Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e38382e302f32312d3231203d3e20313431373731.roa
File:                     3138322e31382e38382e302f32312d3231203d3e20313431373731.roa (raw, json)
Hash identifier:          rEeFHuckDIQJyxDgybwOyGsFH3/Wf8bO5mllTjYOkJw=
Subject key identifier:   43:7B:13:EE:87:71:A0:04:BF:46:7E:79:C3:FC:4F:4F:6D:77:3A:72
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       4813B00B584CDBF0ADB4ECCD1133140EA3968E6A
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e38382e302f32312d3231203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 05:34:32 +0000
ROA not before:           Wed 27 May 2026 05:29:32 +0000
ROA not after:            Wed 26 May 2027 05:34:32 +0000
asID:                     141771
IP address blocks:        182.18.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:13:b0:0b:58:4c:db:f0:ad:b4:ec:cd:11:33:14:0e:a3:96:8e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 05:29:32 2026 GMT
            Not After : May 26 05:34:32 2027 GMT
        Subject: CN=437B13EE8771A004BF467E79C3FC4F4F6D773A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:d0:df:3f:52:37:12:f5:35:08:96:aa:e0:
                    bf:59:90:3d:12:0e:4e:f0:16:c9:83:d5:94:e4:c8:
                    be:1f:9e:5e:ad:4e:5c:37:3a:37:14:73:0a:dd:cd:
                    8d:d5:e1:66:f9:b4:16:36:49:76:84:a5:93:26:bc:
                    bc:72:3d:28:93:89:0a:1c:3a:49:55:4c:85:85:40:
                    8d:44:59:c1:dc:bc:02:e6:d0:45:2f:e0:85:83:40:
                    94:46:75:45:55:f4:22:09:97:fa:5f:0d:c7:a5:b6:
                    01:0f:5d:06:3b:78:b3:e5:21:b5:31:b5:c2:b7:0e:
                    25:3f:61:05:3f:2f:d5:1b:1c:b2:ee:2b:ec:a9:98:
                    fb:88:d4:ff:2e:8d:74:9d:a1:27:38:03:12:9d:50:
                    44:ec:2a:f2:46:0f:a3:b3:7b:57:f5:de:f0:0d:b0:
                    8a:b9:9a:c6:b7:0a:a4:48:79:e8:50:47:df:d0:7f:
                    a9:9b:e0:41:8e:f0:db:27:7a:4f:a7:00:b2:ca:19:
                    24:67:cb:f4:37:59:cb:9e:a8:02:f3:72:f5:da:e0:
                    6c:a0:80:67:5d:33:a4:92:1b:a0:76:43:21:d6:fc:
                    dc:7f:8d:cf:e7:0d:20:98:8a:7c:c9:86:04:01:18:
                    3f:52:64:a8:1f:da:2a:af:57:2b:c4:29:23:80:8f:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:13:EE:87:71:A0:04:BF:46:7E:79:C3:FC:4F:4F:6D:77:3A:72
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3138322e31382e38382e302f32312d3231203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.18.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:be:d4:3d:e2:39:db:a6:e7:8c:95:21:ec:96:27:c0:5d:
         f1:08:cb:ea:09:b6:42:3b:1c:e8:65:b5:ce:93:9a:68:63:87:
         04:08:10:e5:68:8a:a7:41:3f:8b:56:05:96:fd:f4:8a:f9:df:
         c2:83:fa:e0:41:93:22:fd:bd:81:4b:76:b4:5f:ca:4f:0a:d7:
         86:8a:7a:ac:bc:a5:d4:11:98:a4:c6:97:3b:67:87:f2:b6:00:
         85:74:9b:90:48:8c:e9:a8:b1:41:20:15:37:1f:91:5f:12:13:
         a6:78:db:e5:56:32:d7:57:3d:83:ff:24:ba:03:28:38:68:cb:
         ef:69:d6:86:33:64:f3:74:ee:f0:2d:5d:6c:87:f4:0d:06:c2:
         29:dc:ea:e6:cf:f4:61:3c:8f:ae:e3:ed:d6:5f:78:da:8a:49:
         0e:de:8b:ef:57:a2:e9:50:98:2d:40:9e:aa:2c:f9:2f:a5:31:
         46:e0:30:00:5d:8f:7a:3a:02:73:d0:36:e2:ac:6e:ff:80:46:
         64:7f:49:d4:0d:78:a4:e1:aa:cb:61:b8:42:e9:a5:98:07:60:
         cb:89:35:a5:75:07:07:d5:e5:eb:6a:b7:0f:a1:c1:85:ee:34:
         5f:a1:f2:6c:18:33:25:22:96:6d:80:a9:01:87:e9:fd:a6:4e:
         12:31:a3:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:48 2026 by rpki-client