Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32312d3231203d3e2034383437.roa
File:                     3138322e34382e3131322e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier:          RpXvDFZ5bI0PemmLqSDHuy60qQcMuI9OjrSZyrDgR64=
Subject key identifier:   E4:ED:F5:49:2A:0C:DD:1E:CA:CE:90:43:C2:00:09:27:DA:65:1E:06
Certificate issuer:       /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
Certificate serial:       6A69BA294CDD89958A8EB11AF40267EA911C637D
Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32312d3231203d3e2034383437.roa
Signing time:             Sat 09 May 2026 07:52:10 +0000
ROA not before:           Sat 09 May 2026 07:47:10 +0000
ROA not after:            Sat 08 May 2027 07:52:10 +0000
asID:                     4847
IP address blocks:        182.48.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:69:ba:29:4c:dd:89:95:8a:8e:b1:1a:f4:02:67:ea:91:1c:63:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
        Validity
            Not Before: May  9 07:47:10 2026 GMT
            Not After : May  8 07:52:10 2027 GMT
        Subject: CN=E4EDF5492A0CDD1ECACE9043C2000927DA651E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:1a:15:db:58:df:b1:27:42:b6:6b:25:67:
                    af:b4:d5:e7:8b:3b:42:c8:f9:65:d7:26:a3:b2:b5:
                    88:91:70:9f:92:0c:5d:73:ad:13:fa:bc:aa:75:fa:
                    8b:90:4e:da:b5:ad:39:86:76:3b:ca:4a:b2:62:03:
                    69:c4:b9:01:da:d3:40:4a:db:ab:9e:0a:1d:f0:9b:
                    af:42:dd:8a:83:07:d9:07:4a:52:6c:af:c7:9c:93:
                    73:d7:9e:7a:b0:d7:b4:1d:9f:0c:7b:4a:a9:e6:13:
                    7f:5b:fb:d1:82:7d:ef:9a:60:df:77:c7:4a:13:c2:
                    19:6d:5a:36:ff:9b:be:5f:42:4b:5f:a2:b4:78:41:
                    97:87:19:39:e7:3c:c4:a0:6e:87:75:c6:3e:d4:24:
                    1d:97:d4:29:da:15:91:7e:de:16:85:7f:2e:93:82:
                    40:78:a7:f3:85:aa:39:12:45:87:23:21:75:b3:a5:
                    2f:7b:52:25:c0:c0:ab:1d:7e:2d:37:cb:4c:23:b9:
                    48:f6:17:1e:d7:5a:78:f4:a0:c8:4e:e3:df:d9:9d:
                    d5:ab:95:0f:75:9c:ff:5d:73:86:fd:81:33:d5:de:
                    e7:45:27:7f:84:16:bd:cc:cf:69:f9:71:5a:70:6a:
                    3a:78:fd:94:d3:4d:c7:2c:13:64:93:a1:0a:71:2f:
                    89:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:ED:F5:49:2A:0C:DD:1E:CA:CE:90:43:C2:00:09:27:DA:65:1E:06
            X509v3 Authority Key Identifier:
                keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32312d3231203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:cf:27:bc:29:27:83:aa:fe:57:e1:94:91:cf:19:13:a2:
         ab:38:c1:52:1d:4b:b1:50:05:db:d8:1a:f5:1b:5d:97:e8:c6:
         38:6c:a4:ce:25:57:44:67:8f:ac:07:11:77:0c:fc:81:92:b1:
         e9:60:b8:b7:c1:e7:46:44:e9:21:d4:64:0b:1c:64:0a:a9:95:
         2f:39:e9:3b:01:3d:c9:7b:53:bc:22:73:4e:5c:4e:52:ab:c6:
         af:da:52:4e:3c:c4:b9:62:6d:66:e7:5c:4a:ab:f2:b4:b5:8a:
         9e:4b:e8:49:69:33:b8:3a:f3:10:1b:14:c2:70:ad:bd:69:7b:
         15:7b:1a:37:e8:11:52:82:18:ba:65:f4:25:67:01:75:5c:d6:
         3c:98:a7:4d:27:3d:ba:72:7f:ee:b6:f1:aa:1e:05:fc:af:ae:
         53:46:3f:bd:53:58:ed:6b:eb:79:e3:2e:85:0d:a8:96:d0:36:
         5c:24:68:23:a1:5c:38:c3:16:4c:82:80:12:f5:37:e1:92:d8:
         56:46:14:70:14:2d:40:a0:e5:40:0a:2e:8b:0f:c0:99:50:1f:
         24:d0:ca:7d:cd:51:c2:53:f1:9c:47:6d:7c:ff:7e:62:57:e5:
         a1:36:a6:2d:5a:6a:d4:66:cd:ec:d0:bb:e2:1a:29:2f:99:94:
         d7:55:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:54:17 2026 by rpki-client