Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e302e302f31362d3136203d3e2034383437.roa
File:                     3131352e3138322e302e302f31362d3136203d3e2034383437.roa (raw, json)
Hash identifier:          Xbnkq2phpWAjUfyFIFxItdRyXHt98xWzrmQO6hwK+Jg=
Subject key identifier:   B7:42:08:0D:40:B9:0B:2E:11:30:58:46:FF:41:3D:C8:15:DB:C8:CC
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       4E26F247AD680CA9322C61CC819D7542AC2A249B
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e302e302f31362d3136203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:02:24 +0000
ROA not before:           Wed 15 Apr 2026 03:57:24 +0000
ROA not after:            Wed 14 Apr 2027 04:02:24 +0000
asID:                     4847
IP address blocks:        115.182.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:f2:47:ad:68:0c:a9:32:2c:61:cc:81:9d:75:42:ac:2a:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:57:24 2026 GMT
            Not After : Apr 14 04:02:24 2027 GMT
        Subject: CN=B742080D40B90B2E11305846FF413DC815DBC8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:07:c5:38:81:d5:0a:1b:50:81:f5:2d:7e:
                    6c:5e:f6:31:0f:3e:aa:20:f7:e5:ea:15:6b:73:6b:
                    b7:aa:bb:44:03:6d:a7:e9:4b:52:81:d1:3c:54:26:
                    e0:50:21:c6:a0:12:5c:ef:89:28:a3:12:34:e4:35:
                    5d:8b:10:57:29:21:31:50:16:93:46:e5:8e:9e:8e:
                    fa:b1:2d:11:1c:f4:df:b6:7d:a3:44:73:68:8f:e9:
                    ba:74:8d:df:90:01:fc:80:b1:af:03:c9:d1:3e:14:
                    e0:38:9f:05:c9:21:6e:c2:78:5d:61:eb:42:4e:b9:
                    f2:16:89:f1:13:dd:1e:a6:94:ab:2e:a7:24:d1:09:
                    69:f6:74:9d:55:20:73:74:7f:e3:14:3e:a3:33:9e:
                    ce:3b:53:f1:d5:2e:ca:ca:6f:78:95:50:f4:fe:11:
                    b7:1a:d6:d8:71:e5:cd:b7:cb:c0:30:91:83:80:75:
                    47:b5:59:a5:ac:3c:27:88:6b:2e:e7:80:77:e2:10:
                    c2:6a:c4:2b:0a:39:67:23:c8:09:c0:d6:d5:fc:f6:
                    83:c8:19:e7:66:db:47:e4:77:e7:2d:6f:4f:a4:59:
                    6e:55:15:8f:54:24:e0:cb:80:e0:84:84:8c:5e:5e:
                    07:2a:e3:0a:c6:4b:8b:d3:ca:bb:9a:b8:27:bf:18:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:42:08:0D:40:B9:0B:2E:11:30:58:46:FF:41:3D:C8:15:DB:C8:CC
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e302e302f31362d3136203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:97:37:1b:1b:4a:1a:f3:c4:60:eb:19:2d:aa:d5:9c:ff:79:
         5c:2f:f9:d2:3b:07:da:45:e9:75:75:b8:f7:43:cf:51:1c:e1:
         f5:92:2a:e8:07:02:ae:b6:60:6f:30:17:d0:e2:3b:89:06:13:
         ca:5e:cc:ad:8f:00:64:b6:90:c3:59:c9:8e:54:e9:0e:a5:c4:
         e8:28:b4:8f:04:e6:86:8a:b8:29:f4:06:b3:d7:8b:9d:72:9d:
         a6:3d:1d:75:f5:55:e3:6c:ef:73:f3:70:ee:f9:eb:b1:a2:f4:
         9e:d9:c4:15:8f:01:7e:45:5b:93:75:f4:64:75:1c:0f:eb:d1:
         00:70:a3:41:3f:5e:43:4c:1a:ba:00:b1:90:74:b2:51:5d:f6:
         3d:a5:b8:ed:e5:37:c7:83:1d:b0:4a:78:7a:e9:89:5f:98:9d:
         db:37:f2:36:e9:fc:c9:0c:72:b9:4c:64:63:fc:58:ab:aa:96:
         26:64:52:5e:84:68:be:53:0e:9e:59:d6:28:2c:f7:9f:6a:5c:
         f0:eb:95:bc:83:d5:ca:a8:3c:aa:fc:51:fa:55:82:21:ff:46:
         87:9b:c5:20:24:13:a0:aa:9f:63:0b:eb:cf:0b:29:99:cd:c7:
         31:90:70:df:a4:b7:b6:ba:c1:1b:bf:b5:39:03:4e:d1:8f:77:
         c9:51:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:47 2026 by rpki-client