Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34342e302f32322d3232203d3e20313431373731.roa
File:                     3138322e31382e34342e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          9f46NnNGfWdmWPXU6f+W4JG1YlHSga6XyQ17CWuqhu4=
Subject key identifier:   8A:8B:28:B3:D3:D0:1D:8C:C7:6B:34:8D:5B:19:73:55:F8:F1:99:B7
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       6B4180DE1F1CF293B70F434E4B9D13A7B18F1990
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34342e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 04:48:29 +0000
ROA not before:           Wed 27 May 2026 04:43:29 +0000
ROA not after:            Wed 26 May 2027 04:48:29 +0000
asID:                     141771
IP address blocks:        182.18.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:41:80:de:1f:1c:f2:93:b7:0f:43:4e:4b:9d:13:a7:b1:8f:19:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 04:43:29 2026 GMT
            Not After : May 26 04:48:29 2027 GMT
        Subject: CN=8A8B28B3D3D01D8CC76B348D5B197355F8F199B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:a5:f7:dd:b7:87:03:ad:b8:61:ec:78:aa:
                    14:de:25:c1:b6:a3:5e:7d:fd:3c:2e:f2:18:0d:1e:
                    84:df:cf:0b:3b:23:1f:7b:c3:ca:2e:17:7a:64:66:
                    de:90:a6:d1:85:44:69:d9:28:3f:24:e8:b4:05:5b:
                    16:60:35:63:0e:f0:53:99:1a:fc:9f:13:bb:62:19:
                    42:d3:5a:0e:fb:f1:92:d8:df:b9:15:c8:68:64:f5:
                    f4:22:78:44:6c:63:0b:ca:cd:7b:ec:5e:07:3b:f5:
                    c3:ad:fe:6b:5c:3b:42:09:5b:1c:45:d8:91:6e:9a:
                    97:f6:d1:32:30:d8:95:20:fa:5f:5c:06:74:58:ba:
                    54:50:89:47:07:d2:cc:a3:2a:63:38:ee:2e:24:c7:
                    65:19:0c:a3:eb:7c:58:a1:04:1c:3e:b9:6c:47:ee:
                    33:4f:57:0e:11:19:cc:ed:45:4e:64:39:33:b8:3e:
                    8e:19:ef:c2:c7:75:ca:a2:76:65:3c:49:f9:75:0c:
                    a1:0b:2c:0d:37:6a:5a:de:c1:16:86:dc:ea:54:4e:
                    41:72:43:fb:c6:89:9e:ec:d4:49:4d:2e:48:ca:36:
                    be:da:4c:25:48:3b:31:55:7f:2e:fb:cb:f2:46:79:
                    23:42:75:b4:33:a3:27:63:44:32:d0:21:49:71:21:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8B:28:B3:D3:D0:1D:8C:C7:6B:34:8D:5B:19:73:55:F8:F1:99:B7
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34342e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:0f:e3:82:90:83:04:18:2d:78:a3:78:8b:5a:86:c6:76:0f:
         a3:a9:01:37:35:d6:71:ec:75:e2:6e:2b:5d:9f:c2:6d:48:43:
         87:82:95:3e:cd:92:c0:61:63:ff:c2:47:62:73:d2:9d:32:3a:
         15:07:e2:92:bc:b5:fc:7c:d1:38:4f:29:03:41:10:85:aa:6c:
         8d:e0:3e:68:c7:2c:d5:8b:b2:15:81:43:a3:ae:73:0d:b7:0a:
         7a:9d:91:bb:f8:ae:49:16:7a:e9:80:98:88:04:94:dc:db:e7:
         3d:19:0e:74:3f:bf:78:b7:0b:98:c0:c6:06:50:6f:6d:0b:70:
         7d:b4:d9:48:4a:77:2c:76:37:1d:9e:2e:50:3a:f6:5b:09:ac:
         0d:a9:16:15:90:0e:36:05:9a:32:ae:16:18:d3:5b:6f:90:fd:
         58:62:1f:ff:b6:bc:e1:e1:69:45:ef:b4:e2:01:61:1f:3f:af:
         0b:bd:b6:79:0e:d5:37:35:de:97:1f:51:9a:7f:7f:cd:fa:1d:
         a6:19:f5:72:ba:1a:ef:09:38:83:d9:cc:93:fc:9a:48:6d:66:
         46:ef:bb:51:77:38:a0:6d:69:ca:0e:3b:44:a5:00:6c:1d:15:
         cf:2c:5c:5f:16:0c:ec:0d:ed:ae:3b:47:64:d5:af:31:91:75:
         ac:46:dc:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:02 2026 by rpki-client