Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e39392e302f32342d3234203d3e2039383038.roa
File:                     3131332e31382e39392e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          9Y/sDtotXoDlI/YObldvB0C9bHYM+ONtY/ovPI1/CXw=
Subject key identifier:   DD:42:64:86:4D:D4:86:9F:41:2C:B2:E7:50:AD:D9:81:28:00:22:7C
Certificate issuer:       /CN=373B103C68D9B84455801815E437C49839794406
Certificate serial:       06E03163F3AB455C93A013D7DE55DCCC0E6A5DCF
Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e39392e302f32342d3234203d3e2039383038.roa
Signing time:             Fri 17 Apr 2026 08:52:43 +0000
ROA not before:           Fri 17 Apr 2026 08:47:43 +0000
ROA not after:            Fri 16 Apr 2027 08:52:43 +0000
asID:                     9808
IP address blocks:        113.18.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:31:63:f3:ab:45:5c:93:a0:13:d7:de:55:dc:cc:0e:6a:5d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373B103C68D9B84455801815E437C49839794406
        Validity
            Not Before: Apr 17 08:47:43 2026 GMT
            Not After : Apr 16 08:52:43 2027 GMT
        Subject: CN=DD4264864DD4869F412CB2E750ADD9812800227C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:b2:54:33:51:4e:99:a5:35:10:de:85:13:
                    0a:2e:93:17:b6:a3:c6:94:8d:54:24:24:b1:a5:a5:
                    a9:5f:64:dd:24:98:de:6a:96:e3:9c:36:60:35:85:
                    2c:88:80:21:b3:28:86:96:ba:b5:22:74:c3:60:31:
                    42:d3:ec:75:ef:ab:23:b2:46:81:09:a0:32:f5:dc:
                    07:9d:ad:1a:99:03:1b:54:35:e4:d4:9d:22:f1:e9:
                    d3:71:b8:dc:e1:db:ff:e4:35:35:52:ca:45:01:f9:
                    c1:2f:26:18:57:01:59:25:e2:5f:1d:17:ce:eb:9b:
                    d4:18:8e:0e:43:7d:cf:49:c7:78:d3:e0:91:13:e7:
                    48:e5:ac:18:48:0a:19:58:f9:41:94:50:2a:ad:c9:
                    2d:d8:12:b2:ab:d4:af:91:95:9d:dd:89:dd:69:8a:
                    85:57:01:e1:c2:5e:1f:08:fe:85:d6:e6:d8:5a:f4:
                    ad:5f:af:44:1c:6b:91:e5:5f:43:a6:c9:bc:aa:e4:
                    4e:4e:9f:d1:a8:32:aa:f4:f2:74:56:79:ca:ff:cd:
                    26:79:b3:7b:09:bf:f7:ec:25:b9:6c:72:e5:7a:13:
                    9b:60:60:4e:ee:7c:04:93:da:cd:59:a5:6e:f8:e2:
                    8c:de:f3:8a:29:9c:16:55:e5:dc:9d:8a:8e:13:a5:
                    95:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:64:86:4D:D4:86:9F:41:2C:B2:E7:50:AD:D9:81:28:00:22:7C
            X509v3 Authority Key Identifier:
                keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e39392e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.18.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:06:a8:44:be:2d:d0:73:2a:14:dc:4c:cb:13:bb:28:8a:b6:
         f3:68:0b:e6:c5:ec:f2:73:6e:e2:55:07:ae:fe:82:24:c4:17:
         ca:c4:04:2e:83:90:86:66:46:ff:87:07:b9:a0:c6:79:0a:ff:
         a8:8d:09:b3:a1:0e:07:99:ef:f1:64:83:95:7c:83:32:06:83:
         ed:ab:b5:94:5b:ed:60:ea:3f:c4:ad:99:48:14:56:e9:07:4d:
         ca:ba:50:86:02:a1:34:e8:c6:f0:71:f3:db:9e:53:38:b9:40:
         e4:1c:93:2a:84:4b:ab:e1:90:19:d0:b5:f6:c0:a3:96:3c:eb:
         86:e0:b3:c5:da:c4:a6:48:15:f1:e4:be:87:9b:ca:77:bb:4c:
         4e:71:80:8e:5c:b4:e5:1b:cb:0b:63:9b:83:61:ba:60:7f:46:
         7b:6c:9d:d1:23:7b:2f:e9:d7:c2:7c:fb:07:23:0d:86:a6:4d:
         4e:50:62:2c:13:60:8c:54:09:9c:de:da:83:b6:8b:9c:70:d0:
         53:cc:c4:b5:f5:df:7a:d4:9b:81:68:7d:4b:9b:8a:db:9d:47:
         29:72:f3:34:d8:20:c6:0e:f8:bb:10:e8:18:e7:f2:f2:34:30:
         c7:be:04:1d:7a:15:f2:2c:05:b7:3a:70:95:b9:6b:5c:8f:6b:
         3a:93:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:42 2026 by rpki-client