Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/37312e3133312e3139322e302f31382d3138203d3e203535393630.roa
File:                     37312e3133312e3139322e302f31382d3138203d3e203535393630.roa (raw, json)
Hash identifier:          cYad1jDOCDM99PVHNQeElNOpwMdyb0Ez+4+Sy9svGho=
Subject key identifier:   73:19:73:7F:FC:CB:B0:E9:EB:33:75:9C:31:44:11:A4:45:B5:5C:A3
Certificate issuer:       /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
Certificate serial:       461A6A4722D8E67AE0E194D1666343C0E2635809
Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/37312e3133312e3139322e302f31382d3138203d3e203535393630.roa
Signing time:             Tue 19 May 2026 03:07:12 +0000
ROA not before:           Tue 19 May 2026 03:02:12 +0000
ROA not after:            Tue 18 May 2027 03:07:12 +0000
asID:                     55960
IP address blocks:        71.131.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 13:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1a:6a:47:22:d8:e6:7a:e0:e1:94:d1:66:63:43:c0:e2:63:58:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F
        Validity
            Not Before: May 19 03:02:12 2026 GMT
            Not After : May 18 03:07:12 2027 GMT
        Subject: CN=7319737FFCCBB0E9EB33759C314411A445B55CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3f:5c:d7:99:df:54:4c:ea:dd:fa:ad:ae:e6:
                    f8:20:9e:8c:ff:24:5f:0e:2b:64:27:ce:af:9f:c0:
                    01:27:be:ef:56:09:01:14:54:c7:d4:54:29:b3:51:
                    34:df:2d:7c:df:df:7f:36:84:90:5c:6b:f3:95:69:
                    41:96:1c:4e:11:1c:91:f5:f8:4a:8b:d2:5a:b2:fa:
                    00:3a:d0:b9:54:3c:d9:07:c0:07:f5:9a:fa:b5:76:
                    b8:4d:8c:36:67:e8:66:fe:4f:a5:37:47:14:4c:88:
                    60:85:c9:e3:91:e8:1e:b0:c3:53:c8:47:e9:c2:23:
                    72:d5:a3:f0:b8:23:c6:48:0e:86:6d:ff:78:3d:6b:
                    6c:d5:17:c1:be:ac:4f:d4:45:50:40:88:e2:21:da:
                    e4:45:99:2c:c6:b1:83:c8:e7:90:15:21:e8:e5:ba:
                    48:c4:19:c2:52:8c:d3:de:68:9a:32:e5:f1:02:f6:
                    0c:0d:40:dc:69:d6:67:39:9f:ef:b5:79:8b:a4:44:
                    da:06:48:e4:6c:58:0f:79:b8:4f:23:2f:fa:1d:73:
                    2c:25:69:ec:03:1a:00:f1:df:f2:d8:dc:64:00:ae:
                    f8:fc:5f:8e:2c:2a:9b:66:d4:bb:96:82:db:16:d1:
                    e0:a7:41:6e:95:2d:b9:a9:97:cc:f2:49:c9:45:26:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:73:7F:FC:CB:B0:E9:EB:33:75:9C:31:44:11:A4:45:B5:5C:A3
            X509v3 Authority Key Identifier:
                keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/37312e3133312e3139322e302f31382d3138203d3e203535393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:82:32:ea:0f:a9:13:47:cc:0c:f2:2d:f2:ea:66:a7:93:
         e1:3a:48:3e:3c:c1:c7:c7:c8:e1:f6:87:6b:6c:43:44:4e:c2:
         ed:55:e0:60:9a:5d:9b:ff:5e:f1:dd:fa:98:e9:d6:cb:c1:2b:
         15:99:cd:59:0a:d4:5b:fc:ce:c5:16:e2:37:1e:43:62:b1:3a:
         46:82:f5:cc:82:59:39:a0:8b:fe:99:37:23:ef:45:f6:4a:ea:
         c4:3a:14:a2:08:a4:d2:d2:08:7b:09:98:a6:0c:c5:0f:c4:09:
         f6:3c:38:d3:a1:6a:b3:65:b7:a1:ea:0d:2b:be:a2:b1:81:d2:
         6c:53:59:d3:16:a6:9a:27:7c:9e:a2:d1:5c:7b:df:63:23:69:
         08:c6:1b:78:56:5d:cf:eb:55:0b:e2:9c:09:de:8f:54:53:44:
         d1:c5:a8:36:ae:8d:d0:39:93:94:68:68:f8:99:da:a8:1a:ac:
         ce:df:13:1c:35:48:d5:b0:57:df:81:1f:6f:12:7d:01:55:0a:
         da:d8:75:a6:eb:ee:73:2c:b9:7b:aa:bd:71:81:e0:fb:59:5e:
         8e:97:9a:39:53:14:8f:be:cf:e4:34:60:ba:07:ad:32:02:20:
         54:45:65:94:c7:e6:eb:43:9e:64:f4:6b:47:37:2d:2e:0f:4a:
         a2:82:80:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 01:23:12 2026 by rpki-client