Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e31362e302f32312d3231203d3e2030.roa
File:                     3131392e33322e31362e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier:          XQw8KHjrmsKPfYGSh/ukvQnmjVX6PK4l42yQBXpTqYg=
Subject key identifier:   17:1B:AB:4D:1F:45:8E:3A:D9:BC:BF:C8:A5:48:5E:77:90:3A:12:B1
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       5B3E90EF55D1E72529D7FEFF7F32F30C2EFC34B4
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e31362e302f32312d3231203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:22:33 +0000
ROA not before:           Tue 14 Apr 2026 03:17:33 +0000
ROA not after:            Tue 13 Apr 2027 03:22:33 +0000
asID:                     0
IP address blocks:        119.32.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3e:90:ef:55:d1:e7:25:29:d7:fe:ff:7f:32:f3:0c:2e:fc:34:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:17:33 2026 GMT
            Not After : Apr 13 03:22:33 2027 GMT
        Subject: CN=171BAB4D1F458E3AD9BCBFC8A5485E77903A12B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:5f:52:5a:5b:cf:ac:ef:bc:35:99:44:b9:
                    e2:9a:72:64:42:1f:55:e0:0f:77:a2:3e:80:46:9a:
                    75:8a:e1:8a:bc:57:47:8d:1d:1c:99:c3:cd:ee:d5:
                    5c:51:97:c9:09:06:60:56:c2:84:f2:c7:c5:dc:fb:
                    74:7c:3d:35:2f:3a:b6:76:d3:e6:f7:ee:f6:56:30:
                    9b:a3:bc:55:45:5e:90:41:fe:e4:27:f5:9b:d2:35:
                    86:41:a1:a0:9a:0f:c9:af:fb:e1:4d:03:6a:2b:0d:
                    e4:00:8d:21:cf:76:21:d6:1a:71:46:3d:59:62:4c:
                    20:91:9c:ba:6b:a6:c9:ba:de:76:7e:0c:7c:2d:70:
                    eb:8e:0c:bd:81:97:2d:26:25:3b:71:1a:44:64:91:
                    02:c2:ea:30:02:98:51:f6:ee:29:ab:7e:93:a2:01:
                    59:12:c5:b6:49:95:cf:a8:f0:56:69:4d:89:58:94:
                    1c:e1:e2:b8:af:3e:c0:a9:2b:3c:2d:e0:ed:5a:fb:
                    ca:fa:c3:22:ee:cb:21:10:e0:c7:83:b4:0e:3a:2f:
                    3b:d1:ef:03:f7:f8:4d:26:69:77:bf:92:02:25:9c:
                    34:c3:c1:69:49:7c:7a:59:60:1e:c7:64:d7:5a:75:
                    f1:a2:9e:e4:32:08:43:77:9e:2a:4f:32:24:e4:6b:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1B:AB:4D:1F:45:8E:3A:D9:BC:BF:C8:A5:48:5E:77:90:3A:12:B1
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e31362e302f32312d3231203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.32.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:77:f6:32:b2:fb:bb:3b:46:0e:20:f7:8d:d0:39:b1:89:50:
         4e:65:d1:70:dd:66:9a:7b:8c:4d:dd:64:ad:88:62:b4:f9:6a:
         ec:a1:c1:7d:79:c4:b8:22:db:5e:14:bd:0c:c9:19:46:87:4b:
         d2:3a:2a:6b:4f:e2:59:7a:02:ea:b9:81:0f:54:d8:42:30:f9:
         93:f9:6e:f8:2e:92:78:b6:d5:66:76:16:85:68:2d:55:66:a9:
         87:a5:6e:8e:6b:82:17:10:60:f3:c6:31:53:74:26:84:6e:ef:
         1a:f2:66:84:ed:74:d4:29:61:74:7b:31:81:b3:33:63:06:7b:
         90:ca:08:3b:37:f4:83:ca:a6:15:87:89:dd:7e:e7:b2:f4:04:
         1f:b2:42:7e:a3:43:8c:11:fa:04:81:bf:52:7f:55:cb:35:e9:
         44:4b:81:9c:e2:03:6d:5a:28:c1:9e:67:07:4e:2d:fd:c8:9b:
         76:e7:fc:d2:6e:40:9a:12:49:2a:d6:82:dc:fd:0e:9b:71:dd:
         67:04:73:ee:6f:b3:e4:58:be:4b:d7:c7:b0:ae:27:87:0b:47:
         f9:0d:db:4f:01:1d:da:a9:7b:98:e9:7a:66:ae:d4:65:fe:6d:
         55:77:2c:ff:00:a0:51:95:32:09:c0:8c:1e:7b:88:88:da:c0:
         86:8b:03:c3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUWz6Q71XR5yUp1/7/fzLzDC78NLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTQwMzE3MzNaFw0yNzA0MTMwMzIyMzNaMDMxMTAvBgNV
BAMTKDE3MUJBQjREMUY0NThFM0FEOUJDQkZDOEE1NDg1RTc3OTAzQTEyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2R19SWlvPrO+8NZlEueKacmRC
H1XgD3eiPoBGmnWK4Yq8V0eNHRyZw83u1VxRl8kJBmBWwoTyx8Xc+3R8PTUvOrZ2
0+b37vZWMJujvFVFXpBB/uQn9ZvSNYZBoaCaD8mv++FNA2orDeQAjSHPdiHWGnFG
PVliTCCRnLprpsm63nZ+DHwtcOuODL2Bly0mJTtxGkRkkQLC6jACmFH27imrfpOi
AVkSxbZJlc+o8FZpTYlYlBzh4rivPsCpKzwt4O1a+8r6wyLuyyEQ4MeDtA46LzvR
7wP3+E0maXe/kgIlnDTDwWlJfHpZYB7HZNdadfGinuQyCEN3nipPMiTka/grAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUFxurTR9FjjrZvL/IpUhed5A6ErEwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMTM5MmUzMzMy
MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN3IBAw
DQYJKoZIhvcNAQELBQADggEBAFZ39jKy+7s7Rg4g943QObGJUE5l0XDdZpp7jE3d
ZK2IYrT5auyhwX15xLgi214UvQzJGUaHS9I6KmtP4ll6Auq5gQ9U2EIw+ZP5bvgu
kni21WZ2FoVoLVVmqYelbo5rghcQYPPGMVN0JoRu7xryZoTtdNQpYXR7MYGzM2MG
e5DKCDs39IPKphWHid1+57L0BB+yQn6jQ4wR+gSBv1J/Vcs16URLgZziA21aKMGe
ZwdOLf3Im3bn/NJuQJoSSSrWgtz9Dptx3WcEc+5vs+RYvkvXx7CuJ4cLR/kN208B
Hdqpe5jpemau1GX+bVV3LP8AoFGVMgnAjB57iIjawIaLA8M=
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:41 2026 by rpki-client