Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34382e302f32322d3232203d3e20313431373731.roa
File:                     3138322e31382e34382e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          x1MxBhz0yw4RmZAkKbQPn+roB0oqzrNipJxWhi7ZXGM=
Subject key identifier:   18:B3:D6:A6:3D:42:A8:E8:04:AA:79:32:06:CC:6C:18:57:71:7D:CA
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       1BFCA8E29482323ADC98212D6904E9F566037694
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34382e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 04:48:29 +0000
ROA not before:           Wed 27 May 2026 04:43:29 +0000
ROA not after:            Wed 26 May 2027 04:48:29 +0000
asID:                     141771
IP address blocks:        182.18.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fc:a8:e2:94:82:32:3a:dc:98:21:2d:69:04:e9:f5:66:03:76:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 04:43:29 2026 GMT
            Not After : May 26 04:48:29 2027 GMT
        Subject: CN=18B3D6A63D42A8E804AA793206CC6C1857717DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:09:77:4b:80:f0:18:87:68:f4:3c:f1:9c:
                    0b:44:7b:bb:36:85:54:f1:2c:af:82:c3:bf:46:d0:
                    6e:f0:70:d8:33:6e:93:46:5a:35:1f:67:f9:98:cb:
                    ab:58:ce:f0:11:df:95:74:42:c8:70:0e:84:c0:1f:
                    7a:a3:d4:f6:53:b4:e6:35:95:29:1c:44:82:3b:2e:
                    cb:20:bc:4c:fb:d0:9a:ff:73:f2:60:7b:5a:4b:30:
                    4f:d9:1d:a4:43:b8:c1:3c:09:ac:15:e2:81:f8:5c:
                    80:fd:f7:fa:1a:a6:37:f9:af:27:f6:c9:12:fd:d1:
                    7d:76:f9:9d:ba:97:24:4f:73:eb:36:fc:54:b7:4d:
                    1d:19:8e:c8:35:0c:02:86:09:e0:8d:08:bf:71:8f:
                    fb:02:c9:bb:2a:35:31:93:2d:68:2f:6e:77:f8:f4:
                    01:84:86:55:96:f4:99:23:af:32:71:cf:cf:fc:f1:
                    4f:e4:10:9b:65:cd:73:b2:3a:f3:42:fa:a6:c3:e2:
                    9f:a9:fa:8b:ab:6b:f1:e3:62:b7:35:58:5a:e0:96:
                    43:71:56:bd:bc:40:a4:20:cd:ea:c2:7d:be:8e:34:
                    69:59:69:d1:2f:98:9e:08:05:7e:b4:98:cf:96:38:
                    f0:02:0b:b3:6d:db:ad:b6:57:c6:8d:65:1e:77:66:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:D6:A6:3D:42:A8:E8:04:AA:79:32:06:CC:6C:18:57:71:7D:CA
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e34382e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:e4:52:7e:11:43:e8:20:d4:33:0b:7b:4b:89:8f:a7:08:
         5c:90:41:de:7a:aa:cc:f4:71:0e:73:c4:c2:23:2d:18:3b:48:
         2a:c6:44:81:f0:7e:4a:7a:05:0d:29:fc:e0:bd:5b:47:b6:52:
         70:d4:87:85:54:95:de:be:f6:36:32:e1:ed:ef:16:70:64:67:
         ba:bb:fb:60:4f:f1:f9:64:ed:b4:d7:1a:cb:93:3c:2e:a4:3e:
         f5:ea:53:4a:8f:a0:91:64:82:ee:41:81:d9:55:5c:ce:ea:d0:
         a5:d5:e1:bb:56:46:e3:05:44:42:43:95:0a:67:d8:be:5e:a2:
         89:f2:45:57:68:fa:ef:73:40:af:23:45:13:1b:35:5b:41:45:
         0f:49:5b:70:7e:54:17:ba:39:a3:d3:a9:bd:03:9c:b8:7f:52:
         70:39:01:f8:f5:ea:bf:9d:84:13:7e:20:56:9c:50:00:58:02:
         15:84:a2:df:db:5e:65:1d:22:62:3e:1d:51:1f:f2:e6:89:ee:
         70:74:f7:57:ed:48:b7:66:55:db:4d:c7:f1:e6:dc:0e:74:e6:
         ca:f3:51:96:f0:fd:c6:b0:ea:0c:72:28:b6:1f:c1:73:40:49:
         7c:bd:26:a5:bc:e3:91:1a:65:01:2a:ba:83:da:fc:74:df:04:
         0e:f9:f3:5f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUG/yo4pSCMjrcmCEtaQTp9WYDdpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3
NDYwNkIzODAeFw0yNjA1MjcwNDQzMjlaFw0yNzA1MjYwNDQ4MjlaMDMxMTAvBgNV
BAMTKDE4QjNENkE2M0Q0MkE4RTgwNEFBNzkzMjA2Q0M2QzE4NTc3MTdEQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxwl3S4DwGIdo9DzxnAtEe7s2
hVTxLK+Cw79G0G7wcNgzbpNGWjUfZ/mYy6tYzvAR35V0QshwDoTAH3qj1PZTtOY1
lSkcRII7LssgvEz70Jr/c/Jge1pLME/ZHaRDuME8CawV4oH4XID99/oapjf5ryf2
yRL90X12+Z26lyRPc+s2/FS3TR0Zjsg1DAKGCeCNCL9xj/sCybsqNTGTLWgvbnf4
9AGEhlWW9JkjrzJxz8/88U/kEJtlzXOyOvNC+qbD4p+p+oura/HjYrc1WFrglkNx
Vr28QKQgzerCfb6ONGlZadEvmJ4IBX60mM+WOPACC7Nt2622V8aNZR53ZrlrAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUGLPWpj1CqOgEqnkyBsxsGFdxfcowHwYDVR0j
BBgwFoAU6huS3jo5IYyIMC6HfNdnfnRgazgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4
MjExNjYwOTIwOTc5NDU2MS8wL0VBMUI5MkRFM0EzOTIxOEM4ODMwMkU4NzdDRDc2
NzdFNzQ2MDZCMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3NDYwNkIzOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA4MjExNjYwOTIwOTc5NDU2MS8wLzMxMzgzMjJlMzEz
ODJlMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMTM3MzczMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEArYSMDANBgkqhkiG9w0BAQsFAAOCAQEAq4bkUn4RQ+gg1DMLe0uJj6cI
XJBB3nqqzPRxDnPEwiMtGDtIKsZEgfB+SnoFDSn84L1bR7ZScNSHhVSV3r72NjLh
7e8WcGRnurv7YE/x+WTttNcay5M8LqQ+9epTSo+gkWSC7kGB2VVczurQpdXhu1ZG
4wVEQkOVCmfYvl6iifJFV2j673NAryNFExs1W0FFD0lbcH5UF7o5o9OpvQOcuH9S
cDkB+PXqv52EE34gVpxQAFgCFYSi39teZR0iYj4dUR/y5onucHT3V+1It2ZV203H
8ebcDnTmyvNRlvD9xrDqDHIoth/Bc0BJfL0mpbzjkRplASq6g9r8dN8EDvnzXw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:32 2026 by rpki-client