmAE0CCM1OlC7RSmg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:42:11 2026 by rpki-client