Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e372e302f32342d3234203d3e2030.roa
File:                     3138322e31382e372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          8t7x0M8fCzXw50UBh6pZOM/z4nRWLRHGDnV5W74Vk8o=
Subject key identifier:   DC:E4:4A:7D:24:0C:9A:C9:E8:F1:73:1D:E3:EA:0A:04:DD:B2:D9:9E
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       6500086341A7BB7E668E6D0A5B7B94D0E1A931B6
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e372e302f32342d3234203d3e2030.roa
Signing time:             Wed 27 May 2026 05:58:27 +0000
ROA not before:           Wed 27 May 2026 05:53:27 +0000
ROA not after:            Wed 26 May 2027 05:58:27 +0000
asID:                     0
IP address blocks:        182.18.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:00:08:63:41:a7:bb:7e:66:8e:6d:0a:5b:7b:94:d0:e1:a9:31:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 05:53:27 2026 GMT
            Not After : May 26 05:58:27 2027 GMT
        Subject: CN=DCE44A7D240C9AC9E8F1731DE3EA0A04DDB2D99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ad:5d:fb:03:9c:8c:af:09:5f:9a:b0:25:70:
                    df:25:b7:4d:57:29:c0:56:e8:19:ed:bd:18:3c:ca:
                    7c:7b:41:44:dd:7c:9d:72:12:21:9a:58:5d:f7:d0:
                    e7:13:3d:68:97:48:0a:ed:8c:51:e4:81:92:74:1b:
                    d7:14:f3:99:65:1a:81:12:58:a3:b8:93:04:d3:f8:
                    84:40:69:cd:73:ed:b1:48:99:b0:46:f8:80:85:fd:
                    d6:af:09:70:6f:82:c3:c2:0e:49:6c:09:d8:06:08:
                    d7:aa:a8:6f:cc:c4:cd:67:92:2e:69:ed:75:9e:eb:
                    85:7d:35:34:b0:35:40:ab:08:89:c6:43:53:ca:08:
                    09:01:ad:ee:1d:81:4f:a2:55:83:92:a1:9f:e5:1b:
                    da:25:d5:1e:c4:92:3d:e2:76:7f:d1:1e:ce:40:5b:
                    db:52:26:00:8b:94:c7:4a:c6:94:01:dc:de:de:db:
                    a3:54:18:fa:70:4d:44:f9:bf:b0:09:38:96:06:eb:
                    94:67:ad:8e:f2:28:94:d7:76:89:51:bb:17:4f:38:
                    cc:ff:32:e2:c4:25:82:c7:88:18:4d:e3:9e:c4:c5:
                    29:c9:32:bd:99:70:e0:79:fa:a4:0f:fd:fc:87:d6:
                    ce:97:6c:49:56:f6:8b:89:4c:da:f2:f7:30:a8:1d:
                    3b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E4:4A:7D:24:0C:9A:C9:E8:F1:73:1D:E3:EA:0A:04:DD:B2:D9:9E
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:85:ae:8c:78:23:ae:cb:1f:a1:4b:04:ae:27:bb:ff:16:
         10:96:1b:da:ec:4c:a1:72:a9:d8:3a:17:de:71:46:15:30:fa:
         99:e9:60:ba:d7:e9:fb:52:e5:37:f3:f1:74:bc:07:ff:b6:84:
         80:c4:6f:18:e8:b6:11:41:32:3c:52:57:02:5e:e1:e6:be:4c:
         af:1e:ab:cb:3b:f0:00:2c:4d:0b:28:da:b7:72:d9:43:eb:fb:
         b2:20:03:fc:e7:6a:ef:96:fa:ec:be:c2:3b:a8:39:e8:9d:e7:
         e8:7d:b4:25:e3:d2:d2:ef:b2:97:25:f8:f7:48:29:85:7a:b1:
         95:a7:4f:d7:2d:61:ad:1c:67:fa:c7:80:f1:cf:9a:ef:cb:c3:
         d6:93:44:68:0a:bf:73:86:6d:bd:1b:a2:1a:a8:01:28:62:81:
         92:c3:d5:ad:62:1a:80:31:5b:5d:ac:de:3b:bd:0b:1b:66:dc:
         6b:82:57:43:66:15:7e:8b:0b:31:6e:5f:a4:26:4e:ef:05:39:
         8f:0b:91:ec:6d:cc:a0:15:95:3f:14:67:44:9f:55:e1:3f:48:
         41:3e:90:f5:44:f9:e9:76:48:9c:75:91:1c:d3:b4:97:71:ff:
         26:15:18:f0:62:bf:4e:e6:6b:a8:62:c1:3a:47:18:34:fc:e2:
         70:94:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:59 2026 by rpki-client