Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3133332e302f32342d3234203d3e2039383038.roa
File:                     3131332e31382e3133332e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          FtaOncl8hw6IqyiRnTLeAIANe8pxQIcBCMKVNk8hJq4=
Subject key identifier:   DE:6F:ED:BF:63:A0:8D:43:88:A5:62:41:2D:FC:E2:13:72:99:3B:7E
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       6EFC1C462428AAD76549BE4655D7BBBFC783CBCC
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3133332e302f32342d3234203d3e2039383038.roa
Signing time:             Fri 17 Apr 2026 08:52:43 +0000
ROA not before:           Fri 17 Apr 2026 08:47:43 +0000
ROA not after:            Fri 16 Apr 2027 08:52:43 +0000
asID:                     9808
IP address blocks:        113.18.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fc:1c:46:24:28:aa:d7:65:49:be:46:55:d7:bb:bf:c7:83:cb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: Apr 17 08:47:43 2026 GMT
            Not After : Apr 16 08:52:43 2027 GMT
        Subject: CN=DE6FEDBF63A08D4388A562412DFCE21372993B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:74:03:9f:89:fc:11:3b:29:2a:ae:1a:e2:
                    71:fb:4e:82:25:83:a6:8c:d9:05:ae:b9:2a:d4:b5:
                    51:db:62:83:3d:b5:b2:df:2d:ff:bc:7c:41:d9:77:
                    ee:85:fb:0e:62:fc:29:bc:f0:ed:0f:67:b0:92:2f:
                    bf:7c:9c:9b:cf:d7:58:9f:5b:de:6b:16:53:29:f3:
                    9c:89:b5:20:2b:19:44:f3:30:ef:6e:22:d2:95:bd:
                    09:5d:c3:23:85:c1:bd:d7:4e:9b:ca:22:2e:14:23:
                    be:12:99:b5:27:84:44:80:35:68:f6:88:f7:ce:df:
                    1a:f3:db:10:a6:ef:8d:cf:7e:74:e0:93:8b:85:18:
                    b9:1f:2f:bc:7f:34:5a:71:19:de:7f:39:60:15:c8:
                    08:29:ce:e8:77:ad:3f:44:de:b1:16:7b:80:cf:85:
                    a7:89:8d:a5:38:7f:2a:60:a7:fc:dc:34:35:ee:d1:
                    25:6b:24:a6:11:bd:92:22:e6:9f:73:f4:13:af:ae:
                    d8:81:1e:6a:a4:5f:01:1a:37:b0:80:f3:dd:80:44:
                    4e:6a:78:29:22:dc:17:58:59:5c:a0:0c:99:c1:14:
                    0a:71:4f:d3:e6:19:4f:14:45:09:16:cb:52:55:c6:
                    60:b8:1f:c5:a1:bf:e9:4b:22:f3:4a:79:60:af:6b:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:ED:BF:63:A0:8D:43:88:A5:62:41:2D:FC:E2:13:72:99:3B:7E
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3133332e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.18.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:dc:fa:de:e2:17:ca:d4:b6:7f:c7:80:b8:55:13:c9:7f:
         6b:c8:f0:08:2d:67:de:c2:3c:8f:38:07:6b:e9:58:8d:14:93:
         55:bc:eb:1b:a7:e5:18:d1:ff:5f:f5:7a:63:81:c1:da:26:6a:
         0e:dd:e9:48:84:0b:5c:f8:43:73:02:33:1e:1a:c1:98:95:53:
         ae:3d:f2:c8:22:c2:67:62:a3:85:fa:f8:a9:1e:07:29:b7:9b:
         5f:1e:7a:b7:b6:1d:8b:d7:bf:38:fe:be:86:34:6f:f1:59:3d:
         37:a9:6d:21:b3:b5:4f:72:46:9c:79:3d:dd:05:0b:9e:8f:e0:
         9b:23:3c:b2:28:86:dc:61:e0:fc:39:5b:fc:c6:5c:73:ab:dc:
         36:85:1c:46:cf:6c:dc:b9:20:59:8a:68:e0:1d:09:49:02:41:
         46:90:bb:92:19:14:20:ef:22:7e:9c:5e:b1:b0:f6:fe:8d:3d:
         b1:ec:a8:7b:b5:33:fe:3a:19:96:c5:86:40:e0:ff:c7:4f:89:
         b5:e9:bc:04:77:a7:2b:3a:4e:ef:1b:8c:2c:0c:4b:21:9e:a8:
         bb:a3:af:68:42:cd:45:16:c6:de:61:98:25:ac:fb:7c:fa:fb:
         c0:0d:18:76:93:f8:9a:26:d4:6b:59:56:71:a7:32:3f:9f:65:
         44:94:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:54 2026 by rpki-client