Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3138322e35302e382e302f32312d3231203d3e2034383337.roa
File:                     3138322e35302e382e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier:          7Y90AdFkd0go/NEpv7uz0IuCuiF36eds4f5cN2znNHk=
Subject key identifier:   2A:59:D7:80:C1:B7:24:96:77:51:C4:93:76:4D:5D:19:BD:29:03:32
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       264D3E8134F101AC2152073354A645565A317199
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3138322e35302e382e302f32312d3231203d3e2034383337.roa
Signing time:             Wed 03 Jun 2026 07:30:33 +0000
ROA not before:           Wed 03 Jun 2026 07:25:33 +0000
ROA not after:            Wed 02 Jun 2027 07:30:33 +0000
asID:                     4837
IP address blocks:        182.50.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4d:3e:81:34:f1:01:ac:21:52:07:33:54:a6:45:56:5a:31:71:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 07:25:33 2026 GMT
            Not After : Jun  2 07:30:33 2027 GMT
        Subject: CN=2A59D780C1B724967751C493764D5D19BD290332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:5b:b5:86:e8:27:27:15:6c:a2:c0:18:17:
                    51:6c:bf:e5:1c:19:8e:69:c4:37:14:93:8e:61:06:
                    78:b3:21:4f:f9:44:ac:80:2d:63:2e:b8:71:ed:83:
                    ee:32:44:4b:82:10:72:a5:4c:8d:fa:7f:e5:23:92:
                    b1:4b:ac:4f:5f:12:13:54:4e:9e:7e:b2:d7:17:89:
                    72:09:07:c0:b7:27:47:7c:9c:0a:38:f2:0b:1f:dc:
                    2b:ca:bd:d5:56:a0:b2:fd:54:04:c8:db:ee:57:3c:
                    68:e7:4b:57:60:f4:7b:3d:a1:63:b7:df:b2:91:03:
                    6b:01:58:5f:3e:ed:0a:64:ee:03:41:c6:45:38:f0:
                    ec:52:0a:fd:e7:f4:51:74:89:60:09:43:d9:45:e3:
                    67:f7:f3:d8:1c:c2:ce:1c:10:bf:98:1f:4d:a3:d1:
                    87:0c:7b:e3:23:2a:39:7a:1e:0a:98:58:f5:a8:c7:
                    d3:34:8c:04:dc:b1:d8:c9:7f:27:bf:d2:f2:af:00:
                    c2:b2:95:55:c6:6b:ab:c1:86:8d:8e:fa:39:13:d5:
                    00:0d:73:8a:17:3f:f3:7e:e1:ef:4d:0c:20:a0:bd:
                    5c:fe:e9:9f:34:e2:22:77:4a:ef:7b:50:4d:d9:63:
                    00:48:40:a0:06:c2:f9:7c:c1:47:07:0a:0c:52:d5:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:D7:80:C1:B7:24:96:77:51:C4:93:76:4D:5D:19:BD:29:03:32
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3138322e35302e382e302f32312d3231203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:be:8a:9a:3e:dc:6a:9f:20:db:bd:31:6a:0f:40:35:c1:
         8c:db:b3:d3:ec:cd:a7:7e:57:0e:0b:63:77:a3:fc:96:46:95:
         70:08:4b:37:92:c7:51:cf:d1:fd:30:b7:68:da:20:84:19:8f:
         47:23:1b:27:3e:5a:e3:c2:65:fc:2b:1c:44:74:73:39:13:0a:
         4f:1c:2b:49:96:30:19:14:05:f6:a8:f0:e3:ed:ff:78:e9:06:
         a4:e2:07:11:8e:3e:61:b2:a6:61:d8:e6:55:21:80:c2:b0:8c:
         26:06:ae:be:75:5a:78:8a:0f:ac:34:c4:f5:d0:44:f2:84:45:
         ec:c3:55:b9:7e:31:58:07:93:42:6f:84:74:5e:54:81:01:e5:
         9b:78:36:21:87:50:60:4d:46:cb:70:3d:a4:54:6d:85:1c:94:
         11:94:78:e1:4f:e2:4e:f2:ca:b3:b8:e3:29:68:c3:b2:8f:02:
         68:94:34:00:22:09:62:ac:84:76:9f:a7:28:83:d8:5e:2a:f3:
         bb:41:62:0d:18:aa:6a:b2:25:f3:44:0a:3c:61:e2:88:19:d8:
         64:f7:6a:cc:57:86:0e:7a:6c:72:3c:c7:d4:44:94:16:50:07:
         85:e2:98:f2:fe:58:be:24:4b:c6:8a:76:b1:e0:ac:a3:a5:5d:
         4f:d5:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:42:39 2026 by rpki-client