Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e35362e302f32322d3232203d3e20313431373731.roa
File:                     3138322e31382e35362e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          cKUYSBo2GemU3XAAwJydPOHgv2iJhXznt5YmJwBw4vM=
Subject key identifier:   FB:5B:14:8E:09:87:F9:3C:93:41:32:4B:A3:32:DE:54:D8:40:07:03
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       1120DF3889637A19E72019B759118FC7BAB6CC61
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e35362e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 04:48:30 +0000
ROA not before:           Wed 27 May 2026 04:43:30 +0000
ROA not after:            Wed 26 May 2027 04:48:30 +0000
asID:                     141771
IP address blocks:        182.18.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:20:df:38:89:63:7a:19:e7:20:19:b7:59:11:8f:c7:ba:b6:cc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 04:43:30 2026 GMT
            Not After : May 26 04:48:30 2027 GMT
        Subject: CN=FB5B148E0987F93C9341324BA332DE54D8400703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:64:69:2e:17:28:24:9c:62:d7:8c:09:7a:
                    08:68:98:1d:b4:90:8b:74:0a:da:0a:88:c2:7b:a4:
                    af:6a:c7:d4:ab:78:1a:a7:1d:29:79:e2:ae:d9:30:
                    7c:cb:40:10:b6:a3:ed:aa:61:78:03:50:6f:b5:0c:
                    d6:90:7c:c8:d9:88:bf:dc:73:41:7a:a6:d8:41:d6:
                    ac:ae:fd:db:8e:1e:40:f8:09:12:d6:9a:ba:37:fe:
                    28:c2:5c:eb:04:7f:8e:be:a8:37:43:c8:63:1c:df:
                    2c:b9:a5:f7:c1:7d:97:c0:d1:6f:52:30:1f:e7:58:
                    8d:6f:d8:9f:e1:20:6a:b1:4b:ac:59:55:77:1d:47:
                    e3:fa:cb:46:1b:2a:a8:31:d6:c2:55:d7:92:42:94:
                    37:ab:c0:8a:40:86:1d:17:61:df:4c:3d:f1:5a:b6:
                    2d:7e:29:24:b8:51:48:80:4b:03:5f:ff:f0:87:5d:
                    9e:f6:fe:79:b2:a1:9a:a2:ce:68:69:fb:47:86:b9:
                    49:68:d0:63:d9:38:e3:8d:71:cf:23:14:81:ac:4e:
                    f4:71:83:4c:af:db:ab:e8:72:20:1e:dd:5e:1e:be:
                    12:35:b8:6b:71:01:8f:68:5e:d8:2a:73:34:e5:96:
                    93:88:b2:84:6e:29:ac:b6:3f:e8:ad:06:98:49:b4:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:14:8E:09:87:F9:3C:93:41:32:4B:A3:32:DE:54:D8:40:07:03
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e35362e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:1f:a4:1f:7f:38:6f:2c:5b:1e:4f:60:7a:20:37:c5:d9:dc:
         e2:64:04:bb:4a:4b:58:61:ef:9c:a0:54:86:49:49:69:2e:eb:
         cc:84:fd:96:e1:e0:97:db:bd:57:ca:73:bb:ed:85:50:7f:25:
         12:ad:4e:03:05:92:9b:0d:2d:ee:1d:19:18:bd:ef:dc:a7:c2:
         66:a0:f6:84:38:07:52:b4:0f:97:34:80:65:a4:e7:fe:74:34:
         75:90:c7:8e:b5:04:9e:48:4f:59:9c:f6:ef:32:68:f8:91:ba:
         ab:d4:48:65:af:2c:5a:64:4f:74:c2:20:0a:f4:95:d3:d0:dc:
         58:28:f2:61:91:4c:fc:0e:84:31:29:ef:9e:6e:86:91:72:eb:
         9e:f1:a0:89:b3:13:ca:aa:2f:9d:e5:15:19:75:6d:0f:42:3d:
         dd:58:cb:0c:a1:1f:fa:d6:34:49:99:f8:b2:c1:fb:03:fc:8f:
         86:a3:c1:dc:30:6b:bf:8d:c8:af:f1:d5:20:cb:f8:d5:f7:97:
         36:61:5f:89:96:90:1a:b8:f1:d1:f7:9f:df:ab:33:f4:5c:90:
         35:16:5e:27:74:ac:a5:6d:65:5c:ad:74:b4:c0:42:bd:f2:cd:
         4f:f1:c1:61:42:bb:0b:a3:c1:1c:02:8e:7d:55:75:ee:c2:41:
         53:ae:9a:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:11 2026 by rpki-client