Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e32342e302f32322d3232203d3e2030.roa
File:                     3131392e33322e32342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          woKIevESien57zGRsyh4mM19ToOB5Mtx7U48/f2RpcE=
Subject key identifier:   E2:65:75:1F:47:C7:25:F3:A7:1C:50:4D:EA:75:C9:08:F1:31:C4:83
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       6762A9F585913244A4E67108ED5149223C9A68E1
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e32342e302f32322d3232203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:22:33 +0000
ROA not before:           Tue 14 Apr 2026 03:17:33 +0000
ROA not after:            Tue 13 Apr 2027 03:22:33 +0000
asID:                     0
IP address blocks:        119.32.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:62:a9:f5:85:91:32:44:a4:e6:71:08:ed:51:49:22:3c:9a:68:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:17:33 2026 GMT
            Not After : Apr 13 03:22:33 2027 GMT
        Subject: CN=E265751F47C725F3A71C504DEA75C908F131C483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:90:1e:bc:93:c3:36:73:2c:d4:dd:f4:c2:
                    f9:45:9c:f1:0a:50:51:b4:69:65:e7:15:62:68:88:
                    b8:72:72:6b:13:c1:d7:92:57:09:af:e8:77:38:85:
                    1b:d1:ee:6f:9c:a6:be:66:1d:fc:82:9b:a3:b4:70:
                    6d:1e:d1:8e:80:41:be:4f:cf:bd:d4:8e:96:d1:97:
                    5d:24:6a:e5:eb:e0:34:f9:28:d5:75:76:b2:f3:62:
                    36:9e:8d:d0:e7:fc:d0:dd:bd:d2:ab:2a:dc:b4:cb:
                    53:fb:28:b1:ca:26:5e:2e:c2:f1:f1:db:50:58:75:
                    32:8c:3a:2e:97:53:c8:15:f6:b7:e6:21:23:1c:52:
                    88:93:4b:a9:3e:44:bc:a7:f7:ca:81:14:ac:b3:4d:
                    1c:b0:62:01:25:f8:aa:3e:95:ab:3e:93:c0:c1:35:
                    46:ca:a5:93:dd:90:76:b7:6e:62:92:36:ae:da:16:
                    11:3d:3d:70:67:4a:39:fc:c0:02:b6:fa:6f:fb:c5:
                    55:06:97:de:95:90:bc:8c:d6:fc:2c:fe:19:2f:fb:
                    cb:36:6d:98:e9:7f:5d:c9:85:97:c0:ba:54:45:c8:
                    62:25:40:df:2c:48:b8:4c:17:0e:97:51:ed:4d:8a:
                    8d:be:63:41:db:7f:cb:ed:be:5a:e5:20:7f:d8:a0:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:65:75:1F:47:C7:25:F3:A7:1C:50:4D:EA:75:C9:08:F1:31:C4:83
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e32342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.32.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:30:51:3e:d1:20:c5:1a:f5:e8:db:ac:c5:74:28:44:0a:d8:
         bc:88:a4:07:3e:ed:29:c6:03:a5:e8:51:b5:be:ac:29:22:06:
         76:14:0c:64:66:3d:29:ef:ac:35:72:be:9f:5f:fd:c1:db:e8:
         9f:66:29:8a:8d:2c:a7:72:94:e9:75:81:92:48:07:ef:8f:32:
         17:da:1f:e0:5c:09:ca:25:46:56:e2:da:7b:64:36:10:be:31:
         03:90:41:8d:a1:77:12:c2:cf:d1:38:46:a3:02:b8:cd:05:e2:
         13:d4:2d:b9:8d:12:97:c3:41:fd:15:40:ee:a0:69:8b:d9:22:
         5b:c9:d4:9f:02:16:0e:dc:f0:ad:17:ba:ed:e6:0d:f6:9e:36:
         c7:36:c2:ec:1b:6f:16:3d:59:05:6a:0c:8f:bc:83:1d:5f:ec:
         ad:79:7d:81:82:6c:f6:54:75:76:c9:73:f5:76:71:de:f5:16:
         08:c7:98:c8:82:b7:a4:0a:9a:2c:d6:40:c4:10:05:79:ea:41:
         64:fe:d1:4d:1f:45:d9:62:38:68:9b:74:e6:c6:70:a2:31:ee:
         77:ad:ef:ec:87:cb:c6:02:7a:e6:7e:13:37:94:17:b1:8c:ea:
         52:e8:f5:75:6b:5a:ab:8d:5d:d6:59:76:ce:22:53:f5:03:dc:
         f5:bc:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:48 2026 by rpki-client