Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e32382e302f32322d3232203d3e2030.roa
File:                     3131362e3139392e32382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          CvZdsttkg7wgLsyv4H5L/KwKf+RxjaMI1yHd+tYLGq4=
Subject key identifier:   6D:0A:92:00:76:98:D0:47:A0:8F:06:59:A1:1E:E6:49:29:96:ED:3D
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       70F684CF1525F7CFE4A98DF413C4EC5871CAC9A6
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e32382e302f32322d3232203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:19:28 +0000
ROA not before:           Tue 14 Apr 2026 03:14:28 +0000
ROA not after:            Tue 13 Apr 2027 03:19:28 +0000
asID:                     0
IP address blocks:        116.199.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f6:84:cf:15:25:f7:cf:e4:a9:8d:f4:13:c4:ec:58:71:ca:c9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:14:28 2026 GMT
            Not After : Apr 13 03:19:28 2027 GMT
        Subject: CN=6D0A92007698D047A08F0659A11EE6492996ED3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:de:30:fc:59:3a:f5:45:1f:b3:ba:38:f1:
                    c7:7d:9e:29:0f:f0:3c:76:e6:1f:50:06:80:23:f9:
                    44:4f:39:b1:c6:50:fc:31:0e:ff:2d:88:a8:f8:2e:
                    39:4f:e2:05:7b:c7:21:d4:7c:60:5e:02:a4:8b:56:
                    32:1a:f0:24:f6:0b:e5:30:a1:74:ad:a3:f7:c4:84:
                    7e:6d:9b:b1:93:b5:7e:df:5a:c1:ea:d5:a9:ad:2f:
                    d3:82:fa:45:96:97:ae:b0:2f:a4:b0:6b:f3:8b:6e:
                    e7:63:9e:2e:81:36:45:40:98:64:8b:0a:ce:2a:44:
                    57:7a:2c:32:6a:93:2c:e0:ea:40:e3:93:1a:36:89:
                    0b:c9:d4:8b:5d:87:21:d7:a4:9b:4e:28:ab:e3:95:
                    ad:d9:d0:d3:94:a4:ab:60:26:38:ff:ef:ce:c1:63:
                    56:6e:21:dd:be:52:c9:58:c1:e9:46:46:4d:4d:8c:
                    ad:20:51:51:24:74:92:3e:ad:58:82:89:10:56:63:
                    ac:9b:50:5c:ec:3b:0b:c0:41:40:0d:3e:43:6a:11:
                    55:d5:2a:4f:35:71:aa:c3:f7:2d:49:51:fc:43:87:
                    2f:d7:99:23:72:01:bc:4c:39:5d:83:d6:fb:c6:c7:
                    2c:f4:3e:42:3b:05:ef:7a:0f:a1:29:29:59:5c:ec:
                    25:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0A:92:00:76:98:D0:47:A0:8F:06:59:A1:1E:E6:49:29:96:ED:3D
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e32382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:be:bb:41:e4:cd:c7:9a:b1:12:74:17:ba:d4:a0:24:56:13:
         bf:da:86:5d:ba:74:8a:fc:c1:6b:7e:ca:71:33:4c:69:9a:5a:
         7d:c4:cb:9d:f8:3c:d0:e4:21:86:48:99:2d:32:83:94:5c:06:
         f0:a2:ff:30:f9:4e:69:43:36:e5:51:c5:90:45:ab:0c:9e:0a:
         02:b0:fa:5a:18:19:a3:f7:6e:4d:d9:27:53:37:27:3a:4d:54:
         37:4a:a0:b7:69:14:13:18:ed:65:27:04:f1:4c:31:8b:37:41:
         52:47:1d:0f:23:eb:21:89:78:43:dc:12:09:75:2c:1a:fc:83:
         4a:b6:14:97:a4:90:d6:28:68:21:6d:26:dd:a7:f4:e9:4f:58:
         c4:19:e6:b7:a3:cb:b5:5e:fc:eb:12:9a:c8:58:c6:3b:ee:7d:
         af:eb:b0:5d:77:d4:94:d7:b8:b0:c8:ef:e4:82:e5:cb:a2:d0:
         50:7f:e0:85:45:1a:8e:b6:bf:a2:1d:3d:89:eb:44:2d:03:72:
         a2:d0:c1:8a:17:0f:ad:2d:b5:47:1a:3a:ad:ef:05:d5:a9:4f:
         a7:d1:bb:54:7d:8f:6b:b9:ab:0c:e2:84:0e:f6:51:ae:40:29:
         ad:8e:fe:f8:7e:02:88:e1:d3:e7:f2:5b:4d:0a:8c:96:0b:b4:
         5a:3f:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:31 2026 by rpki-client