Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e38302e302f32312d3231203d3e20313431373731.roa
File:                     3138322e31382e38302e302f32312d3231203d3e20313431373731.roa (raw, json)
Hash identifier:          w7SW3cIAPXFUcnAZNeFByXTRxCVp+pKZ+55yYuC0yq4=
Subject key identifier:   D1:8A:6F:EC:62:11:53:15:8A:58:41:4C:98:33:8C:E1:71:E2:0B:94
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       706D0CA76AF7EF6B2E9BFFCBB14FA3FA90D885DB
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e38302e302f32312d3231203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 05:34:33 +0000
ROA not before:           Wed 27 May 2026 05:29:33 +0000
ROA not after:            Wed 26 May 2027 05:34:33 +0000
asID:                     141771
IP address blocks:        182.18.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:0c:a7:6a:f7:ef:6b:2e:9b:ff:cb:b1:4f:a3:fa:90:d8:85:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 05:29:33 2026 GMT
            Not After : May 26 05:34:33 2027 GMT
        Subject: CN=D18A6FEC621153158A58414C98338CE171E20B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:85:29:77:1d:23:1d:80:ee:f5:fb:a9:a0:
                    c7:ba:ac:a9:fc:60:df:c6:e8:46:31:8e:ec:1b:d2:
                    b3:c1:ea:07:bc:1b:41:aa:96:3e:c6:b3:de:0e:a2:
                    ce:0a:7d:d0:92:30:ca:bb:1f:c4:08:37:96:59:52:
                    f8:5f:2d:b5:1c:fd:87:c3:d5:5a:8f:65:78:27:79:
                    7e:b6:53:15:32:39:ae:38:60:83:52:46:70:b2:01:
                    34:e8:6c:ad:d6:9d:8e:f2:89:5b:96:8a:b9:62:76:
                    d7:e4:18:81:40:58:09:68:ec:a3:ee:91:6b:2a:52:
                    af:12:62:28:42:78:1a:fb:5f:6a:9e:23:26:66:b9:
                    11:60:b6:b0:0c:26:ba:dd:68:b2:a2:fe:04:32:6c:
                    b1:23:b3:9f:10:a1:81:cc:a0:e2:87:00:d7:af:63:
                    69:30:54:ce:ae:1a:b8:70:e4:aa:78:e4:b4:39:b4:
                    61:9b:c8:28:d7:9d:62:ba:10:43:51:47:73:3a:4b:
                    6b:1d:89:f2:97:29:c6:9e:19:bb:89:44:5c:47:69:
                    ed:2f:e4:de:d8:89:e8:94:7f:fd:48:a2:c8:6e:dd:
                    a3:92:ce:b8:58:7b:bb:66:ce:62:d6:4e:4d:47:8a:
                    fa:75:d6:cd:5a:db:bb:27:d5:2e:a5:94:d3:be:bc:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:6F:EC:62:11:53:15:8A:58:41:4C:98:33:8C:E1:71:E2:0B:94
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e38302e302f32312d3231203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:3c:cb:da:91:23:9f:34:fc:41:6a:fc:b1:cb:5d:f2:8d:fe:
         ac:3b:5e:c8:9f:1a:41:ed:dc:22:bb:47:cc:0e:a9:12:34:fa:
         52:62:e6:59:ec:7a:87:ce:41:ec:42:57:e2:6b:fb:ae:d1:a4:
         fc:c7:26:ea:c1:33:d2:e7:59:e5:80:08:01:e7:a8:3b:80:be:
         18:11:50:fe:52:52:45:6d:67:b8:5a:e4:2a:ea:29:bf:1b:55:
         cd:82:68:0b:33:ac:98:82:ea:78:05:8e:4a:5e:1f:3e:15:31:
         7a:2d:81:9e:9c:58:7c:49:08:2f:48:87:02:51:3e:90:f8:ce:
         cb:71:58:1d:35:f8:e2:2f:20:ee:f3:08:da:20:18:d7:6f:50:
         ed:f2:e4:8e:06:26:29:71:a9:60:28:1b:b8:93:14:fa:fc:be:
         8a:89:4d:d8:8d:95:d4:db:14:f2:6e:a7:c8:1f:fd:ff:f9:17:
         a1:03:22:d3:33:90:5c:71:db:76:3c:2a:40:84:48:7d:de:49:
         fc:ba:8b:7c:c1:33:71:f8:65:96:71:6c:84:32:db:10:41:bd:
         2a:43:8e:3c:af:ac:85:2a:6a:d7:e0:a4:89:95:aa:f3:9e:e7:
         1e:d4:5d:50:43:63:73:8d:0f:35:3b:54:4f:27:25:f2:48:5d:
         9d:e6:34:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:02 2026 by rpki-client