Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32312d3231203d3e2034383038.roa
File:                     3138322e34382e3131322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          cvxFSTyPwgIKkY2dJWFMfHSeetCIxKj7JtxKxCNP8ts=
Subject key identifier:   0E:3B:39:33:55:DB:41:EF:A5:ED:49:7D:6E:E8:62:ED:0F:CA:DF:38
Certificate issuer:       /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
Certificate serial:       0F5E7E20A33E3A6C5E61439D06F837FA358BC46C
Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32312d3231203d3e2034383038.roa
Signing time:             Sat 09 May 2026 07:52:10 +0000
ROA not before:           Sat 09 May 2026 07:47:10 +0000
ROA not after:            Sat 08 May 2027 07:52:10 +0000
asID:                     4808
IP address blocks:        182.48.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5e:7e:20:a3:3e:3a:6c:5e:61:43:9d:06:f8:37:fa:35:8b:c4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
        Validity
            Not Before: May  9 07:47:10 2026 GMT
            Not After : May  8 07:52:10 2027 GMT
        Subject: CN=0E3B393355DB41EFA5ED497D6EE862ED0FCADF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:bb:f5:4f:35:6f:4d:c5:f2:3e:df:55:6d:
                    5d:24:ca:fe:46:59:6b:c7:9c:ab:77:5a:85:1f:54:
                    cb:5c:8d:61:4e:11:79:cf:d6:4e:55:bc:f9:5c:8c:
                    61:06:08:65:d8:24:69:a9:eb:bd:cb:d5:04:43:c2:
                    68:4c:c8:f8:98:43:fb:2a:e9:90:fe:f2:87:85:1a:
                    2d:37:89:f8:21:9c:27:82:7a:f9:72:3c:e6:c0:80:
                    24:fa:a6:86:56:a1:39:e1:cf:d6:2c:06:75:a5:61:
                    0a:35:c0:bd:09:23:1b:7b:f2:5e:3a:96:83:12:e7:
                    ce:56:4e:48:54:fe:7b:f4:57:04:e4:ee:85:42:7f:
                    05:28:cc:90:d3:ed:cb:77:ca:59:02:be:6f:e9:13:
                    4d:10:49:9d:de:61:39:9a:18:b5:cb:e8:ed:fb:e7:
                    ff:2f:8e:48:20:78:d9:15:d5:f9:34:ef:a9:e9:5b:
                    a0:98:d8:63:05:6e:73:60:fa:8f:d7:c1:d4:ca:f4:
                    78:09:e4:74:96:23:03:c8:88:93:f5:19:50:73:90:
                    1e:38:a5:c6:e5:8a:08:d3:74:2b:01:cb:a7:be:9d:
                    b8:cf:ad:15:4c:85:75:02:4f:bb:04:f0:22:02:68:
                    1c:31:d6:5e:13:56:f7:61:0c:0d:8c:1b:87:84:23:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3B:39:33:55:DB:41:EF:A5:ED:49:7D:6E:E8:62:ED:0F:CA:DF:38
            X509v3 Authority Key Identifier:
                keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:d4:10:4e:13:d3:00:0f:44:34:52:bb:c1:ff:4c:3d:5b:
         4b:6d:b8:d9:37:f6:09:c4:ee:cd:83:0a:ff:7e:cc:63:b8:c3:
         d1:8c:a7:8a:ee:24:2b:c2:66:de:db:c2:2f:24:99:8a:b4:4d:
         79:e7:97:0d:34:99:46:f5:48:38:cb:85:6a:e3:3e:e3:12:64:
         03:b2:b3:75:57:92:b4:5d:0c:6d:cc:90:eb:43:5d:4c:22:d6:
         5a:f6:f0:48:6a:02:58:94:9b:60:44:6d:b1:a8:71:c4:4e:98:
         ab:ec:68:00:a2:27:51:93:91:97:e5:a0:b8:e4:c9:5a:11:ff:
         9e:b1:b2:4e:08:e0:5a:8a:b0:5e:48:e9:5f:2b:81:05:34:b5:
         15:85:62:f3:14:48:28:bc:50:61:61:b6:13:19:65:cd:fa:73:
         11:7a:6a:55:40:21:11:8b:16:91:0b:b6:6b:49:09:dd:d8:e6:
         90:a1:3e:6c:2f:16:fa:84:54:8f:45:4b:d2:fa:e8:04:a5:11:
         80:da:d0:e4:db:3a:43:1d:b7:6d:de:59:80:c6:eb:f3:e9:bb:
         b1:b9:80:04:3e:d9:9d:2c:35:2c:ea:18:5c:77:55:0f:74:89:
         1d:7e:24:7d:84:8c:be:ff:d1:24:39:5e:03:1d:c9:f3:10:65:
         50:da:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:57 2026 by rpki-client