Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e31362e302f32312d3231203d3e2030.roa
File:                     3131362e3139392e31362e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier:          SY+QeJyZKI56R/FLonHcjg6yzyV5T1u8dn/kdVCfPyM=
Subject key identifier:   39:33:D9:66:58:02:AA:9E:4C:6B:63:6A:97:62:59:F9:79:75:07:0C
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       22F33765C7EA32F0ADB67B2749AAE9F82B79C7B0
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e31362e302f32312d3231203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:19:28 +0000
ROA not before:           Tue 14 Apr 2026 03:14:28 +0000
ROA not after:            Tue 13 Apr 2027 03:19:28 +0000
asID:                     0
IP address blocks:        116.199.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f3:37:65:c7:ea:32:f0:ad:b6:7b:27:49:aa:e9:f8:2b:79:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:14:28 2026 GMT
            Not After : Apr 13 03:19:28 2027 GMT
        Subject: CN=3933D9665802AA9E4C6B636A976259F97975070C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:de:7c:3f:62:9a:d3:92:e8:f6:92:b7:bb:
                    41:11:27:23:35:1e:de:4a:5c:41:dd:76:57:e0:2f:
                    03:59:d9:48:b9:50:6d:d8:6d:9d:6c:ec:ec:cf:80:
                    02:b4:7a:a0:82:d0:76:c6:44:55:c1:83:85:b0:08:
                    58:2c:ba:32:a1:46:97:31:a3:5f:38:3d:ae:2f:05:
                    eb:49:e6:93:c8:cc:a5:0b:8d:07:d1:a7:05:9e:c6:
                    2f:5b:ae:a7:08:73:b6:44:cf:26:8e:a1:17:3d:9b:
                    cc:aa:11:c9:3d:ef:95:5c:b3:f1:b6:00:51:6f:3d:
                    73:20:77:87:da:49:b0:ef:0d:da:f3:f8:8f:d5:60:
                    0a:09:30:25:f9:01:0f:e4:4f:1f:3e:28:df:81:75:
                    a0:0f:24:a8:87:56:49:44:d0:0f:7d:83:4e:2d:aa:
                    8f:81:20:df:7e:3a:bb:be:ac:49:8a:56:3c:ff:ba:
                    1e:3a:65:a0:9b:ce:27:16:8d:fc:e6:33:2e:cc:62:
                    78:3e:65:c6:34:49:2c:d1:a1:16:12:27:cb:d1:ee:
                    6b:c0:a5:f1:65:ce:6b:aa:97:ce:0c:c0:0f:ba:39:
                    b4:44:d1:1e:49:38:47:94:d3:75:f9:cd:78:07:f2:
                    e1:aa:4c:5d:8c:2d:48:ca:ce:94:3a:4c:68:7f:cd:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:D9:66:58:02:AA:9E:4C:6B:63:6A:97:62:59:F9:79:75:07:0C
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e31362e302f32312d3231203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:15:18:dc:30:04:10:66:f1:a8:0a:0e:72:00:a6:67:54:
         dd:a2:c3:66:f0:33:15:23:bf:81:6b:3a:6e:21:a4:30:8e:5f:
         d6:34:74:54:33:81:f5:f8:ad:a7:3b:66:25:28:4d:4d:47:e8:
         ce:e0:f7:1d:05:9d:bb:52:18:db:ba:ad:6d:88:c8:14:00:ca:
         4b:67:23:5a:6c:a6:59:6a:17:77:15:37:aa:a7:75:bb:d5:c7:
         3b:0c:e3:6b:00:03:a1:c6:79:c9:d2:4d:1a:16:bc:39:14:82:
         d4:fb:d6:4b:c0:94:75:b8:2a:48:2f:69:a2:70:14:6e:b3:b2:
         9f:a3:4b:b3:28:6a:9a:22:cc:a4:1d:cf:bd:a4:23:78:24:fa:
         e6:8c:52:7c:5e:85:0f:5e:c6:af:f7:0f:4a:eb:8f:46:87:b2:
         a6:12:1d:2a:b3:be:a2:aa:9a:da:45:cc:a4:23:3b:b0:c9:88:
         d8:02:75:89:fd:70:cb:28:e3:95:01:e0:ed:1c:e9:40:8d:4b:
         e4:ec:57:f3:a8:83:ba:f7:72:9f:a9:2a:64:24:4e:7b:c6:6a:
         a3:1d:23:5a:74:cc:74:cf:e1:76:b9:9b:ff:70:36:f7:9a:cc:
         35:7d:26:f3:93:97:71:24:71:f6:6c:d4:53:89:62:7f:d7:a9:
         3f:81:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:28 2026 by rpki-client