Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131382e3137382e302e302f31362d3234203d3e203337393633.roa
File:                     3131382e3137382e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier:          +O2TXpzep3vj9ZiXgpzn1odmEEygFr+fK3zS8m3HD2Q=
Subject key identifier:   7A:4E:1D:4B:94:D1:4C:F6:A6:9E:C7:FB:14:98:21:33:8B:5E:45:3D
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       0A394BA6439B5E46BB2B27DC39F8C20DA08B7EA6
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131382e3137382e302e302f31362d3234203d3e203337393633.roa
Signing time:             Thu 16 Apr 2026 02:14:48 +0000
ROA not before:           Thu 16 Apr 2026 02:09:48 +0000
ROA not after:            Thu 15 Apr 2027 02:14:48 +0000
asID:                     37963
IP address blocks:        118.178.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:39:4b:a6:43:9b:5e:46:bb:2b:27:dc:39:f8:c2:0d:a0:8b:7e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: Apr 16 02:09:48 2026 GMT
            Not After : Apr 15 02:14:48 2027 GMT
        Subject: CN=7A4E1D4B94D14CF6A69EC7FB149821338B5E453D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:c6:f4:b2:cf:5e:ba:46:2c:75:7b:62:ff:
                    bd:d4:dd:71:18:26:39:ad:a4:89:5e:7b:7f:bd:c8:
                    a4:1a:fc:b4:f5:48:6f:03:18:68:25:5e:ce:23:22:
                    28:73:01:0f:58:79:ae:ea:26:a6:4b:d8:3f:cf:9f:
                    5b:c3:a1:f5:f2:5d:bc:51:90:49:61:c4:77:09:69:
                    b7:dc:d9:f1:3a:db:43:7d:9f:ae:87:bc:4b:30:4a:
                    ab:56:9a:f7:85:ad:16:5f:e8:7e:30:6c:ca:04:39:
                    cf:be:49:50:44:30:3f:eb:d3:33:24:c6:46:cf:a0:
                    b5:7d:07:7f:b1:c8:c6:10:be:49:d8:81:c6:2c:39:
                    2d:05:e4:3e:b4:b0:1c:9b:75:e9:20:5f:2a:0b:9d:
                    5f:c9:7d:1f:88:17:5c:f9:ae:d2:3b:50:a4:c7:bd:
                    55:f7:9d:56:a1:34:48:c2:0a:f0:98:b0:1d:d8:a8:
                    b7:36:c5:87:5a:9e:91:36:67:65:e7:b7:d0:3d:42:
                    cc:b2:1b:3b:1b:f7:71:88:e4:08:3f:fa:eb:6f:f5:
                    b7:09:87:ff:ce:88:87:95:f5:0b:41:f0:cd:ec:90:
                    45:58:54:a3:31:b2:9d:67:78:ef:cf:f8:77:12:88:
                    27:90:2f:ca:df:02:dd:aa:49:7f:b0:bc:54:a5:ca:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4E:1D:4B:94:D1:4C:F6:A6:9E:C7:FB:14:98:21:33:8B:5E:45:3D
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131382e3137382e302e302f31362d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:23:72:34:6e:12:85:0a:6f:32:95:c1:b8:a1:a0:3a:9d:b9:
         79:f0:bd:9c:49:2c:05:d5:cf:67:34:89:f7:96:47:58:82:a0:
         94:c7:ec:c4:61:c4:94:e9:72:63:e3:f5:e7:93:ff:f7:58:cc:
         6b:99:fe:af:67:7c:10:dd:76:1c:a6:c3:4c:c9:5d:d3:c2:7a:
         78:ec:1c:70:fe:38:86:de:c8:de:0f:b0:68:16:e7:1c:eb:e2:
         d0:53:50:75:bd:2d:24:84:e7:14:60:b9:b8:9d:48:5a:a6:77:
         4e:2c:ed:3b:74:a4:e9:52:a8:c6:10:da:fd:e9:97:b9:95:c0:
         b5:66:8c:c9:1b:ee:f7:30:e5:81:ec:63:d1:62:ca:ac:57:42:
         4b:9c:35:6d:4f:35:63:18:ec:3c:bb:71:61:d1:56:d3:79:73:
         8d:33:57:8f:1c:2d:b7:4e:c5:0a:56:cb:2d:5f:81:77:1d:a5:
         11:f4:93:c0:4a:d9:df:9c:8a:5f:0e:54:c7:8e:9d:21:fa:d4:
         19:47:ca:29:43:f1:4e:ba:5d:dc:d8:e8:71:86:25:3f:32:e9:
         cd:4c:88:df:21:60:97:b4:75:83:66:7d:f5:2d:35:b5:c7:1a:
         7a:24:46:65:46:22:35:cb:ee:be:f7:67:47:93:46:e3:ee:70:
         8e:54:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:30 2026 by rpki-client