Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105363837357391885/0/3131382e32362e34382e302f32322d3232203d3e203233373234.roa
File:                     3131382e32362e34382e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          bbPL4j45C+RMfGafiR0qkGRylDwqu6P24VVmxZBPgHo=
Subject key identifier:   5A:50:E5:CE:99:41:D2:B0:BF:2E:A0:99:B6:37:0A:35:0C:D6:34:7C
Certificate issuer:       /CN=8724034EA9C06D1060ECF7022D7573CB149BE03B
Certificate serial:       0FF9917BABF86BE4E8A8E269648A423D658B1D05
Authority key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/3131382e32362e34382e302f32322d3232203d3e203233373234.roa
Signing time:             Sat 09 May 2026 05:29:21 +0000
ROA not before:           Sat 09 May 2026 05:24:21 +0000
ROA not after:            Sat 08 May 2027 05:29:21 +0000
asID:                     23724
IP address blocks:        118.26.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f9:91:7b:ab:f8:6b:e4:e8:a8:e2:69:64:8a:42:3d:65:8b:1d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B
        Validity
            Not Before: May  9 05:24:21 2026 GMT
            Not After : May  8 05:29:21 2027 GMT
        Subject: CN=5A50E5CE9941D2B0BF2EA099B6370A350CD6347C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:ac:5a:7f:52:83:9c:2b:e6:f2:c5:84:04:
                    12:7d:ca:29:aa:d1:53:d0:13:61:83:de:2d:61:29:
                    a3:f3:70:a9:80:13:9e:90:6f:ff:1a:24:b9:10:14:
                    5b:10:8d:71:df:83:78:53:73:54:96:b4:12:fb:a1:
                    de:d3:a3:26:a5:80:1f:a2:04:6c:a8:62:45:1e:c2:
                    64:90:2a:e9:23:ec:2f:28:a3:f0:00:64:ac:63:7a:
                    03:cd:54:1b:1e:72:5e:26:e8:cb:46:9e:83:56:ba:
                    f4:0f:80:eb:6b:f8:61:06:fb:2e:77:50:79:34:34:
                    81:a4:16:ee:ab:30:22:75:e0:cf:14:85:59:5f:d1:
                    76:da:9e:aa:5c:57:7a:d0:97:1a:36:9f:1c:d1:d1:
                    6a:e5:fe:a0:1a:6b:95:14:6d:c3:ff:fe:37:8e:09:
                    79:7e:7c:39:43:92:fa:f5:61:da:01:f6:13:d1:87:
                    f7:a9:1e:ae:0c:2b:de:27:08:6d:9e:19:12:13:2d:
                    bc:c5:ed:77:1d:76:6c:d8:ba:a2:bc:72:82:91:cb:
                    3c:c8:29:eb:ba:08:2c:a7:6e:50:03:a2:16:b6:64:
                    dd:8c:20:22:82:41:1d:91:ad:f9:c8:b3:c3:2f:64:
                    fe:df:23:38:03:43:02:e6:6b:67:3e:99:ca:ea:5c:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:E5:CE:99:41:D2:B0:BF:2E:A0:99:B6:37:0A:35:0C:D6:34:7C
            X509v3 Authority Key Identifier:
                keyid:87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/3131382e32362e34382e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.26.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:30:b6:60:fb:1e:ab:f1:65:cb:ed:4a:a0:71:e8:e5:4d:
         57:5e:1a:9c:48:6c:36:1e:6e:16:67:be:ec:f8:52:29:df:9b:
         1e:e4:e0:6c:68:a6:cc:6e:07:26:fc:6d:15:69:f8:ea:34:dc:
         d0:8b:cc:fb:d2:3c:70:4b:6c:3d:92:16:ab:45:cf:b4:ad:4e:
         a2:0f:22:98:c7:db:1e:63:7e:50:9d:25:c4:03:df:a8:06:ce:
         b1:27:2d:c8:2e:e8:30:e5:72:9c:5e:08:0b:8f:d5:02:6c:e9:
         93:1a:6d:c8:fd:17:0a:5a:b7:4a:6d:6e:92:93:6a:96:88:3a:
         4d:a9:bf:17:88:3c:f8:47:49:af:32:30:1e:ce:a3:73:a7:6d:
         ca:d7:ca:09:31:6b:58:4e:40:82:f6:7b:ff:9d:f9:ea:52:6b:
         b2:79:b8:e4:b2:b2:4f:77:ef:5b:fc:5b:c6:25:6b:6c:d1:4d:
         2e:51:d5:8f:ca:f8:2c:53:6b:b6:84:25:15:3f:2e:26:4a:ed:
         03:40:ba:a3:2d:b2:61:ba:57:c5:7b:6e:b7:b1:30:a6:17:02:
         7f:a0:60:e8:64:80:4c:b7:67:dd:fd:27:5f:8b:23:a5:44:8f:
         76:38:b7:a0:f9:7a:31:74:d1:71:de:1d:4f:8c:e3:88:d4:bd:
         dc:c5:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:55 2026 by rpki-client