Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/3131382e3234322e33322e302f32322d3232203d3e2034383132.roa
File:                     3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier:          eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=
Subject key identifier:   FD:22:F4:FD:A3:FB:DD:93:5A:56:6E:F8:DD:10:A0:88:31:D3:86:66
Certificate issuer:       /CN=A7133A09AC078B101CB7980FE646810280C0D64F
Certificate serial:       1A29FC637DAB661840577BBD496AD83FFA0C49B8
Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/3131382e3234322e33322e302f32322d3232203d3e2034383132.roa
Signing time:             Tue 21 Apr 2026 15:11:25 +0000
ROA not before:           Tue 21 Apr 2026 15:06:25 +0000
ROA not after:            Tue 20 Apr 2027 15:11:25 +0000
asID:                     4812
IP address blocks:        118.242.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 05:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:29:fc:63:7d:ab:66:18:40:57:7b:bd:49:6a:d8:3f:fa:0c:49:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F
        Validity
            Not Before: Apr 21 15:06:25 2026 GMT
            Not After : Apr 20 15:11:25 2027 GMT
        Subject: CN=FD22F4FDA3FBDD935A566EF8DD10A08831D38666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:fb:75:9d:c5:27:ad:cc:15:33:98:72:8e:
                    ea:be:fc:bb:d3:e6:ba:be:20:84:6c:f9:27:ce:c8:
                    4b:16:60:14:26:06:0c:c4:a6:85:68:e1:2b:9e:af:
                    77:e9:c1:5c:be:38:97:96:6e:b1:4c:0a:c9:31:68:
                    27:0f:75:e5:da:73:81:c3:13:0e:d1:b5:bf:92:a8:
                    28:6a:c6:33:c2:a8:7e:1c:44:4e:d2:5e:c3:39:cb:
                    37:b6:c0:0e:38:c4:58:c7:1b:c2:87:25:0c:9b:96:
                    dc:89:7b:24:8f:22:ec:a3:66:cd:d9:cc:b4:7e:7b:
                    82:ad:9f:9e:ee:fd:77:1d:81:94:a0:2f:3b:c6:14:
                    ae:75:49:17:0d:e6:9c:58:4d:41:5f:44:36:e2:2d:
                    44:cd:bd:3e:6f:2e:05:69:65:c3:d5:cc:04:b1:a5:
                    3d:8d:5f:dc:94:e1:90:b8:6c:34:32:de:0e:ba:8c:
                    a8:82:e5:ef:ea:1e:3b:21:23:1d:aa:9b:64:51:b9:
                    94:1d:09:82:3d:0d:01:3a:44:f9:5b:18:e0:bd:42:
                    a8:14:bc:54:81:cc:5f:ea:97:41:f8:51:06:28:7d:
                    fc:4b:1a:70:87:d0:3f:1e:ed:cb:e0:1d:c2:ea:bb:
                    24:95:d4:98:17:3d:7b:f1:df:90:f1:23:57:aa:29:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:F4:FD:A3:FB:DD:93:5A:56:6E:F8:DD:10:A0:88:31:D3:86:66
            X509v3 Authority Key Identifier:
                keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/3131382e3234322e33322e302f32322d3232203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:29:de:9c:97:29:58:2d:98:b3:34:0f:45:42:2c:a2:69:47:
         96:03:c8:c5:60:b7:09:b4:0d:f4:2a:48:57:ca:e7:25:bf:2e:
         25:bb:a7:70:0b:c5:a5:f5:8c:5e:88:ad:0c:00:4d:49:3b:a1:
         1e:33:b5:46:05:40:24:ac:b1:1f:03:9b:e1:f8:42:3b:56:54:
         6d:71:b8:b0:6e:d9:57:d4:86:7e:3a:96:60:6a:be:98:af:9d:
         91:58:0d:6b:20:3f:ca:58:40:b7:04:80:02:df:67:76:6c:9c:
         23:3d:e2:f1:81:bd:76:e3:91:13:44:41:e8:35:fe:b8:de:3f:
         74:e9:6e:fa:95:8e:e3:dd:ab:4d:5e:45:9a:82:50:58:ed:17:
         99:3f:c4:7e:34:23:55:d4:14:6f:9f:85:55:d9:9b:65:42:84:
         24:0b:12:b4:e3:13:5f:8a:98:21:61:b6:dd:d6:d0:37:14:6f:
         39:e9:ce:c0:cf:9b:58:65:8f:0e:b6:b1:11:3d:24:96:34:2d:
         e2:e7:8c:0f:ef:60:d0:cd:9a:8a:58:c9:65:15:a0:dd:ba:b7:
         61:58:75:86:73:b8:34:7f:8a:ac:d5:a3:4e:43:7f:c8:ce:5a:
         43:59:9b:b2:3c:5a:18:a4:cb:ab:33:ca:9e:2a:cc:24:29:df:
         0b:ad:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:25:07 2026 by rpki-client