Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e302e302f32302d3230203d3e2030.roa
File:                     3131362e3139392e302e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          Zsn2ykRY0OZ44yd7gYayGAzfyv+ZhZY2cJMfUZfFMq8=
Subject key identifier:   69:16:E1:DB:8A:19:4A:FF:8D:1E:E7:09:B9:BF:68:CA:8A:84:55:1A
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       7115D7072367E71A0DA5882C0784D2A81AA3EDDF
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e302e302f32302d3230203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:19:28 +0000
ROA not before:           Tue 14 Apr 2026 03:14:28 +0000
ROA not after:            Tue 13 Apr 2027 03:19:28 +0000
asID:                     0
IP address blocks:        116.199.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:15:d7:07:23:67:e7:1a:0d:a5:88:2c:07:84:d2:a8:1a:a3:ed:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:14:28 2026 GMT
            Not After : Apr 13 03:19:28 2027 GMT
        Subject: CN=6916E1DB8A194AFF8D1EE709B9BF68CA8A84551A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:6f:2e:8d:ce:a9:73:14:12:4c:8f:ba:ac:
                    a5:5a:59:af:1e:11:7d:ad:62:8d:f9:13:a9:27:8e:
                    01:6b:72:ee:00:ec:69:18:a5:4f:ef:1b:a7:0c:51:
                    43:26:af:5d:52:2f:72:65:f0:8f:c5:19:6e:4a:cd:
                    8c:e1:6a:25:75:0c:b7:2a:03:ea:e5:f5:9e:23:d5:
                    40:60:e6:6e:5c:ae:9b:05:32:6e:c2:12:87:98:0c:
                    0f:aa:d6:37:98:a0:23:db:63:b0:49:aa:e1:0f:2f:
                    e6:f4:2d:ca:c9:fd:af:31:e0:e3:37:3e:d1:96:4e:
                    b6:73:c5:c1:6f:66:fd:11:6e:b5:21:6b:e5:7b:c3:
                    af:f0:64:27:a3:bd:c2:dd:31:03:48:83:11:62:fd:
                    24:73:7e:41:76:f2:b1:89:18:33:be:06:b2:d2:7f:
                    f3:32:0d:dc:98:51:44:78:06:e4:d1:69:7b:b6:d2:
                    5c:f4:00:0e:38:6c:79:d9:1e:75:6a:65:f5:68:00:
                    16:c8:4c:3c:6b:d1:77:cd:d1:8c:e3:45:c4:27:62:
                    56:08:b1:8a:d8:9e:1d:76:ad:36:a0:2c:1f:67:c2:
                    36:75:6d:e1:b6:a7:ba:ba:ae:71:9b:34:db:71:14:
                    7f:31:66:2a:12:5f:fc:8b:1c:b7:d8:3b:17:f8:eb:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:E1:DB:8A:19:4A:FF:8D:1E:E7:09:B9:BF:68:CA:8A:84:55:1A
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e302e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:66:0a:8f:86:13:1c:98:e4:ee:26:b5:66:29:b7:6a:a1:b4:
         8c:d4:17:30:1c:c4:c9:94:6e:06:1e:18:97:11:08:f4:78:ea:
         bd:76:be:3a:0d:fe:59:fc:56:25:ca:c6:63:6e:b5:40:87:e0:
         d2:5f:e8:be:17:be:fd:f2:ab:05:1e:6e:04:04:5a:40:14:03:
         60:ed:de:b8:d4:50:37:ba:e0:5f:e4:c6:d7:e4:e6:1e:5b:8e:
         62:68:8a:bd:48:44:f1:5d:ca:56:4e:59:63:d0:d4:2a:25:90:
         a1:59:8d:c9:6f:28:ae:b1:e3:97:f4:a2:c3:e0:c1:62:46:13:
         61:55:86:ce:72:ea:cc:9d:00:54:c8:85:d2:04:1d:19:a6:5d:
         55:7d:35:20:a6:c8:89:05:7a:66:da:df:38:10:2d:da:fe:37:
         b4:b8:27:a1:ee:80:58:87:f9:2e:4d:89:91:8a:6f:64:54:5b:
         d5:0b:34:20:d2:cf:a7:31:10:23:b1:ec:cc:9c:92:e6:31:22:
         6e:b6:38:20:38:a6:1f:a4:e8:83:ff:10:7a:7e:15:24:54:8a:
         c0:b0:70:3d:ac:76:71:4c:b3:f3:4e:9f:12:d0:bb:00:6f:29:
         8a:60:ab:98:b0:db:5e:42:50:a3:62:ce:f0:48:4e:33:b5:90:
         d8:55:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:44 2026 by rpki-client