Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e3139322e302f31382d3138203d3e2034383437.roa
File:                     3131352e3138322e3139322e302f31382d3138203d3e2034383437.roa (raw, json)
Hash identifier:          Lzcx2Tgyms44uoYEtMjWx+3iKqnwqIF4wdXd/3T43a8=
Subject key identifier:   F8:78:69:AF:5B:D7:25:E4:F8:FC:86:55:21:CC:62:92:21:1E:78:E3
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       34128FE24F9ECA51D57602CDF1FBED705F15E45A
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e3139322e302f31382d3138203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:02:13 +0000
ROA not before:           Wed 15 Apr 2026 03:57:13 +0000
ROA not after:            Wed 14 Apr 2027 04:02:13 +0000
asID:                     4847
IP address blocks:        115.182.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:12:8f:e2:4f:9e:ca:51:d5:76:02:cd:f1:fb:ed:70:5f:15:e4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:57:13 2026 GMT
            Not After : Apr 14 04:02:13 2027 GMT
        Subject: CN=F87869AF5BD725E4F8FC865521CC6292211E78E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:f5:85:a6:ed:64:49:e0:f5:44:b1:09:4d:
                    77:8d:79:4b:b8:cc:8b:8b:c8:b5:4d:b8:24:6b:71:
                    46:76:5c:63:da:77:05:43:4b:74:79:55:61:16:a9:
                    a6:16:ac:9b:9d:6a:e6:ea:67:1d:97:47:4a:37:4f:
                    0a:7d:d8:6b:6f:49:27:b9:9e:57:76:93:62:ff:76:
                    55:3f:97:9f:9e:9f:8f:e8:02:e9:de:a7:12:68:d0:
                    19:72:1c:0f:01:ef:9a:a2:35:ad:a0:e0:c6:15:02:
                    32:5d:dc:4e:b3:7a:57:fe:34:9d:48:94:a7:a7:d0:
                    bf:bd:f0:58:17:1d:c3:9c:da:b5:f4:0e:16:46:a2:
                    c9:ee:0d:95:fc:38:bb:4a:83:41:a3:dc:33:2e:e2:
                    61:68:85:be:ea:c8:db:9a:23:7b:f3:59:96:26:5d:
                    a3:7c:11:6b:c2:9c:03:30:df:66:bc:a6:62:68:44:
                    ed:da:29:e0:a9:53:8b:ed:96:6b:cf:17:88:1d:8d:
                    15:a4:1b:78:c9:b4:d4:15:f6:5a:85:25:d2:d7:5f:
                    b7:a6:39:b2:f1:36:52:81:39:da:1d:02:68:de:99:
                    32:89:a7:2c:d5:51:92:83:52:bb:1c:6c:3f:c2:55:
                    44:d0:60:93:1d:d4:be:a8:4a:0d:81:38:6d:e0:7d:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:78:69:AF:5B:D7:25:E4:F8:FC:86:55:21:CC:62:92:21:1E:78:E3
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e3139322e302f31382d3138203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:8c:21:3c:ed:70:5b:45:92:21:62:04:56:59:81:59:d4:
         99:a2:5b:87:9a:c6:de:60:ce:5d:3d:7a:3d:9c:6d:b8:52:93:
         ac:f9:69:44:f1:c5:90:6b:5a:05:68:ed:28:52:de:2d:af:dd:
         71:08:e0:86:0e:8f:2b:af:86:55:d9:85:15:c8:e0:3c:73:bb:
         b9:b4:5b:39:5e:9a:35:31:e0:b3:d4:1a:02:dc:29:ab:8e:d9:
         fc:e0:ab:f9:dd:35:9c:84:fa:b9:4f:a4:cc:0a:96:90:40:67:
         b2:e1:9a:6c:81:fd:18:c7:b0:09:2a:f7:ec:a6:ab:60:cb:17:
         7e:a2:12:e7:ad:d3:fd:86:fd:c2:60:9b:34:2c:32:c5:ba:cb:
         df:86:d0:98:4a:c0:37:7a:85:46:fa:a2:01:52:1b:f5:d0:7c:
         a6:81:7f:83:58:b6:58:a0:32:6f:1b:dc:24:2e:31:8a:32:43:
         e9:6c:59:21:c9:7a:f0:3a:49:2a:7e:fe:57:74:79:8f:1b:d5:
         70:93:cd:fb:d4:54:ae:97:84:c1:1f:89:0d:a3:5f:62:3b:ab:
         58:14:d1:1f:ea:8f:84:6f:2e:65:93:08:51:a8:a2:4c:7e:cc:
         a2:25:65:ce:d5:5f:9e:e1:64:05:d9:b9:7e:33:1a:23:77:31:
         da:ae:aa:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:30 2026 by rpki-client