Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e34382e302f32302d3230203d3e2034383437.roa
File:                     3131352e3138322e34382e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          AQsKVGmN3NfTmprwkUAJemuj694qvdNwom+ZohHgZZI=
Subject key identifier:   75:1B:23:E8:20:78:E5:A3:5A:1D:26:C3:0D:E4:9D:F3:A0:B3:DD:78
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       2D2BA3375E07A41771464CAE023DEBC0A96C2332
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e34382e302f32302d3230203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:02:13 +0000
ROA not before:           Wed 15 Apr 2026 03:57:13 +0000
ROA not after:            Wed 14 Apr 2027 04:02:13 +0000
asID:                     4847
IP address blocks:        115.182.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2b:a3:37:5e:07:a4:17:71:46:4c:ae:02:3d:eb:c0:a9:6c:23:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:57:13 2026 GMT
            Not After : Apr 14 04:02:13 2027 GMT
        Subject: CN=751B23E82078E5A35A1D26C30DE49DF3A0B3DD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:e0:7e:1a:03:a6:b4:f0:27:b5:3b:78:e6:
                    ae:09:79:bd:36:c7:4e:10:6a:cc:38:dd:a2:b0:8d:
                    b0:59:0e:22:c4:44:f6:25:9a:be:81:31:35:ba:37:
                    dd:36:cb:eb:e4:ee:47:d2:cc:ee:de:f9:42:09:44:
                    89:e2:dc:78:b5:2c:13:a5:af:94:e7:7c:d4:97:7c:
                    aa:bc:d9:b3:91:9c:21:f6:0c:b2:1a:f1:ff:06:85:
                    31:ba:7e:4b:a1:2b:b1:44:0a:8e:bb:82:56:5e:58:
                    b9:44:9a:5d:20:34:43:6d:2b:82:6c:d2:ef:da:04:
                    05:b6:9d:ff:e2:7f:92:5b:9a:e7:09:fc:3e:f6:59:
                    82:50:70:a8:4d:81:79:0a:9b:af:2b:c4:91:33:75:
                    03:ad:5e:63:16:20:f8:28:69:34:de:39:67:fa:ad:
                    26:31:77:61:ab:0a:5a:db:60:a5:f9:56:f5:3a:55:
                    83:54:25:be:18:5c:5b:7f:77:99:92:6b:10:87:bd:
                    79:29:43:f0:4e:8e:2e:9a:f5:49:4c:d5:11:9e:36:
                    cf:23:79:98:0e:90:49:36:f2:0d:40:87:32:46:02:
                    39:7e:4b:7c:0d:58:81:3b:86:84:03:bb:1c:14:05:
                    e2:d4:63:08:7d:e3:0f:bd:a2:4b:c0:3e:6a:c9:c3:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:23:E8:20:78:E5:A3:5A:1D:26:C3:0D:E4:9D:F3:A0:B3:DD:78
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e34382e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:77:30:7e:d4:bc:0b:81:79:53:1c:e2:36:31:71:6e:b0:
         db:e9:99:8e:2b:58:16:08:0b:d6:85:f2:91:30:10:79:14:4b:
         02:f8:6a:7b:e8:a9:3a:70:fd:05:2d:0f:03:85:91:ac:b1:71:
         ad:c0:67:12:a6:87:51:a3:5c:ba:17:ec:2f:6f:f9:a8:d9:88:
         71:57:d7:f7:ac:91:21:60:b7:0f:a2:96:1f:64:39:8c:89:af:
         3b:02:40:9f:a6:a0:d8:fe:4a:83:4a:c3:1d:e5:bd:f8:28:14:
         35:e7:3a:92:26:d6:b8:7a:e6:a3:8d:1a:b9:fa:68:f3:86:46:
         64:b7:cb:11:25:17:b0:23:d0:d2:89:57:5f:69:29:eb:fa:62:
         d8:ff:62:ea:d6:f4:75:1c:13:3f:4f:9e:7c:f3:c0:10:a7:ed:
         97:6c:85:51:65:28:ac:44:6d:e9:5d:11:86:ac:88:60:6f:0e:
         7a:59:4a:17:d2:1f:01:fb:d7:05:b1:b6:98:98:05:52:0f:b7:
         89:68:26:2f:34:7d:bc:c3:52:db:ad:e8:60:58:25:fc:cf:07:
         29:db:6b:d3:25:4b:4e:c5:9c:3e:79:7c:2a:08:9a:85:5e:12:
         85:4e:af:ec:69:5b:23:7e:a6:2c:a6:9d:15:2b:7b:82:3c:28:
         12:fc:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:54 2026 by rpki-client