Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3138332e38312e3138302e302f32322d3232203d3e2034383437.roa
File:                     3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=
Subject key identifier:   82:D5:77:EF:77:8E:DA:BA:97:99:AD:E2:50:7B:29:F2:5C:BC:8C:2A
Certificate issuer:       /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
Certificate serial:       2EEA995C8B747C75D42F597460C83FDE0F07D147
Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3138332e38312e3138302e302f32322d3232203d3e2034383437.roa
Signing time:             Wed 20 May 2026 03:53:23 +0000
ROA not before:           Wed 20 May 2026 03:48:23 +0000
ROA not after:            Wed 19 May 2027 03:53:23 +0000
asID:                     4847
IP address blocks:        183.81.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 02:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ea:99:5c:8b:74:7c:75:d4:2f:59:74:60:c8:3f:de:0f:07:d1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
        Validity
            Not Before: May 20 03:48:23 2026 GMT
            Not After : May 19 03:53:23 2027 GMT
        Subject: CN=82D577EF778EDABA9799ADE2507B29F25CBC8C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:11:bc:a9:80:4f:c7:8f:1f:10:50:18:a0:
                    05:73:9a:37:d2:3f:65:c1:eb:7c:d1:ca:e2:6d:61:
                    06:03:6b:d7:44:20:44:50:6c:53:36:1e:ad:af:67:
                    83:e5:55:b8:3a:4f:27:0e:88:db:ce:26:68:b6:f6:
                    f6:80:43:ab:cb:32:60:27:43:b6:66:e7:56:0e:46:
                    1e:5b:7c:7d:fa:f9:81:03:5d:87:25:71:93:ff:91:
                    46:b7:40:e5:e6:c2:88:73:6c:57:ef:26:b0:b5:3e:
                    67:4e:47:c4:ef:fd:dd:ad:17:f4:4f:9c:81:ce:c0:
                    62:d6:6d:29:5e:bd:39:cd:13:7d:2d:00:06:22:e2:
                    d4:8a:e9:51:45:95:6a:b2:bb:49:7d:31:05:60:95:
                    20:18:31:a1:e0:54:44:6f:c5:cb:2d:44:b6:39:8f:
                    3a:c9:8b:9f:b2:1d:ff:f2:eb:3f:b2:b7:a3:ac:95:
                    bd:a1:b5:5a:f4:85:11:a7:af:e9:fc:06:d6:08:8a:
                    66:9f:df:af:82:21:ea:8b:43:39:96:0c:c6:8d:84:
                    df:4f:f2:dc:d7:63:8d:48:ab:12:3a:d3:2d:c0:23:
                    d8:69:a8:77:6b:2c:c8:a6:20:a6:d9:9a:2b:ee:31:
                    14:d4:a1:a3:5e:36:24:e2:1f:c7:03:2d:41:b9:b3:
                    7d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:77:EF:77:8E:DA:BA:97:99:AD:E2:50:7B:29:F2:5C:BC:8C:2A
            X509v3 Authority Key Identifier:
                keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3138332e38312e3138302e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.81.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:cc:2f:bf:00:9d:af:1f:33:c7:f3:2f:4a:11:db:89:3e:
         c2:19:38:42:4b:dc:ad:f7:8f:20:57:f4:85:ac:a1:84:8f:0b:
         31:79:2b:c0:30:90:f6:b9:71:d7:66:ca:29:f4:9e:d0:ea:5c:
         42:0d:50:f6:83:15:be:21:c6:c4:f8:73:f0:12:d9:49:95:0f:
         62:a8:2f:36:c0:c6:54:d4:bb:78:f4:40:41:80:09:c0:ec:31:
         be:b4:35:63:ea:99:f5:d6:4c:07:81:89:22:88:72:18:2d:f8:
         60:37:97:03:a5:1f:58:80:f4:b3:cd:32:fb:e0:ed:19:82:47:
         0d:af:10:ad:c5:49:15:f1:9f:0d:2c:db:a4:4c:85:e5:20:89:
         0f:9b:88:c5:4f:de:fc:d2:e2:28:c9:7d:cf:f6:46:4b:d6:e7:
         e3:c2:1d:4d:e3:15:16:84:01:59:45:6e:da:f0:4f:60:67:7d:
         92:e5:9b:be:9d:9a:07:a6:b9:92:2b:4a:6b:e5:3c:32:cd:78:
         9a:56:23:ca:68:7a:80:98:4f:9d:32:6a:ad:06:73:b1:3a:88:
         d4:c0:bd:2a:1f:03:b6:d2:f9:a3:82:66:d6:98:39:10:cf:43:
         bb:f3:04:92:15:85:24:ba:cf:32:b8:da:c1:be:26:7b:c7:89:
         01:12:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:30:06 2026 by rpki-client