Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS18207.roa
File:                     AS18207.roa (raw, json)
Hash identifier:          o0AD3eHPCQQvw3txZJzNch2miZhCRQ0lgzH6bHZt+Kg=
Subject key identifier:   F0:64:D0:BE:16:84:BA:65:30:A7:BB:54:27:30:21:7D:78:EE:C6:39
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       3976A0E94DD57172A5E2FE835B937A9CEE7F81
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS18207.roa
Signing time:             Tue 19 May 2026 02:36:42 +0000
ROA not before:           Tue 19 May 2026 02:31:42 +0000
ROA not after:            Tue 18 May 2027 02:36:42 +0000
asID:                     18207
IP address blocks:        103.118.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 23:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:76:a0:e9:4d:d5:71:72:a5:e2:fe:83:5b:93:7a:9c:ee:7f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: May 19 02:31:42 2026 GMT
            Not After : May 18 02:36:42 2027 GMT
        Subject: CN=F064D0BE1684BA6530A7BB542730217D78EEC639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:f6:ae:37:3a:3c:2a:06:e4:fa:bf:87:e8:
                    23:81:bf:7f:2b:66:49:6a:bf:27:42:db:b5:d0:2d:
                    a5:10:40:1d:ff:2e:59:4e:0d:55:66:53:57:e2:ad:
                    ed:b3:a2:5f:0f:38:71:7d:22:ac:9b:23:d1:a1:86:
                    c4:f2:9c:c4:1c:89:eb:71:25:97:ce:1f:4b:da:e9:
                    a5:f0:fb:19:f3:c5:d5:55:be:08:7b:62:16:05:84:
                    a0:7a:b9:c2:d7:ef:e5:77:39:e5:f4:39:9e:af:80:
                    46:7c:76:1c:b1:e6:cc:27:00:47:80:74:d5:a2:76:
                    4e:e8:0f:92:98:87:1a:06:4f:ab:d8:7e:d7:26:9a:
                    cd:69:97:cc:a2:6b:c0:0d:aa:37:14:90:8d:f0:72:
                    cc:5d:ea:ab:e9:1c:fd:17:17:3e:84:47:13:1f:26:
                    40:67:ac:3b:f3:33:d1:90:e9:a6:1f:e1:1e:5e:2e:
                    ee:c7:50:05:24:5b:d2:44:69:84:85:9a:77:84:4e:
                    ff:9d:1e:a5:54:4d:66:ee:49:7b:6c:ed:c1:d8:75:
                    da:5a:94:45:75:d9:16:8c:6e:e6:b5:1f:a3:ba:e1:
                    e5:e9:33:92:a1:3d:fd:44:57:4e:92:40:dc:0d:67:
                    45:a8:79:f9:65:20:14:20:b8:ff:7c:ea:19:a7:ac:
                    ff:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:64:D0:BE:16:84:BA:65:30:A7:BB:54:27:30:21:7D:78:EE:C6:39
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS18207.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:95:99:23:86:ee:45:d5:aa:b3:89:e8:5f:4e:1b:5e:16:69:
         44:9b:f7:3d:06:1b:80:f4:af:06:82:53:94:b1:90:21:ba:6d:
         61:21:1c:b5:8c:4e:7d:76:f3:be:64:a2:69:61:48:4a:4e:e3:
         3a:41:c8:1c:3e:05:fd:c3:8d:83:9f:f2:8a:d2:45:1b:12:4a:
         de:f3:69:74:8a:b2:86:72:78:eb:c8:83:b8:53:fd:2f:2d:d3:
         6d:e8:52:92:07:b4:03:f6:e6:be:a0:f0:b6:a7:ba:90:b2:be:
         cb:f3:a6:a2:38:c1:a6:0d:a8:23:9a:0f:b8:29:c1:d2:31:0c:
         2f:7f:f7:e2:db:69:04:ff:ea:f2:ec:3a:4f:09:a6:b3:2b:64:
         99:59:0a:a6:5c:a2:94:22:15:e2:12:af:cd:cc:2e:f1:b5:62:
         f6:05:82:52:f0:46:ce:ac:26:93:cb:e0:51:c4:6b:45:e6:5b:
         38:79:99:fd:c4:a9:05:f0:39:c7:45:cf:fb:d4:e2:9d:d5:17:
         75:6f:e7:a3:2e:b3:71:c3:18:85:68:d8:54:1e:86:0f:1e:bd:
         4f:e3:56:98:d1:19:9d:a6:12:5e:e0:14:1a:d2:8f:0e:c6:b7:
         0b:5f:74:27:04:cc:57:31:4f:44:1a:d8:df:4d:96:e7:4f:bd:
         78:dd:b8:85
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgITOXag6U3VcXKl4v6DW5N6nO5/gTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxODc2MzI0NzA0NkQ1NkFBRkIzRDY3NzNEMDQ5NDU5QjAx
RjlEOTc2MB4XDTI2MDUxOTAyMzE0MloXDTI3MDUxODAyMzY0MlowMzExMC8GA1UE
AxMoRjA2NEQwQkUxNjg0QkE2NTMwQTdCQjU0MjczMDIxN0Q3OEVFQzYzOTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALEz9q43OjwqBuT6v4foI4G/fytm
SWq/J0LbtdAtpRBAHf8uWU4NVWZTV+Kt7bOiXw84cX0irJsj0aGGxPKcxByJ63El
l84fS9rppfD7GfPF1VW+CHtiFgWEoHq5wtfv5Xc55fQ5nq+ARnx2HLHmzCcAR4B0
1aJ2TugPkpiHGgZPq9h+1yaazWmXzKJrwA2qNxSQjfByzF3qq+kc/RcXPoRHEx8m
QGesO/Mz0ZDpph/hHl4u7sdQBSRb0kRphIWad4RO/50epVRNZu5Je2ztwdh12lqU
RXXZFoxu5rUfo7rh5ekzkqE9/URXTpJA3A1nRah5+WUgFCC4/3zqGaes/5ECAwEA
AaOCAeMwggHfMB0GA1UdDgQWBBTwZNC+FoS6ZTCnu1QnMCF9eO7GOTAfBgNVHSME
GDAWgBQYdjJHBG1Wqvs9Z3PQSUWbAfnZdjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f
BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1
NTg4OTkzNTQ4NjE1NjgyLzAvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1
OUIwMUY5RDk3Ni5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu
YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv
MS8xODc2MzI0NzA0NkQ1NkFBRkIzRDY3NzNEMDQ5NDU5QjAxRjlEOTc2LmNlcjBd
BggrBgEFBQcBCwRRME8wTQYIKwYBBQUHMAuGQXJzeW5jOi8vcnBraS1ycHMuY25u
aWMuY24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8wL0FTMTgyMDcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJndtgwDQYJKoZIhvcNAQELBQADggEBAHCVmSOG7kXVqrOJ6F9OG14WaUSb
9z0GG4D0rwaCU5SxkCG6bWEhHLWMTn12875komlhSEpO4zpByBw+Bf3DjYOf8orS
RRsSSt7zaXSKsoZyeOvIg7hT/S8t023oUpIHtAP25r6g8LanupCyvsvzpqI4waYN
qCOaD7gpwdIxDC9/9+LbaQT/6vLsOk8JprMrZJlZCqZcopQiFeISr83MLvG1YvYF
glLwRs6sJpPL4FHEa0XmWzh5mf3EqQXwOcdFz/vU4p3VF3Vv56Mus3HDGIVo2FQe
hg8evU/jVpjRGZ2mEl7gFBrSjw7GtwtfdCcEzFcxT0Qa2N9NludPvXjduIU=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:31 2026 by rpki-client