Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e36342e302f32302d3230203d3e2034383437.roa
File:                     3131352e3138322e36342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          ZGRwUtJLix9kzVxNjC3YQJRkZRNLNpNgzi8oKXTZ9Y4=
Subject key identifier:   77:06:FB:2C:89:A4:2E:C9:C3:2E:C5:E5:A2:ED:73:17:08:E4:85:3A
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       3BF7A960AB332A3C87CF3D428C7B500A30A117B9
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e36342e302f32302d3230203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:02:12 +0000
ROA not before:           Wed 15 Apr 2026 03:57:12 +0000
ROA not after:            Wed 14 Apr 2027 04:02:12 +0000
asID:                     4847
IP address blocks:        115.182.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 19:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f7:a9:60:ab:33:2a:3c:87:cf:3d:42:8c:7b:50:0a:30:a1:17:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:57:12 2026 GMT
            Not After : Apr 14 04:02:12 2027 GMT
        Subject: CN=7706FB2C89A42EC9C32EC5E5A2ED731708E4853A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:25:a2:00:24:61:8a:4f:2f:45:6b:80:45:
                    7f:b9:63:82:28:68:7b:9e:bd:b2:49:2a:88:bf:7e:
                    14:1b:fa:ba:57:90:31:c7:fe:63:98:27:b4:e6:5c:
                    7e:ac:97:ad:b9:bf:e5:57:77:a4:2b:e9:bb:96:df:
                    7c:79:f9:71:0d:db:8c:4c:c6:85:09:1b:1a:f9:a0:
                    9b:01:43:cf:05:30:14:6d:9b:0d:36:64:ab:ae:a8:
                    a8:cc:83:2a:31:5a:41:b1:6b:3f:1c:be:b9:7c:0a:
                    e7:6d:e4:ac:6a:5d:19:d4:b4:7a:7d:25:75:9f:21:
                    c8:e1:8f:1f:c4:c4:4a:49:8a:e9:e4:3b:c8:5a:c5:
                    cd:12:7e:2d:8d:75:31:11:2e:8a:00:f0:70:c3:09:
                    e9:82:e2:26:11:49:18:ac:d1:2e:d9:c7:76:9a:3a:
                    47:d0:35:98:43:7d:7e:3b:0d:69:8d:e5:0b:2a:19:
                    49:68:df:89:bd:be:f5:a2:b2:39:51:ac:1a:43:8c:
                    7c:11:03:3a:91:1d:9b:87:b0:09:0e:0b:80:15:27:
                    99:4d:d5:a0:c2:ee:6d:92:d4:69:72:95:62:e0:b2:
                    a7:0e:cd:6f:14:9b:36:60:a9:13:a5:0c:6b:f2:95:
                    6a:6a:40:64:ee:31:bd:30:3b:4a:90:a6:b5:40:df:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:FB:2C:89:A4:2E:C9:C3:2E:C5:E5:A2:ED:73:17:08:E4:85:3A
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e36342e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:ce:7f:cb:3c:45:44:d3:2c:f2:65:9c:15:3e:17:24:75:
         33:cf:a7:5c:41:e7:7c:a6:98:96:5d:e2:dd:c1:13:19:11:18:
         4e:09:e5:b1:23:f5:39:9d:50:c6:3e:32:e0:58:4b:22:ae:ef:
         e8:60:45:26:7d:be:35:7d:99:d5:75:e0:9d:01:a5:b2:ac:32:
         72:11:86:31:31:75:f2:26:d4:ff:ae:04:a4:93:09:4e:96:40:
         46:b3:ff:a1:65:7e:a1:73:b9:2a:35:7c:cc:5e:c3:c4:f3:0d:
         c4:f6:bd:47:43:c8:a4:67:88:8c:0a:70:5a:c9:c7:cd:46:40:
         72:d6:38:4c:f4:5e:8d:c5:19:83:64:2b:b7:a0:e0:95:50:2c:
         4a:2b:b9:bd:31:22:1c:69:f5:3c:a5:d3:aa:a9:c6:16:99:2b:
         37:60:6c:f5:97:b1:45:22:87:e9:36:69:88:ad:3f:4b:50:3f:
         35:12:ea:83:96:e3:16:a4:28:45:2f:7b:c9:1d:60:2b:f5:e7:
         94:8d:31:7a:00:f2:b7:34:a5:de:a6:0a:e2:03:3b:6c:02:89:
         92:cd:2c:18:a9:3a:1c:f8:e9:43:7b:19:99:a7:f0:a5:5d:14:
         e5:10:e8:de:c8:bf:fd:2f:66:ea:9c:20:90:27:0c:ae:a4:f6:
         39:4f:07:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:06 2026 by rpki-client