Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32322d3232203d3e203435303634.roa
File:                     3138322e34382e3131322e302f32322d3232203d3e203435303634.roa (raw, json)
Hash identifier:          zDgFKqpxiUMjIky0CGa6k5S0pxQnz0BcTgTp0E6d1ZA=
Subject key identifier:   01:A9:CA:BE:08:B3:DF:46:2B:97:BF:22:19:75:D0:0F:F8:8C:46:24
Certificate issuer:       /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
Certificate serial:       38C2B309EFA3C9D8F8B12368DBD482BE5A7C9809
Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32322d3232203d3e203435303634.roa
Signing time:             Sat 09 May 2026 07:52:10 +0000
ROA not before:           Sat 09 May 2026 07:47:10 +0000
ROA not after:            Sat 08 May 2027 07:52:10 +0000
asID:                     45064
IP address blocks:        182.48.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c2:b3:09:ef:a3:c9:d8:f8:b1:23:68:db:d4:82:be:5a:7c:98:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266
        Validity
            Not Before: May  9 07:47:10 2026 GMT
            Not After : May  8 07:52:10 2027 GMT
        Subject: CN=01A9CABE08B3DF462B97BF221975D00FF88C4624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:61:63:97:f7:50:fb:c2:4b:6d:8d:d6:39:4d:
                    1e:48:b7:36:b7:ad:e8:83:f0:82:80:9e:d4:47:86:
                    46:ce:d8:54:e0:be:c3:bf:2b:8b:d9:3e:d1:12:5c:
                    bc:86:e2:3b:82:86:ec:5f:1c:be:e9:27:38:53:5c:
                    71:db:08:55:e4:54:03:3a:0a:49:94:29:8d:e0:67:
                    9b:f3:2f:58:af:8e:80:06:e7:a6:22:1d:71:f3:2a:
                    f7:61:fb:db:e9:dd:0c:24:11:b6:6a:8a:b1:49:f1:
                    9a:0d:d6:07:60:20:62:fe:2c:fb:0f:1c:be:99:8b:
                    bc:f1:68:b9:45:50:18:71:d3:34:82:c2:e6:30:8a:
                    66:a1:32:02:53:01:27:af:45:01:5b:1c:33:25:00:
                    ba:87:78:1c:bd:07:ac:2a:c5:a6:72:6b:a6:ee:1f:
                    8d:43:ac:60:78:5d:00:27:f5:1b:81:41:fa:21:0d:
                    49:99:d5:95:f9:87:ce:71:5e:ba:d9:f7:d7:86:95:
                    29:4b:ac:9a:5f:88:f9:4f:cd:80:41:61:22:f9:c4:
                    e8:db:cc:9d:36:51:e5:24:46:e9:58:4c:02:fd:95:
                    3f:ef:43:94:de:85:d2:f7:a3:67:94:ef:02:e0:49:
                    e0:8e:b9:37:f5:93:72:c1:28:29:07:d3:ef:88:69:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:CA:BE:08:B3:DF:46:2B:97:BF:22:19:75:D0:0F:F8:8C:46:24
            X509v3 Authority Key Identifier:
                keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e3131322e302f32322d3232203d3e203435303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:f7:68:0a:ed:f9:33:86:0b:5f:25:59:c0:6c:f9:4a:a5:
         42:de:1d:b3:66:5f:00:6d:bc:3b:ae:9a:bb:8a:77:28:93:1f:
         e3:72:ef:4e:89:0d:c6:19:1c:ba:59:89:fa:46:16:19:93:1a:
         1d:0d:0d:c0:1d:63:db:3e:a1:25:e1:57:2c:9a:f8:eb:ff:34:
         b5:ea:ce:55:09:10:ad:d9:33:92:f7:83:55:93:99:a6:c6:8e:
         0a:ba:a3:59:5d:c9:8f:69:79:83:87:a7:c0:82:2d:07:27:c6:
         55:fa:73:b9:8f:f2:43:56:17:bd:7e:ce:41:18:6d:6c:3f:78:
         6b:7d:bf:9e:9d:4b:8a:e8:55:a2:73:82:58:20:ea:21:1c:18:
         69:29:58:0a:d1:e5:d3:3a:24:76:28:38:e0:f3:d6:af:b9:2c:
         bf:6f:35:50:78:48:8b:78:35:27:3e:ef:d1:45:30:0a:fd:ba:
         5b:c1:34:7e:03:c6:2d:56:65:4c:e2:92:22:3b:b6:32:46:29:
         55:3d:5a:1b:61:ae:ca:87:cf:ea:21:9e:29:92:72:a6:a1:c5:
         35:18:da:81:56:8c:16:89:4d:30:c6:81:28:76:d4:03:72:fc:
         43:1c:22:94:b4:42:b9:e6:5f:11:df:ee:7e:b3:30:67:52:1e:
         f4:61:eb:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:46:28 2026 by rpki-client