Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3138302e3138382e34382e302f32302d3230203d3e2030.roa
File:                     3138302e3138382e34382e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=
Subject key identifier:   B4:92:60:7F:81:29:DE:BC:A2:AD:A0:8A:35:2B:4E:56:77:44:84:27
Certificate issuer:       /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Certificate serial:       3D0C8FA04CF1177AE0318702CE3721A8CD4C2EE0
Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3138302e3138382e34382e302f32302d3230203d3e2030.roa
Signing time:             Thu 28 May 2026 07:56:59 +0000
ROA not before:           Thu 28 May 2026 07:51:59 +0000
ROA not after:            Thu 27 May 2027 07:56:59 +0000
asID:                     0
IP address blocks:        180.188.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0c:8f:a0:4c:f1:17:7a:e0:31:87:02:ce:37:21:a8:cd:4c:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
        Validity
            Not Before: May 28 07:51:59 2026 GMT
            Not After : May 27 07:56:59 2027 GMT
        Subject: CN=B492607F8129DEBCA2ADA08A352B4E5677448427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:b0:5a:b0:a5:09:39:fa:d6:d9:1b:cb:be:
                    8e:84:1f:f6:b8:c8:6b:fe:72:97:0f:2c:5d:01:08:
                    b3:66:e1:2b:69:f8:ba:0f:12:16:23:3a:97:2b:ea:
                    c1:77:66:fd:a5:f0:5b:d1:5d:ec:be:65:a1:27:fe:
                    a7:38:ec:3f:44:ae:02:5c:5d:b9:e3:08:0c:69:ce:
                    51:ca:76:f0:09:55:63:97:5c:b8:ec:af:5b:97:ba:
                    42:10:1d:d8:52:dd:ea:b8:34:6c:ce:a6:75:b7:1a:
                    6e:69:1b:ee:76:2a:86:3b:66:6c:24:f0:14:98:51:
                    c3:db:79:8a:bd:d0:15:0b:7d:c9:14:5e:7b:a0:05:
                    fa:ef:2c:6c:95:93:a6:3c:5a:7e:a1:30:3b:d5:9e:
                    08:6b:6b:53:05:07:65:2e:2c:8e:bd:cb:18:b9:79:
                    b2:d6:8a:53:65:71:3a:91:35:4c:78:38:8b:20:db:
                    a1:fb:92:75:37:54:b9:50:8d:14:e2:34:9d:25:87:
                    99:6f:4e:e2:52:a2:a9:40:60:ee:09:ed:4d:c8:d8:
                    52:df:3a:c7:38:6e:63:b4:52:61:42:16:3f:61:33:
                    38:0a:d3:cf:88:1f:67:e4:c3:91:4c:84:c6:b5:0c:
                    67:89:71:44:ae:39:26:51:55:97:7a:d2:9a:02:c1:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:92:60:7F:81:29:DE:BC:A2:AD:A0:8A:35:2B:4E:56:77:44:84:27
            X509v3 Authority Key Identifier:
                keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3138302e3138382e34382e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:ec:03:0e:3b:76:26:5c:4c:6a:42:67:09:94:12:d4:9f:
         5e:e2:89:c7:66:c9:af:09:39:92:1a:73:fe:ed:2e:21:16:14:
         7c:3f:a1:88:c6:6e:fd:02:e6:c0:e0:d3:a6:ae:7b:44:2d:94:
         44:ce:c3:9e:ab:9a:91:25:b3:35:94:8b:5d:47:f4:d8:e7:96:
         4f:8c:03:12:5b:69:7b:b4:70:c9:5c:fc:db:10:1e:29:01:b7:
         4b:52:f5:19:75:22:58:35:8c:a8:67:1a:0b:23:a4:f0:58:25:
         a3:b1:3a:bb:c9:19:d9:1b:b5:0a:d2:fb:4f:07:84:4a:82:5e:
         54:96:e9:3d:77:27:c7:c4:c7:01:49:2f:50:fb:dc:7d:f6:6b:
         e7:8e:b9:3f:ac:d1:27:4a:3c:27:b0:69:49:57:c9:07:b1:8e:
         fa:38:51:e2:0c:6e:81:b3:47:06:cd:51:36:2c:c0:76:98:a3:
         fa:5c:ed:70:fd:2b:e1:df:3d:5b:73:b3:78:c5:09:7b:b7:ba:
         c4:84:6c:fa:5c:97:d0:04:83:9e:78:30:81:f2:81:67:34:e5:
         65:52:a6:ac:4b:06:0f:b0:38:53:b0:2b:a3:1d:db:75:3a:e2:
         a3:4f:8e:73:9f:2d:be:b5:3c:4d:8c:45:6c:a7:97:d8:37:62:
         b8:9c:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:53 2026 by rpki-client