Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS4808.roa
File:                     AS4808.roa (raw, json)
Hash identifier:          JbGiK6DLcKrdz2nww9occEBMgm2P+u2zJItjHV3ny3I=
Subject key identifier:   00:1D:BF:BC:0A:E1:67:71:F2:86:69:E6:58:40:09:E3:88:A4:6C:4A
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       50F5F02C81726827619113D973B4714529F0167F
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS4808.roa
Signing time:             Mon 20 Apr 2026 08:45:03 +0000
ROA not before:           Mon 20 Apr 2026 08:40:03 +0000
ROA not after:            Mon 19 Apr 2027 08:45:03 +0000
asID:                     4808
IP address blocks:        115.182.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 06:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:f0:2c:81:72:68:27:61:91:13:d9:73:b4:71:45:29:f0:16:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 20 08:40:03 2026 GMT
            Not After : Apr 19 08:45:03 2027 GMT
        Subject: CN=001DBFBC0AE16771F28669E6584009E388A46C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:db:38:75:10:27:a2:c8:1b:a5:c7:17:f6:
                    bc:95:e3:78:3e:55:34:d3:fa:dd:6f:12:52:6a:1a:
                    83:fc:c4:28:49:25:d3:0e:de:08:9d:48:57:8f:31:
                    03:c1:15:3b:13:3c:66:f5:ee:4d:22:86:6a:7e:eb:
                    ad:ad:33:ce:42:0b:40:21:17:b1:a4:d3:7c:06:58:
                    e0:70:86:3f:c5:93:cb:9e:f8:c8:ea:b8:e2:31:b3:
                    88:fd:4a:97:fc:fb:b3:88:55:57:c8:89:cc:a7:fe:
                    6d:43:8d:6c:c0:1c:93:d2:2a:3f:32:7c:ec:d9:09:
                    c1:b9:85:4c:88:0c:68:56:e3:e2:4e:83:f0:bc:4e:
                    85:ab:64:61:14:38:82:ef:a9:d4:94:80:85:96:ca:
                    7f:fc:45:34:e6:9c:e4:01:e5:ee:b0:7a:38:7d:0a:
                    e7:c6:62:78:06:4f:04:89:f1:a0:05:75:06:30:3e:
                    80:eb:fb:98:00:d7:fe:ff:7c:d1:02:ae:46:0f:fc:
                    f2:9d:ae:d8:9a:96:88:f8:7a:e4:1b:c7:48:09:24:
                    88:52:7a:88:23:fe:f2:1e:0b:fe:91:0d:e8:ee:7b:
                    f2:64:11:e9:bb:26:b3:68:2b:1f:d0:42:52:6b:12:
                    28:26:0c:af:3b:33:f2:cc:e3:9e:ef:f1:20:12:ad:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1D:BF:BC:0A:E1:67:71:F2:86:69:E6:58:40:09:E3:88:A4:6C:4A
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/AS4808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.182.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e1:92:a4:c2:9b:f4:db:63:23:cd:e1:7e:fd:f4:40:43:2f:
         17:22:6f:0e:de:b3:39:1c:e2:95:6f:c3:07:84:93:64:31:07:
         14:18:ef:93:ee:9c:42:e4:68:37:44:33:c7:ca:b3:27:fc:d0:
         39:c2:65:86:8b:a0:07:95:db:02:1b:8a:e7:bf:b3:bc:92:0c:
         a7:b6:41:48:b4:c1:c1:db:a6:4f:ce:2d:c2:bc:aa:2c:99:d3:
         0f:df:69:49:ce:2d:b7:c8:2f:49:3d:bf:c8:8b:00:01:f9:d9:
         63:90:1d:e1:f4:19:38:c0:fe:eb:e7:ad:a2:f1:ae:8f:8c:62:
         1f:f9:a5:59:f7:9c:7c:e3:82:24:93:d4:0c:49:ca:d2:d8:ea:
         fe:c1:02:5d:68:6c:f5:bd:b2:5e:14:84:29:cf:55:a1:61:54:
         b9:83:06:e9:88:50:94:8d:37:a2:4c:b3:1c:69:70:15:d9:b1:
         34:84:1f:03:b0:56:31:67:b0:db:f1:83:13:38:0f:ce:81:1e:
         fb:b7:b9:f9:c0:ec:1a:ec:a4:c5:85:1e:5a:db:5a:27:3c:b2:
         e5:3a:80:9d:6a:58:d1:41:fa:42:f5:27:99:11:43:8b:d5:16:
         4b:c7:b0:2a:6a:00:b4:ea:45:d1:9e:7c:d4:b3:4d:73:ab:2a:
         96:10:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:18:27 2026 by rpki-client