Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e36322e302f32332d3233203d3e20313334373733.roa
File:                     3131362e3139392e36322e302f32332d3233203d3e20313334373733.roa (raw, json)
Hash identifier:          /RkkvctohB5Q9AHcaO6E22ayqN/8/NyQ+lkfSUcYvJU=
Subject key identifier:   C4:E8:FE:C5:2F:23:FA:CA:E1:0D:43:5A:03:B6:76:92:3B:89:29:B4
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       104427238317BD88A71A3381AAB15067F5CDA26C
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e36322e302f32332d3233203d3e20313334373733.roa
Signing time:             Tue 14 Apr 2026 03:19:28 +0000
ROA not before:           Tue 14 Apr 2026 03:14:28 +0000
ROA not after:            Tue 13 Apr 2027 03:19:28 +0000
asID:                     134773
IP address blocks:        116.199.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:44:27:23:83:17:bd:88:a7:1a:33:81:aa:b1:50:67:f5:cd:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:14:28 2026 GMT
            Not After : Apr 13 03:19:28 2027 GMT
        Subject: CN=C4E8FEC52F23FACAE10D435A03B676923B8929B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b9:e6:53:07:09:fb:ba:89:f2:4e:67:e6:b0:
                    75:e4:ef:70:26:c8:cb:5a:6a:1f:d5:a4:29:df:93:
                    b7:d7:64:c4:a8:8d:ea:65:4f:ca:21:97:8c:11:20:
                    3a:b4:8f:a4:e3:85:47:8b:75:5e:b1:91:67:b7:7c:
                    46:0d:6b:9c:51:75:05:a5:8e:f5:a1:18:58:cf:71:
                    d1:18:b5:1b:b9:02:63:8c:11:bf:1b:20:d1:17:f2:
                    d3:7e:d0:05:17:18:c9:10:b3:a2:cf:07:65:33:9f:
                    a2:92:5e:07:35:71:d6:ad:41:3d:7c:26:69:ed:b5:
                    0e:b2:b9:0a:00:6a:87:fc:9d:96:71:72:19:ab:72:
                    37:22:35:55:97:0a:1c:5a:08:c5:01:6a:20:39:8f:
                    02:e8:24:60:49:37:fb:90:ed:7d:fd:6b:d4:96:3e:
                    bb:22:70:2d:3d:26:77:d7:7d:8b:19:10:93:79:53:
                    c3:f8:9e:d9:05:07:36:1e:0a:02:e0:e9:c8:93:7a:
                    65:07:06:35:91:db:e3:93:57:0c:47:88:1a:66:cb:
                    16:2a:3b:b9:a3:95:d9:42:ab:15:e6:6e:da:d6:a6:
                    18:2d:9c:10:a4:1a:73:35:d4:ec:fd:23:c8:d4:c8:
                    a6:c1:95:c5:c1:ed:96:0c:0b:d4:8b:42:ce:2d:76:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E8:FE:C5:2F:23:FA:CA:E1:0D:43:5A:03:B6:76:92:3B:89:29:B4
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e36322e302f32332d3233203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:ef:d6:b3:9b:0c:90:22:2b:3e:01:c6:ce:74:da:e1:54:
         6c:9e:f3:a5:ed:8f:91:12:26:6d:25:a9:dc:54:28:85:90:e1:
         73:52:e4:fc:37:b5:8a:01:b6:ee:dd:08:25:b8:b7:6f:64:d2:
         33:48:e3:59:86:23:64:50:af:4c:0c:4c:03:c1:61:a0:af:d6:
         20:03:20:99:3f:1a:21:9e:52:57:73:33:55:c8:40:9f:7a:a4:
         45:f7:7d:c1:fe:99:46:45:b3:2f:b9:56:a6:ac:d4:45:e3:09:
         5c:16:37:68:36:cb:5a:26:77:f9:15:6a:dd:ff:a7:4f:5a:77:
         04:4d:5e:5c:f3:b3:b8:54:c6:03:d4:20:ef:a6:11:b8:4a:26:
         09:d8:84:c0:09:08:e6:75:00:d8:67:30:a8:d3:80:17:f0:17:
         2b:f5:e3:92:f0:5e:17:d7:1c:10:b2:62:57:69:33:6d:a6:91:
         a2:a7:c9:82:94:7e:5a:3b:84:1b:cc:8b:8d:af:d1:b5:ff:65:
         d0:70:df:11:4e:87:4d:c7:18:6b:e1:17:26:8e:af:e5:cb:fc:
         3c:ac:09:c6:a0:ca:3f:a7:28:13:51:9c:b0:3b:16:89:76:52:
         a8:39:5c:47:c6:cf:ae:0f:46:d2:27:24:a3:8c:ee:c8:c9:25:
         cb:2c:08:a0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUEEQnI4MXvYinGjOBqrFQZ/XNomwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTQwMzE0MjhaFw0yNzA0MTMwMzE5MjhaMDMxMTAvBgNV
BAMTKEM0RThGRUM1MkYyM0ZBQ0FFMTBENDM1QTAzQjY3NjkyM0I4OTI5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRueZTBwn7uonyTmfmsHXk73Am
yMtaah/VpCnfk7fXZMSojeplT8ohl4wRIDq0j6TjhUeLdV6xkWe3fEYNa5xRdQWl
jvWhGFjPcdEYtRu5AmOMEb8bINEX8tN+0AUXGMkQs6LPB2Uzn6KSXgc1cdatQT18
JmnttQ6yuQoAaof8nZZxchmrcjciNVWXChxaCMUBaiA5jwLoJGBJN/uQ7X39a9SW
PrsicC09JnfXfYsZEJN5U8P4ntkFBzYeCgLg6ciTemUHBjWR2+OTVwxHiBpmyxYq
O7mjldlCqxXmbtrWphgtnBCkGnM11Oz9I8jUyKbBlcXB7ZYMC9SLQs4tdtd5AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUxOj+xS8j+srhDUNaA7Z2kjuJKbQwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ1NTMzNDUvMC8zMTMxMzYyZTMx
MzkzOTJlMzYzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzczMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAXTHPjANBgkqhkiG9w0BAQsFAAOCAQEAj7/v1rObDJAiKz4Bxs50
2uFUbJ7zpe2PkRImbSWp3FQohZDhc1Lk/De1igG27t0IJbi3b2TSM0jjWYYjZFCv
TAxMA8FhoK/WIAMgmT8aIZ5SV3MzVchAn3qkRfd9wf6ZRkWzL7lWpqzUReMJXBY3
aDbLWiZ3+RVq3f+nT1p3BE1eXPOzuFTGA9Qg76YRuEomCdiEwAkI5nUA2GcwqNOA
F/AXK/XjkvBeF9ccELJiV2kzbaaRoqfJgpR+WjuEG8yLja/Rtf9l0HDfEU6HTccY
a+EXJo6v5cv8PKwJxqDKP6coE1GcsDsWiXZSqDlcR8bPrg9G0icko4zuyMklyywI
oA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:55 2026 by rpki-client