Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e31342e302f32342d3234203d3e2039383038.roa
File:                     3131332e31382e31342e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          183ULC9/kaSgPwl7ZAYMU6Iku02TWWBKGblJeSTj3uA=
Subject key identifier:   08:99:D2:CE:72:9A:C5:44:CB:FA:60:8C:D1:F0:0A:B6:F3:CF:1B:B6
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       2F1953A8C9D4E46AF5FB6B44FB74D32353F83973
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e31342e302f32342d3234203d3e2039383038.roa
Signing time:             Fri 17 Apr 2026 08:52:44 +0000
ROA not before:           Fri 17 Apr 2026 08:47:44 +0000
ROA not after:            Fri 16 Apr 2027 08:52:44 +0000
asID:                     9808
IP address blocks:        113.18.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:19:53:a8:c9:d4:e4:6a:f5:fb:6b:44:fb:74:d3:23:53:f8:39:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: Apr 17 08:47:44 2026 GMT
            Not After : Apr 16 08:52:44 2027 GMT
        Subject: CN=0899D2CE729AC544CBFA608CD1F00AB6F3CF1BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:41:6c:75:ce:c1:b5:59:5c:79:4d:7b:ea:
                    bc:e2:9c:07:c4:36:53:f0:ed:dd:21:3e:5c:e5:c9:
                    26:fa:e0:9b:79:44:f3:d5:26:0a:c9:a4:c4:4a:68:
                    a4:92:dc:61:ac:40:ee:ed:bc:e6:1f:cf:57:cd:7c:
                    30:71:57:03:fd:23:a5:68:53:f4:3b:34:a1:6b:55:
                    67:4e:92:43:92:cf:93:71:24:93:c8:a1:bc:cf:93:
                    ad:83:ee:c8:4e:20:b4:f6:a1:d7:3a:0a:89:93:1b:
                    4d:32:36:40:c3:0d:99:e1:5d:a4:5f:26:5d:b3:15:
                    09:ce:e5:a7:73:4b:37:b6:2d:db:68:85:a0:5b:38:
                    44:e1:c3:fc:d5:10:55:b3:81:e2:b3:8c:53:d4:45:
                    ca:60:2e:76:bf:9f:a6:03:03:6b:22:8a:ea:18:3a:
                    d0:05:d0:f5:45:92:de:8c:a2:92:87:ba:61:ec:0f:
                    94:1e:40:31:e1:cc:f8:8a:be:5a:5a:80:4c:3d:04:
                    1b:39:7a:95:68:97:c7:77:f7:3e:50:a9:db:b9:d4:
                    48:d4:81:50:2f:f9:d0:5c:80:3d:36:88:b4:f1:2a:
                    4a:b1:a1:90:be:06:73:f8:64:bb:9c:10:62:8c:80:
                    60:8b:23:bb:42:4b:ba:9a:5f:11:8c:71:07:20:e6:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:99:D2:CE:72:9A:C5:44:CB:FA:60:8C:D1:F0:0A:B6:F3:CF:1B:B6
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e31342e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.18.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:47:63:90:2a:72:91:ba:9e:80:6c:ed:85:e6:34:eb:7b:f5:
         03:e0:18:17:29:10:59:2c:ca:2b:fe:4d:7d:47:07:8c:5c:b4:
         d7:2f:a1:76:34:86:95:62:b1:68:f3:53:ff:81:66:c0:7b:8b:
         a1:ee:18:0a:e8:b9:36:95:8f:f1:e2:73:c1:a2:73:73:0e:df:
         78:03:0f:c1:21:d5:ec:df:63:cc:fa:eb:e4:1f:7b:34:75:27:
         fe:6d:45:33:a2:e3:87:ba:05:5e:10:6e:a2:18:de:ec:f3:69:
         f5:3e:2e:0d:73:d8:34:8e:ef:4b:34:52:06:e4:d6:9e:12:5b:
         b7:64:11:35:b3:63:98:6c:63:1e:1b:e3:f5:ca:cb:6a:61:3f:
         15:ef:73:dc:8d:ee:48:75:2b:8d:7b:6d:a9:1b:dd:37:13:77:
         d6:0c:99:c3:eb:8f:31:27:b0:76:05:a7:90:da:4a:8a:61:ea:
         3c:c8:86:57:1e:10:14:74:98:7c:d9:17:4b:8c:cd:d0:d8:07:
         af:f3:9b:2c:c8:77:d4:c2:f5:87:76:42:61:8d:3b:4e:d2:a3:
         1e:8b:40:15:ba:68:25:41:5b:06:69:22:83:ee:1f:bf:7f:dd:
         f6:9a:b8:fa:9a:70:27:ac:55:17:99:f8:2b:78:bb:f1:c7:d9:
         e0:a4:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:59 2026 by rpki-client