Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e35322e302f32322d3232203d3e20313431373731.roa
File:                     3138322e31382e35322e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          POyLSPX9nNa5vOVk9BINqhNBYGu/3/hSTvL0q3Q/wug=
Subject key identifier:   08:78:1B:95:39:26:97:C3:12:6D:3A:40:AD:9E:54:27:05:B3:45:39
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       0865979F8E0624E84516ECDCBBAEA9336F8098BF
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e35322e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 04:48:30 +0000
ROA not before:           Wed 27 May 2026 04:43:30 +0000
ROA not after:            Wed 26 May 2027 04:48:30 +0000
asID:                     141771
IP address blocks:        182.18.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:65:97:9f:8e:06:24:e8:45:16:ec:dc:bb:ae:a9:33:6f:80:98:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 04:43:30 2026 GMT
            Not After : May 26 04:48:30 2027 GMT
        Subject: CN=08781B95392697C3126D3A40AD9E542705B34539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:6f:09:9b:4f:2c:7f:19:18:6c:5f:35:bf:
                    55:4c:db:ab:4f:6d:a1:3c:59:74:3a:5d:df:9b:7e:
                    b2:3c:bb:94:94:95:cd:15:77:76:81:36:17:02:c0:
                    3c:a3:bf:87:40:22:5d:47:c9:96:20:a7:19:6b:c4:
                    39:15:16:9f:08:56:6b:cb:fb:e4:69:ef:59:1b:2e:
                    2a:09:5f:dc:0f:6e:ac:e8:99:a8:16:53:b2:a8:2d:
                    72:86:a6:a2:01:48:65:07:1d:b3:d1:e6:07:55:0d:
                    cf:0b:5d:e5:da:8e:50:bc:28:1c:f4:9c:bd:31:4c:
                    7c:67:ac:15:ec:b7:aa:d4:79:40:51:8e:60:2b:28:
                    f5:43:80:fa:0a:2a:20:2f:eb:51:69:bb:bc:bb:0e:
                    47:be:f4:70:60:ca:7a:c5:d0:40:09:f4:b4:0e:41:
                    62:57:b5:62:7b:90:e9:d3:ef:bb:0a:37:83:7a:12:
                    5e:ea:2c:db:08:24:7b:42:2b:2e:3a:4a:e9:d3:6c:
                    20:8b:88:ea:34:5b:36:11:04:cf:26:5b:a4:3b:fe:
                    a8:bb:9d:c1:20:ba:09:62:5c:d1:d8:22:bd:24:47:
                    52:62:3f:cf:bb:c1:f3:82:cc:28:07:9c:3c:31:e4:
                    f8:fe:8c:59:62:f2:17:e3:af:d8:f8:31:73:fb:9f:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:1B:95:39:26:97:C3:12:6D:3A:40:AD:9E:54:27:05:B3:45:39
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e35322e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:5b:ee:ba:0d:f0:ba:23:54:f8:d4:b2:ac:bd:a6:b0:1d:
         4a:df:00:6d:42:11:b2:3e:d2:f0:84:e1:f2:27:f8:35:5d:ea:
         87:4a:ac:11:e5:1c:22:46:0e:0b:93:e5:5d:1a:37:a0:24:09:
         3d:92:5f:84:ad:2c:79:5d:2a:86:5b:39:89:fa:62:7a:ae:56:
         ff:2e:a3:1c:b8:0b:17:70:5c:83:29:12:92:02:e0:d7:0d:c0:
         f9:b0:62:e5:4a:66:43:42:03:68:b6:fc:6c:b0:9e:9e:d1:87:
         73:ea:c8:0c:e3:ee:45:03:a8:e2:fb:3b:9a:1c:b9:d5:b3:bb:
         10:81:66:19:0f:1c:0f:fb:1f:98:c7:08:3f:38:eb:76:63:a8:
         25:c1:98:99:ad:76:a7:ce:53:09:f1:6f:fc:4e:2f:a7:a6:eb:
         44:7f:24:2e:f7:50:ca:e5:50:42:fc:70:aa:6f:81:57:7e:bf:
         dc:f4:6d:e8:bd:59:66:8e:e2:3e:80:2b:4d:4b:41:70:42:66:
         49:99:22:50:d8:4e:af:a7:fa:7b:4e:e7:08:bf:92:69:0c:bc:
         46:b3:68:7d:06:99:18:67:a8:b6:bf:2b:3f:41:10:7a:57:a2:
         50:b9:7d:34:20:43:02:b6:fc:23:2f:23:d3:81:9e:dc:3f:2a:
         95:8e:90:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:49 2026 by rpki-client