Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e31362e302f32302d3230203d3e2034383437.roa
File:                     3131352e3138322e31362e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          t+Pb5fnCQ7KfDVlmzMBom4neBObaI7bowcXVhgk5OPk=
Subject key identifier:   5C:23:B4:20:AB:E6:2F:9C:0B:5A:DC:E8:43:65:11:BF:15:17:58:3A
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       58F73C1EA24969BA82D655A2ACC91AD70037C0D3
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e31362e302f32302d3230203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:02:13 +0000
ROA not before:           Wed 15 Apr 2026 03:57:13 +0000
ROA not after:            Wed 14 Apr 2027 04:02:13 +0000
asID:                     4847
IP address blocks:        115.182.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f7:3c:1e:a2:49:69:ba:82:d6:55:a2:ac:c9:1a:d7:00:37:c0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:57:13 2026 GMT
            Not After : Apr 14 04:02:13 2027 GMT
        Subject: CN=5C23B420ABE62F9C0B5ADCE8436511BF1517583A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:d8:07:b2:1b:f6:c6:86:c1:1c:4b:f1:84:
                    5a:b6:84:ee:a3:b4:ee:e7:dd:75:45:8a:2b:c0:62:
                    a3:af:21:ab:22:9b:e3:93:87:47:19:3e:d0:0d:8c:
                    55:dd:d8:ff:61:f4:7e:7b:99:e1:2d:0a:5a:bc:48:
                    6a:42:71:29:8d:e0:64:b5:43:e3:f8:6d:5b:87:5c:
                    3e:c4:31:78:46:7f:0b:25:75:6b:73:03:c3:43:b0:
                    5a:21:a8:74:d6:39:49:cc:ae:9f:77:79:da:cd:86:
                    8b:5b:36:1a:6d:2e:cf:ec:51:dc:91:f9:99:80:9a:
                    0e:76:28:38:be:2a:9b:41:ae:f8:de:5c:36:65:42:
                    1a:cc:0c:12:d4:14:54:db:27:d1:77:ea:b2:5e:55:
                    83:dc:ff:e3:7c:89:e5:a5:6f:89:53:b5:d2:35:24:
                    9c:fb:22:d1:38:d4:d2:96:6d:fb:07:fa:f3:ff:8f:
                    a4:48:18:ca:8e:3e:7b:66:43:66:4e:d8:d1:f5:8a:
                    79:38:e6:2f:72:9e:a8:f9:1b:a7:eb:c7:1b:66:a3:
                    81:f4:ad:09:68:14:13:ef:50:b3:8d:71:bd:ba:37:
                    c8:ca:d9:f7:56:3f:c7:dc:e9:0c:64:17:eb:1e:44:
                    dd:97:f4:3d:43:75:8b:b1:f3:90:0d:02:66:8f:4c:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:23:B4:20:AB:E6:2F:9C:0B:5A:DC:E8:43:65:11:BF:15:17:58:3A
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e31362e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:03:9c:be:a2:ee:e4:76:48:13:44:e4:86:9b:a5:b6:8c:f0:
         7d:34:0c:aa:a5:e7:da:c3:eb:94:aa:6c:c6:7b:be:00:cf:a5:
         66:b7:9a:ff:c9:46:1c:96:03:d8:9e:a3:bc:4d:60:c0:6d:a4:
         1a:43:d4:6d:7b:0b:af:93:05:49:d8:ef:c8:86:2e:2d:86:eb:
         af:2d:93:24:2d:6d:e5:34:f5:6e:2f:4f:8c:41:ad:dc:bc:47:
         a7:c3:8a:0d:7e:49:8f:9a:d3:d8:15:d9:eb:26:2e:8b:16:a7:
         a4:38:b5:16:f5:41:70:45:97:88:e9:86:30:2b:c7:97:21:93:
         00:1a:66:32:54:43:7a:76:bb:0b:a3:7e:3f:6f:f5:37:9e:ff:
         f8:52:36:e5:59:ae:d5:68:36:bc:2a:e2:bd:a6:ed:d8:43:35:
         46:d6:90:80:26:b8:44:95:6e:ca:da:3c:16:b3:6d:5e:69:15:
         94:02:9c:51:a6:82:28:37:82:a3:ec:bb:f0:e2:43:7a:4e:35:
         0a:92:e4:ea:1e:3d:0b:58:02:70:50:63:a8:50:ce:29:7d:a3:
         7b:88:47:59:00:8a:f7:ea:02:d2:e7:4d:a6:12:13:76:ae:48:
         7f:36:70:95:33:b1:93:88:0c:cd:3c:48:f6:8e:c3:d3:fd:54:
         d7:46:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:22 2026 by rpki-client