Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa
File:                     3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa (raw, json)
Hash identifier:          DNLg5TiXgapWfZOaVGtGTe80zdMoFa/6XxRWNFo+LUM=
Subject key identifier:   43:6E:3D:A8:28:1F:17:1F:D4:04:11:57:93:9D:0E:8B:4D:C7:6A:5D
Certificate issuer:       /CN=50A5171941F715FACDCF9DD46FA674046AC02D04
Certificate serial:       23CBAAAF0451B99402A2F1650F87DA767BF7213B
Authority key identifier: 50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa
Signing time:             Wed 15 Apr 2026 15:07:39 +0000
ROA not before:           Wed 15 Apr 2026 15:02:39 +0000
ROA not after:            Wed 14 Apr 2027 15:07:39 +0000
asID:                     137702
IP address blocks:        118.184.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 04:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cb:aa:af:04:51:b9:94:02:a2:f1:65:0f:87:da:76:7b:f7:21:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5171941F715FACDCF9DD46FA674046AC02D04
        Validity
            Not Before: Apr 15 15:02:39 2026 GMT
            Not After : Apr 14 15:07:39 2027 GMT
        Subject: CN=436E3DA8281F171FD4041157939D0E8B4DC76A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:ba:e0:8b:a9:0d:09:71:78:da:92:27:2d:
                    ca:2e:9f:d8:4e:82:fd:eb:ca:a8:bc:2a:94:05:a0:
                    4e:1f:39:f2:74:30:d0:23:7f:5c:80:77:19:3e:30:
                    c0:6c:5d:58:eb:40:14:53:95:31:5d:32:04:b3:a8:
                    0a:34:1d:7f:2e:be:8b:82:fd:41:28:fc:38:37:e6:
                    3e:76:de:8f:ae:f0:59:85:52:bb:c5:4f:fd:24:43:
                    ec:e6:06:71:e2:bf:0e:cf:a7:e7:81:48:a6:05:0a:
                    cc:e2:c1:c6:be:d2:25:55:6d:29:ac:20:91:3a:bc:
                    d9:4d:56:cf:ca:fc:c5:89:67:15:bb:36:28:5c:c0:
                    a7:5c:b9:78:0d:b1:18:27:8b:51:90:22:fa:51:4e:
                    5a:c3:6f:ee:0c:e0:1e:d3:0a:13:83:30:77:b7:62:
                    6a:81:ee:76:e4:f6:d9:c2:ed:94:80:71:73:17:38:
                    8c:f2:ff:68:73:9b:52:ec:89:5a:bb:55:ed:c7:71:
                    45:bd:22:d9:bf:a8:db:51:f1:a0:21:40:67:52:eb:
                    4b:58:0f:d7:8e:e0:61:2e:e1:3b:24:26:a2:04:24:
                    1b:06:e8:ba:2b:b1:f4:4c:18:3b:56:b5:83:02:69:
                    c9:ba:9d:f8:42:67:73:03:1d:f0:97:c8:97:8f:ae:
                    ce:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6E:3D:A8:28:1F:17:1F:D4:04:11:57:93:9D:0E:8B:4D:C7:6A:5D
            X509v3 Authority Key Identifier:
                keyid:50:A5:17:19:41:F7:15:FA:CD:CF:9D:D4:6F:A6:74:04:6A:C0:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/50A5171941F715FACDCF9DD46FA674046AC02D04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/50A5171941F715FACDCF9DD46FA674046AC02D04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346995713/0/3131382e3138342e3132382e302f32312d3231203d3e20313337373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.184.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:f5:65:79:a6:d7:f4:7d:cd:bf:1b:51:49:d0:d8:b5:d7:
         3a:99:42:59:b5:b9:a2:ff:36:8a:5a:d7:44:06:7e:40:f9:fc:
         9c:83:20:39:c7:34:5c:f6:8d:7c:71:65:c4:49:44:8f:1c:ad:
         8f:b7:12:24:19:ee:f8:9b:89:e2:e0:95:dd:d9:ef:bd:92:c7:
         04:ea:b2:46:b5:35:53:1d:9b:ae:10:7b:72:cc:70:4a:c4:42:
         61:f5:4e:e6:51:a8:f2:80:d4:93:04:96:4d:79:1c:de:da:14:
         ad:64:b5:d4:6d:0c:bb:d4:c9:3d:86:f0:ea:65:af:69:b6:83:
         97:57:9e:4d:d1:ff:4a:e2:a7:0a:46:c0:a8:25:51:a1:38:4e:
         6b:01:75:02:5b:af:a2:cb:5d:01:bf:c7:82:a4:0b:74:b1:a3:
         a2:07:ce:7b:f7:11:ed:8a:09:de:0b:35:4b:66:0f:82:12:98:
         04:ae:c3:ab:80:6d:80:a9:05:35:17:e7:eb:63:11:c6:d7:3c:
         5c:c4:f8:55:c0:5f:80:b6:69:58:ed:fd:02:9b:d6:d3:d1:78:
         c9:0a:4d:6f:17:c8:85:d0:ad:e2:e9:a3:de:d9:88:f5:ea:74:
         67:dc:f4:bd:cf:e3:5c:74:e3:a5:e8:24:c3:a3:7f:9c:8e:98:
         a1:10:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:31 2026 by rpki-client