Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa
File:                     3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier:          m6epqEtUYD4SGanpCKyp2r0vVNNtln8lQemUQNgltGM=
Subject key identifier:   2E:D3:6B:EA:B9:46:4D:FA:1D:8F:29:26:C7:13:74:F0:0D:A3:F3:11
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       1D60D93BAD7140F79A6AFB5F3D68B3820147E222
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa
Signing time:             Wed 15 Apr 2026 04:05:03 +0000
ROA not before:           Wed 15 Apr 2026 04:00:03 +0000
ROA not after:            Wed 14 Apr 2027 04:05:03 +0000
asID:                     4847
IP address blocks:        118.244.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 19:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:60:d9:3b:ad:71:40:f7:9a:6a:fb:5f:3d:68:b3:82:01:47:e2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 04:00:03 2026 GMT
            Not After : Apr 14 04:05:03 2027 GMT
        Subject: CN=2ED36BEAB9464DFA1D8F2926C71374F00DA3F311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:be:9f:9e:5d:aa:85:17:69:d9:24:b1:0a:
                    ee:93:75:45:6c:94:8e:c8:b5:19:44:f6:c6:31:3f:
                    ad:4d:18:57:36:90:d6:74:03:35:8f:d0:da:b3:4e:
                    07:53:0d:d7:71:dc:e9:f6:86:b8:cf:77:7c:05:ad:
                    d1:35:5f:45:d0:26:ce:c2:28:4e:c5:ac:b2:9b:9a:
                    e2:94:d4:ba:9e:11:d5:19:2d:07:2e:0f:30:36:f7:
                    c0:b7:92:31:c5:26:9d:4e:cd:49:f4:b3:a1:16:de:
                    fc:ab:3c:96:3a:d2:ed:f8:eb:7a:84:f9:3f:ef:bf:
                    e7:78:aa:5b:5b:69:f0:93:3c:91:7c:34:da:51:5e:
                    cf:69:f3:60:f0:8f:3e:34:04:6f:3e:cb:bc:b9:3e:
                    b8:f9:9f:a2:b7:a9:6b:58:8d:9b:94:4a:37:89:2b:
                    4f:af:22:80:7a:86:63:3f:99:f6:26:19:3b:6b:1f:
                    6e:f2:c9:f6:30:28:a2:df:76:e7:d0:76:42:c1:43:
                    26:94:1f:67:8d:c8:38:68:a3:da:7b:ba:8f:bf:6e:
                    7b:71:c7:e9:a3:1d:79:f7:b4:24:dd:48:da:3e:73:
                    c4:c2:5d:d8:ad:0d:15:45:8c:c2:cb:ce:14:88:97:
                    52:4b:63:91:bf:1a:bd:a4:be:d0:cd:a0:4c:92:53:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:6B:EA:B9:46:4D:FA:1D:8F:29:26:C7:13:74:F0:0D:A3:F3:11
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3131382e3234342e3232342e302f32302d3230203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.244.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:46:fa:91:41:9d:36:58:c5:68:c2:37:56:3f:da:02:b9:f6:
         24:d6:f1:4b:2e:8d:17:ec:df:0c:5b:1a:11:41:ee:0c:68:8a:
         32:47:5f:71:18:6a:d9:67:ec:cd:07:9c:8c:e1:fc:42:d8:65:
         9b:b4:1a:7c:13:61:b8:85:66:7a:e2:a0:6e:db:bb:2d:db:49:
         15:42:5f:f1:1e:c9:52:e5:73:90:57:25:ac:c0:d5:65:c6:7e:
         f5:7b:da:33:21:d6:ec:9c:41:73:1f:cf:32:21:62:10:13:ae:
         38:d7:30:bb:97:a2:8e:69:e8:1a:67:53:4e:3b:92:05:b7:21:
         11:92:23:98:50:d9:77:97:e8:69:21:01:59:4b:1f:a0:e8:9d:
         27:dc:39:ee:3b:13:24:7d:a7:9f:3d:f3:71:54:f5:46:c1:70:
         b4:b6:cd:4f:3a:d2:d5:56:13:2f:f0:39:83:ba:38:7a:40:f9:
         44:80:45:8f:12:f4:e4:04:5a:c0:36:bf:26:81:7b:8d:c2:60:
         93:98:31:0a:ca:a8:4f:ab:66:02:db:18:b5:05:e1:e9:79:b4:
         e3:aa:6c:53:bf:6b:c5:4d:15:f2:96:b3:a1:ad:c6:87:e7:70:
         b3:c4:b4:cb:8a:7d:4e:55:b6:ae:de:20:8d:29:9b:e9:54:77:
         0d:f6:7a:c9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUHWDZO61xQPeaavtfPWizggFH4iIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky
MjJFOEY5RjAeFw0yNjA0MTUwNDAwMDNaFw0yNzA0MTQwNDA1MDNaMDMxMTAvBgNV
BAMTKDJFRDM2QkVBQjk0NjRERkExRDhGMjkyNkM3MTM3NEYwMERBM0YzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qr6fnl2qhRdp2SSxCu6TdUVs
lI7ItRlE9sYxP61NGFc2kNZ0AzWP0NqzTgdTDddx3On2hrjPd3wFrdE1X0XQJs7C
KE7FrLKbmuKU1LqeEdUZLQcuDzA298C3kjHFJp1OzUn0s6EW3vyrPJY60u3463qE
+T/vv+d4qltbafCTPJF8NNpRXs9p82Dwjz40BG8+y7y5Prj5n6K3qWtYjZuUSjeJ
K0+vIoB6hmM/mfYmGTtrH27yyfYwKKLfdufQdkLBQyaUH2eNyDhoo9p7uo+/bntx
x+mjHXn3tCTdSNo+c8TCXditDRVFjMLLzhSIl1JLY5G/Gr2kvtDNoEySU88hAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQULtNr6rlGTfodjykmxxN08A2j8xEwHwYDVR0j
BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz
QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA3MDk1NTkyNDA3MzU0NTczMS8wLzMxMzEzODJlMzIz
NDM0MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHb04DANBgkqhkiG9w0BAQsFAAOCAQEAF0b6kUGdNljFaMI3Vj/aArn2
JNbxSy6NF+zfDFsaEUHuDGiKMkdfcRhq2WfszQecjOH8Qthlm7QafBNhuIVmeuKg
btu7LdtJFUJf8R7JUuVzkFclrMDVZcZ+9XvaMyHW7JxBcx/PMiFiEBOuONcwu5ei
jmnoGmdTTjuSBbchEZIjmFDZd5foaSEBWUsfoOidJ9w57jsTJH2nnz3zcVT1RsFw
tLbNTzrS1VYTL/A5g7o4ekD5RIBFjxL05ARawDa/JoF7jcJgk5gxCsqoT6tmAtsY
tQXh6Xm046psU79rxU0V8pazoa3Gh+dws8S0y4p9TlW2rt4gjSmb6VR3DfZ6yQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:48 2026 by rpki-client