Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e36302e302f32322d3232203d3e20313431373731.roa
File:                     3138322e31382e36302e302f32322d3232203d3e20313431373731.roa (raw, json)
Hash identifier:          OOzdvGeiT1RxTk1tHG02T8qffiJAN36U91eCUOOGJpA=
Subject key identifier:   E5:EB:D4:5A:E9:31:63:F2:B4:AB:24:45:C4:C0:C2:77:F0:C8:E6:66
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       30C0D7C5501AE10C6B91C16F602BEA9D15947A73
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e36302e302f32322d3232203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 04:48:30 +0000
ROA not before:           Wed 27 May 2026 04:43:30 +0000
ROA not after:            Wed 26 May 2027 04:48:30 +0000
asID:                     141771
IP address blocks:        182.18.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c0:d7:c5:50:1a:e1:0c:6b:91:c1:6f:60:2b:ea:9d:15:94:7a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 04:43:30 2026 GMT
            Not After : May 26 04:48:30 2027 GMT
        Subject: CN=E5EBD45AE93163F2B4AB2445C4C0C277F0C8E666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e8:fd:ea:d7:85:48:bd:be:78:71:06:67:e4:
                    89:94:f1:45:b8:88:74:d9:9d:56:1f:89:af:0a:45:
                    67:14:28:e0:a4:02:c5:0c:49:77:2a:88:84:7d:cb:
                    1e:76:b8:4f:d5:a9:9f:ea:ad:3d:75:28:3e:a4:91:
                    86:d4:e5:bf:6c:b0:35:7e:39:c2:04:38:a0:7d:be:
                    69:e1:ab:5a:47:fa:dd:fa:5c:22:c6:1a:80:41:78:
                    ae:d6:00:91:8a:e9:c5:9a:60:4b:6f:de:95:21:42:
                    13:4f:58:7e:2d:77:fb:79:3c:a9:f8:ad:1b:14:c7:
                    60:f3:ce:fa:13:15:d3:64:89:92:48:c2:05:96:81:
                    f2:c2:23:71:d4:00:bb:57:16:3a:e5:3b:f7:94:c3:
                    9e:46:7d:aa:04:6d:a1:13:b4:cb:8f:29:95:15:a6:
                    1e:7d:7f:2e:83:43:29:4c:23:ea:0a:00:7b:bb:6d:
                    2d:c2:a1:2a:d9:55:a6:86:7b:46:c1:d8:60:57:97:
                    39:81:be:52:6d:d4:5b:a9:10:53:5a:2c:69:96:34:
                    e0:ac:12:2e:69:f0:9f:65:f6:87:d4:bc:3b:a1:10:
                    e9:5d:24:98:21:4a:9a:01:e7:07:a9:7d:36:76:9e:
                    69:c8:d5:25:5c:46:2e:16:58:be:ba:26:d8:65:3b:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EB:D4:5A:E9:31:63:F2:B4:AB:24:45:C4:C0:C2:77:F0:C8:E6:66
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e36302e302f32322d3232203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:e8:ed:5b:87:66:2d:84:8f:28:25:ca:20:fe:ff:6d:d0:
         a2:83:80:01:fe:c2:63:5b:39:b9:b7:5f:6c:3f:73:c2:b8:d7:
         aa:e8:71:28:b6:03:e0:38:0c:33:24:11:0e:60:9a:a4:19:84:
         91:d1:18:23:2b:03:4c:79:66:40:c5:97:49:b8:90:e0:7c:76:
         f5:04:15:3e:d5:3b:2c:95:23:85:73:1e:7a:60:32:9a:15:cc:
         70:3c:dc:ed:68:4b:28:c2:5f:36:04:13:d4:a2:49:29:3a:2c:
         67:ef:de:b3:8d:45:57:4e:ee:44:44:6e:34:00:0f:60:57:2a:
         04:a9:42:cc:fa:ab:22:d7:50:70:c9:8b:d5:03:a9:d8:9c:ac:
         1d:8c:63:36:80:34:85:0e:a2:a0:ee:2b:92:d4:cb:08:ba:54:
         12:e1:76:78:b1:94:5c:d2:90:2f:d6:20:b7:eb:02:1b:96:c4:
         c1:ad:06:e7:4b:2f:38:67:39:99:d9:8a:4a:59:18:df:02:95:
         9d:90:b2:7e:0a:63:a2:4b:f2:38:b9:a9:81:84:cc:c7:9f:61:
         bb:22:1f:49:90:50:f1:9d:69:df:00:f5:18:b4:c2:51:e7:7d:
         9b:29:be:fe:b6:15:74:c7:91:fe:81:c0:47:bb:b5:cf:23:39:
         29:50:03:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:54 2026 by rpki-client