Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e33322e302f32322d3232203d3e20313431373731.roa
File:                     3138322e31382e33322e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          1SmnhE64b+zXDO1L1V9r3hOzFG+rQTeqEYUuwlH7Ty8=
Subject key identifier:   98:5C:75:AD:55:C7:88:A0:F6:27:64:1D:D6:91:17:32:B5:35:D6:CD
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       33D858B2A202C7711AADAEC0CE66A540D76BC376
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e33322e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 04:48:30 +0000
ROA not before:           Wed 27 May 2026 04:43:30 +0000
ROA not after:            Wed 26 May 2027 04:48:30 +0000
asID:                     141771
IP address blocks:        182.18.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d8:58:b2:a2:02:c7:71:1a:ad:ae:c0:ce:66:a5:40:d7:6b:c3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 04:43:30 2026 GMT
            Not After : May 26 04:48:30 2027 GMT
        Subject: CN=985C75AD55C788A0F627641DD6911732B535D6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:af:67:2d:05:34:cb:34:24:4d:4e:65:58:6b:
                    36:a5:b0:f8:95:c8:72:56:9f:f8:d2:13:97:1b:9b:
                    c0:30:e8:bb:ce:9c:aa:c6:5d:63:bb:12:bb:68:e0:
                    fd:c0:cc:47:9f:97:57:20:90:16:18:ec:18:20:01:
                    c6:6d:66:d5:76:9f:ae:3a:bd:f8:9e:ee:d8:64:3a:
                    04:5a:ce:37:20:40:d1:36:2b:fa:fe:6c:7d:4b:23:
                    af:80:ee:84:f1:93:c4:2e:dd:a9:be:69:e8:4f:5c:
                    ff:2d:4f:e4:13:4c:6a:1b:5b:86:2f:b0:bd:ea:f7:
                    a7:7f:1e:f0:14:66:ce:e2:6d:0e:03:b5:e8:55:73:
                    30:57:ec:79:86:60:d1:aa:4b:fe:e2:ac:83:57:95:
                    32:99:9c:20:15:9f:e0:87:42:9b:41:33:2b:41:34:
                    a6:f0:59:25:2d:f2:e3:76:de:85:7d:c6:79:13:1d:
                    4d:76:5f:c5:43:f5:40:f1:27:a5:10:15:20:45:44:
                    a4:0c:74:76:58:26:a2:fc:90:4b:fe:1a:5d:04:f2:
                    20:13:57:ae:cd:a2:3c:0d:ff:bc:b2:65:8b:d2:3d:
                    22:01:79:e4:7f:c1:bc:9f:68:a4:93:ac:28:1e:88:
                    19:17:2b:1a:c1:81:7b:b1:f2:f0:51:c9:ee:16:3d:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5C:75:AD:55:C7:88:A0:F6:27:64:1D:D6:91:17:32:B5:35:D6:CD
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e33322e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:62:90:95:d2:fe:13:2a:58:09:c7:0f:d8:10:4b:57:68:12:
         c8:13:c6:26:da:ff:bf:19:e4:cb:67:a3:a2:f4:4c:e8:fe:17:
         eb:a4:19:3a:d0:a9:7b:33:69:f3:d6:86:f7:44:8c:0f:f8:51:
         a3:2c:02:c7:ef:59:50:16:dc:e2:4e:98:fd:81:70:20:e1:2b:
         09:aa:9b:9b:c7:64:c1:66:54:af:5f:8a:88:be:a3:7c:8d:4b:
         39:6d:32:e9:fc:52:9f:9e:8f:9f:e2:7d:9c:e5:34:91:a2:3d:
         ab:89:ef:83:7e:2b:af:12:7c:c5:0c:57:c0:c1:7e:a0:45:3c:
         50:45:02:8e:80:51:be:87:2c:2d:43:f2:be:fe:c3:ac:27:43:
         a1:11:10:fd:76:f6:40:f9:ad:a9:93:a2:9f:1e:8f:b7:53:a0:
         a3:a5:81:ca:a1:19:b5:19:d8:81:27:a6:75:99:78:3a:6c:c4:
         e0:d5:f7:c4:b2:b3:06:f4:44:d3:66:75:43:53:da:fd:10:99:
         fd:3f:c8:28:8f:e8:04:e6:af:45:dc:22:61:a1:fb:e4:d3:f0:
         7e:22:ba:a4:67:a6:71:ad:e4:95:0b:c4:c3:37:3c:7b:1b:c4:
         c9:f1:4a:b0:60:d7:70:07:bb:6b:3c:9a:99:9b:47:b4:c1:3f:
         7f:22:66:66
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUM9hYsqICx3Eara7AzmalQNdrw3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3
NDYwNkIzODAeFw0yNjA1MjcwNDQzMzBaFw0yNzA1MjYwNDQ4MzBaMDMxMTAvBgNV
BAMTKDk4NUM3NUFENTVDNzg4QTBGNjI3NjQxREQ2OTExNzMyQjUzNUQ2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzr2ctBTTLNCRNTmVYazalsPiV
yHJWn/jSE5cbm8Aw6LvOnKrGXWO7Erto4P3AzEefl1cgkBYY7BggAcZtZtV2n646
vfie7thkOgRazjcgQNE2K/r+bH1LI6+A7oTxk8Qu3am+aehPXP8tT+QTTGobW4Yv
sL3q96d/HvAUZs7ibQ4DtehVczBX7HmGYNGqS/7irINXlTKZnCAVn+CHQptBMytB
NKbwWSUt8uN23oV9xnkTHU12X8VD9UDxJ6UQFSBFRKQMdHZYJqL8kEv+Gl0E8iAT
V67NojwN/7yyZYvSPSIBeeR/wbyfaKSTrCgeiBkXKxrBgXux8vBRye4WPbFbAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUmFx1rVXHiKD2J2Qd1pEXMrU11s0wHwYDVR0j
BBgwFoAU6huS3jo5IYyIMC6HfNdnfnRgazgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
MjExNjYwOTIwOTc5NDU2MS8wL0VBMUI5MkRFM0EzOTIxOEM4ODMwMkU4NzdDRDc2
NzdFNzQ2MDZCMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3NDYwNkIzOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA4MjExNjYwOTIwOTc5NDU2MS8wLzMxMzgzMjJlMzEz
ODJlMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMTM3MzczMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEArYSIDANBgkqhkiG9w0BAQsFAAOCAQEAYGKQldL+EypYCccP2BBLV2gS
yBPGJtr/vxnky2ejovRM6P4X66QZOtCpezNp89aG90SMD/hRoywCx+9ZUBbc4k6Y
/YFwIOErCaqbm8dkwWZUr1+KiL6jfI1LOW0y6fxSn56Pn+J9nOU0kaI9q4nvg34r
rxJ8xQxXwMF+oEU8UEUCjoBRvocsLUPyvv7DrCdDoREQ/Xb2QPmtqZOinx6Pt1Og
o6WByqEZtRnYgSemdZl4OmzE4NX3xLKzBvRE02Z1Q1Pa/RCZ/T/IKI/oBOavRdwi
YaH75NPwfiK6pGemca3klQvEwzc8exvEyfFKsGDXcAe7azyamZtHtME/fyJmZg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:27 2026 by rpki-client