Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e302e302f31382d3138203d3e2030.roa
File:                     3131362e3139392e302e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier:          WZzyLjevM13FDmHklsa8NAyw+QNCHguUbo+htrCA69U=
Subject key identifier:   73:DA:D9:FA:60:24:C7:CA:C1:3C:D4:DC:01:8B:C2:03:9F:02:6B:DA
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       1A9ABCE06981A16CCAE95CBE6A9D4F098C43F6F7
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e302e302f31382d3138203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:19:28 +0000
ROA not before:           Tue 14 Apr 2026 03:14:28 +0000
ROA not after:            Tue 13 Apr 2027 03:19:28 +0000
asID:                     0
IP address blocks:        116.199.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9a:bc:e0:69:81:a1:6c:ca:e9:5c:be:6a:9d:4f:09:8c:43:f6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:14:28 2026 GMT
            Not After : Apr 13 03:19:28 2027 GMT
        Subject: CN=73DAD9FA6024C7CAC13CD4DC018BC2039F026BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:a3:a5:a6:c3:f2:f1:b9:4f:13:50:76:c3:
                    84:20:c8:55:f1:44:11:e3:38:46:49:f6:42:cf:f7:
                    cc:ca:fb:d1:7c:31:75:d7:51:b6:00:79:d4:5e:3c:
                    51:a2:27:d6:7c:8f:90:2a:ae:2d:7a:7e:c7:65:f8:
                    52:af:77:eb:c1:36:f8:e9:74:4a:46:fe:78:28:8e:
                    86:13:48:44:3c:d0:6f:5a:01:15:06:53:f0:43:96:
                    b3:7a:97:ff:72:b2:83:97:63:fb:63:c8:4a:2e:51:
                    ce:18:93:c7:aa:4d:3a:5d:39:05:0b:86:90:57:19:
                    a6:93:5f:ce:99:de:7b:de:d7:d6:e3:5f:b5:57:d3:
                    03:88:cd:66:61:81:85:d7:74:40:fa:38:ca:51:74:
                    ae:15:06:bb:00:97:5b:df:7e:a2:ba:0f:b4:9c:1d:
                    ec:36:f7:8a:df:c2:7b:0c:2b:67:d0:63:a7:47:00:
                    ab:76:a1:de:65:89:71:05:e3:92:6f:da:39:58:a6:
                    6b:5f:85:3e:c3:65:83:d9:e6:e2:74:18:42:86:44:
                    df:c4:ad:37:38:e8:e4:1c:50:63:ca:4a:3b:79:c4:
                    45:ee:ba:b1:26:5d:dd:df:1a:8d:6c:76:fd:a7:cf:
                    0c:23:a8:75:4b:e9:4d:9f:81:13:bc:cc:12:f1:58:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DA:D9:FA:60:24:C7:CA:C1:3C:D4:DC:01:8B:C2:03:9F:02:6B:DA
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e302e302f31382d3138203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:5c:50:f7:ec:24:1c:4e:0c:78:2b:8f:ef:92:a8:8b:bb:f5:
         8e:f7:67:41:c6:3a:5b:cd:ff:a5:a6:4a:99:3c:36:c7:24:19:
         0b:2d:eb:4b:6b:9a:89:02:07:6b:bd:f1:c3:d6:bb:c3:4a:28:
         7d:64:e7:3a:cd:ec:de:79:75:2c:0e:ac:cd:c6:b4:07:48:88:
         81:bf:98:d7:bf:57:6b:57:aa:95:45:10:b6:d6:ca:bd:d0:17:
         c3:ce:6e:9f:bd:c1:2d:60:58:39:d6:eb:f6:8c:7f:92:2f:64:
         22:53:91:b8:01:51:ab:60:49:83:28:db:f6:63:1b:a8:24:a6:
         65:6f:a5:be:e6:7a:11:fc:1c:25:df:1f:07:9c:a5:48:fa:8c:
         ac:ff:2d:e1:ce:68:f4:0c:14:80:1e:b8:35:38:db:40:99:ee:
         d4:42:4f:af:65:48:17:09:4c:b7:75:fb:29:e6:51:e0:7d:03:
         b0:6c:db:74:86:70:10:77:6f:e6:e7:c2:fa:6f:ee:d5:f7:ff:
         ba:0f:b9:8d:53:29:9b:92:fe:a8:cc:db:ac:80:09:10:e4:4e:
         22:55:5f:9d:d1:89:97:a9:c3:1b:18:6e:08:ec:fd:ce:54:20:
         40:15:9b:34:51:12:38:5c:91:f7:27:76:d7:f4:94:67:c5:b3:
         fc:73:ab:cd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUGpq84GmBoWzK6Vy+ap1PCYxD9vcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTQwMzE0MjhaFw0yNzA0MTMwMzE5MjhaMDMxMTAvBgNV
BAMTKDczREFEOUZBNjAyNEM3Q0FDMTNDRDREQzAxOEJDMjAzOUYwMjZCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqnqOlpsPy8blPE1B2w4QgyFXx
RBHjOEZJ9kLP98zK+9F8MXXXUbYAedRePFGiJ9Z8j5Aqri16fsdl+FKvd+vBNvjp
dEpG/ngojoYTSEQ80G9aARUGU/BDlrN6l/9ysoOXY/tjyEouUc4Yk8eqTTpdOQUL
hpBXGaaTX86Z3nve19bjX7VX0wOIzWZhgYXXdED6OMpRdK4VBrsAl1vffqK6D7Sc
Hew294rfwnsMK2fQY6dHAKt2od5liXEF45Jv2jlYpmtfhT7DZYPZ5uJ0GEKGRN/E
rTc46OQcUGPKSjt5xEXuurEmXd3fGo1sdv2nzwwjqHVL6U2fgRO8zBLxWMOPAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUc9rZ+mAkx8rBPNTcAYvCA58Ca9owHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMTM2MmUzMTM5
MzkyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ0xwAw
DQYJKoZIhvcNAQELBQADggEBABBcUPfsJBxODHgrj++SqIu79Y73Z0HGOlvN/6Wm
Spk8NsckGQst60trmokCB2u98cPWu8NKKH1k5zrN7N55dSwOrM3GtAdIiIG/mNe/
V2tXqpVFELbWyr3QF8PObp+9wS1gWDnW6/aMf5IvZCJTkbgBUatgSYMo2/ZjG6gk
pmVvpb7mehH8HCXfHwecpUj6jKz/LeHOaPQMFIAeuDU420CZ7tRCT69lSBcJTLd1
+ynmUeB9A7Bs23SGcBB3b+bnwvpv7tX3/7oPuY1TKZuS/qjM26yACRDkTiJVX53R
iZepwxsYbgjs/c5UIEAVmzRREjhckfcndtf0lGfFs/xzq80=
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:39 2026 by rpki-client