Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa
File:                     3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier:          8Kg3i3gQO/kmih5Qdyp2BmedRYRJpGBbIeSND8LSkfI=
Subject key identifier:   71:AE:02:DF:66:E0:30:D4:58:13:E7:C7:94:34:34:C8:0F:75:00:52
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       124D92A7638AAD8E481929CE1AC44409545A9AFD
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:05:04 +0000
ROA not before:           Wed 15 Apr 2026 04:00:04 +0000
ROA not after:            Wed 14 Apr 2027 04:05:04 +0000
asID:                     4847
IP address blocks:        118.244.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4d:92:a7:63:8a:ad:8e:48:19:29:ce:1a:c4:44:09:54:5a:9a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 04:00:04 2026 GMT
            Not After : Apr 14 04:05:04 2027 GMT
        Subject: CN=71AE02DF66E030D45813E7C7943434C80F750052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:62:d7:6e:bd:47:e3:52:c4:44:37:c3:d5:
                    37:c2:e4:e1:7f:35:da:64:57:ac:28:d0:cd:23:a0:
                    7f:62:8f:22:9c:e4:7c:0c:dd:01:23:cb:d1:d2:7c:
                    05:75:14:ce:f4:68:b7:7d:40:78:97:66:9b:60:90:
                    31:72:a3:fb:b4:cd:29:23:2a:2e:58:dd:4f:e4:ca:
                    23:29:a7:f2:67:bb:57:01:61:cd:3a:2f:d3:d0:2e:
                    ce:ea:20:67:01:c3:ce:50:23:4d:65:50:64:df:02:
                    a0:16:9f:f1:cc:47:e3:ad:22:7f:5d:2f:5b:fb:8b:
                    68:80:7b:f0:01:3f:a4:78:e3:12:20:66:e9:57:f6:
                    bb:73:40:7c:95:bb:3c:12:f7:d2:27:4e:82:4c:7c:
                    d5:84:ee:e5:f1:fb:23:91:ba:eb:3c:a7:2b:ea:9d:
                    e2:d7:a5:bb:a6:6f:cd:e0:fb:03:8d:3c:90:55:af:
                    ea:42:14:a4:1e:5b:56:91:9e:5f:d3:3e:e4:c3:e9:
                    4e:54:07:5a:2a:10:58:36:47:56:ae:2e:6c:3f:38:
                    d1:2e:24:8b:55:c0:21:4b:00:ac:59:e5:ad:71:6f:
                    40:e5:bc:c6:76:6a:64:f4:a2:96:c6:19:38:39:b3:
                    50:05:96:d8:13:b2:b8:1d:f6:82:bf:55:b7:05:81:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:02:DF:66:E0:30:D4:58:13:E7:C7:94:34:34:C8:0F:75:00:52
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3139322e302f31392d3139203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.244.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:b6:a6:c1:0a:15:16:61:8b:6b:55:18:41:1b:b7:dc:aa:
         f7:49:65:6d:b9:76:b5:a6:1a:74:9e:bc:98:61:35:d6:d6:2d:
         7d:88:ca:e8:a1:bd:03:91:79:be:ee:17:a3:c2:82:33:99:45:
         63:07:6f:c4:32:a9:d9:a5:76:3e:e1:cf:95:d8:05:85:a1:e1:
         b1:77:ab:75:1c:01:32:0c:65:22:21:8e:6e:20:9d:b1:ef:80:
         91:2b:43:4a:b9:db:1c:33:63:a9:92:e7:42:93:a0:03:3c:b9:
         f5:ed:ea:da:95:c6:d7:92:89:a0:81:ea:b0:58:62:11:e0:ba:
         0b:7b:11:78:a7:31:74:53:a4:27:1d:2a:ca:6b:40:6d:14:7a:
         5d:dc:7e:df:33:19:a4:c4:df:49:43:5f:a1:55:b6:af:de:22:
         83:fb:8a:bd:95:67:95:c3:9e:11:1d:53:31:95:d3:02:56:54:
         b6:79:5c:64:fc:89:6a:26:26:ed:dd:cc:44:ed:82:24:8c:7b:
         27:34:94:e4:d2:46:4d:39:f3:e7:40:10:b5:2b:df:8d:89:df:
         24:58:db:7d:83:86:f1:2e:ee:07:cf:8a:66:ed:d0:15:60:52:
         c5:16:1c:9f:e6:0f:62:29:70:81:cf:02:c3:31:69:5e:f1:6a:
         3b:a1:7f:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:32 2026 by rpki-client