Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e38302e302f32302d3230203d3e2034383437.roa
File:                     3131352e3138322e38302e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          0Rd5LxzTNnL8awhTuDrPicPKuyn6C3jVldmgijIilHo=
Subject key identifier:   8D:BE:16:03:2F:DB:8B:B4:EC:C6:85:31:30:08:58:66:34:EA:5A:95
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       581BFD002E14D26ACE54941A91A22C15CC76C7B1
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e38302e302f32302d3230203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:02:13 +0000
ROA not before:           Wed 15 Apr 2026 03:57:13 +0000
ROA not after:            Wed 14 Apr 2027 04:02:13 +0000
asID:                     4847
IP address blocks:        115.182.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 19:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1b:fd:00:2e:14:d2:6a:ce:54:94:1a:91:a2:2c:15:cc:76:c7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:57:13 2026 GMT
            Not After : Apr 14 04:02:13 2027 GMT
        Subject: CN=8DBE16032FDB8BB4ECC685313008586634EA5A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:5d:1c:f1:ab:a4:57:8e:eb:22:21:a5:54:
                    c4:3c:c4:47:0a:c9:71:1b:c2:8d:3a:d7:37:42:37:
                    c8:a4:2c:e6:35:cf:18:bf:1b:6e:e6:a2:0f:3e:cf:
                    8e:e8:38:11:a9:3c:1a:6d:ef:f1:66:43:98:04:61:
                    b3:26:6b:ae:dd:cd:ff:31:af:81:0a:f0:d5:a3:d7:
                    4d:e1:45:e3:d8:a4:60:de:4f:db:88:a1:80:91:9b:
                    4e:f2:2b:95:5b:99:55:cd:49:40:c3:72:1a:ec:d2:
                    39:9d:f5:8d:5a:7a:e1:95:fd:ca:8b:d7:2f:73:0a:
                    d1:73:de:d7:cb:ff:ec:b4:33:b9:13:28:b4:6f:bd:
                    3a:cf:e1:a2:74:f7:fe:63:74:5b:02:65:c7:e2:cc:
                    f1:57:c6:33:81:3c:a6:13:b2:95:cd:27:24:c8:cd:
                    22:fe:a5:94:1c:ce:9e:67:63:f3:a7:e8:6f:f4:1f:
                    69:24:8e:ad:e7:46:48:34:a3:dd:1c:16:22:15:bf:
                    bb:c3:54:03:78:07:74:52:44:23:15:04:e6:83:8b:
                    4a:78:53:75:cd:28:a0:87:17:85:54:7d:5b:3a:31:
                    03:f7:08:fa:d7:01:39:7d:1f:fe:d3:ea:77:d4:7c:
                    ab:bc:17:97:db:7a:8a:12:05:8e:3c:11:1f:48:2e:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BE:16:03:2F:DB:8B:B4:EC:C6:85:31:30:08:58:66:34:EA:5A:95
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131352e3138322e38302e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:76:68:2a:dd:89:3b:d5:e5:b6:3c:39:ef:9f:b4:5b:5c:25:
         d8:fd:3d:85:31:0f:82:80:3c:95:f0:86:09:0e:16:b5:3d:ea:
         f6:9b:83:87:03:36:4a:aa:e6:54:62:00:60:e1:0e:19:6c:fa:
         b7:8a:18:f1:3d:5f:37:1e:0e:49:7c:89:b5:be:ce:fd:f6:4e:
         46:5b:2a:77:bc:e0:bc:cc:e3:3e:e2:36:d5:4f:fe:54:0f:71:
         e7:6f:63:c1:7e:7d:ad:39:43:82:54:7f:00:e9:c8:5c:23:f4:
         df:4c:69:9e:4e:9d:96:1e:74:3b:44:21:ea:12:4c:d2:e0:a7:
         86:43:75:b1:3e:a6:49:42:a4:b5:87:8a:aa:d2:8f:dd:f5:bf:
         c8:10:f0:8f:1b:a9:ee:09:21:d5:9f:ac:ab:29:bc:67:10:f1:
         7f:1a:2a:53:d7:20:14:a6:b4:69:90:67:e0:31:6f:8a:c8:77:
         1d:52:a5:2c:2a:ec:ce:87:1f:05:3f:3c:08:60:44:99:07:b3:
         a8:16:50:0f:51:61:89:94:49:fe:e0:a7:0e:cc:2a:c0:67:50:
         14:d5:6b:22:04:b7:4c:4e:f3:d3:be:f7:64:47:cd:7a:26:49:
         11:50:68:cf:ef:38:ad:c3:0c:48:b8:33:97:f0:2b:5b:5b:5c:
         40:68:83:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:00 2026 by rpki-client