Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e33322e302f31392d3139203d3e2030.roa
File:                     3131392e33322e33322e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier:          KAv7JFmc2eAGqlJxLoglC7Fii2wBDkBK3jZ/Qb5tvM4=
Subject key identifier:   40:A5:60:E0:18:A9:5F:C6:9C:C1:DF:48:CF:96:E2:AC:4B:C2:AC:7E
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       7B1E424404678487F297D437756F0AF543649CF2
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e33322e302f31392d3139203d3e2030.roa
Signing time:             Tue 14 Apr 2026 03:22:34 +0000
ROA not before:           Tue 14 Apr 2026 03:17:34 +0000
ROA not after:            Tue 13 Apr 2027 03:22:34 +0000
asID:                     0
IP address blocks:        119.32.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1e:42:44:04:67:84:87:f2:97:d4:37:75:6f:0a:f5:43:64:9c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:17:34 2026 GMT
            Not After : Apr 13 03:22:34 2027 GMT
        Subject: CN=40A560E018A95FC69CC1DF48CF96E2AC4BC2AC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:d9:7e:fa:73:21:4c:49:4b:bb:e0:54:aa:
                    53:10:a6:3a:df:0a:39:e7:03:b1:a0:42:db:eb:46:
                    e0:64:7b:e1:14:31:17:e0:50:75:af:94:28:e0:fc:
                    2f:dd:1a:cd:e6:74:b7:4e:88:1a:ca:e0:75:ad:06:
                    a0:2d:84:82:57:97:0a:ff:a2:b6:58:ad:eb:a9:ed:
                    c0:8c:ba:39:ec:ef:9e:c1:fe:2d:8d:43:ad:5c:6a:
                    1a:06:a4:35:39:79:ac:30:ee:1c:f8:89:5e:6d:32:
                    8e:c2:1f:eb:4c:51:1c:87:b4:99:b8:a8:4b:ab:ef:
                    d2:1d:36:dd:5e:d8:47:df:ae:14:b2:b8:42:03:d2:
                    fe:a2:5f:5f:e3:6d:dd:a2:87:2d:98:59:62:83:1e:
                    c2:0b:ed:14:19:9a:b7:f4:59:8a:59:81:b2:77:d6:
                    c0:a3:e9:84:d4:d8:2c:2e:d7:ac:13:34:6f:51:39:
                    5f:29:b4:08:8b:1a:16:76:e9:02:7f:8c:87:cf:14:
                    bc:c9:de:d1:7e:f2:11:90:dc:4d:69:c1:47:67:63:
                    6f:14:4f:02:fa:23:45:a0:b4:8e:5b:25:3e:a0:e4:
                    56:3b:82:19:fd:2c:ce:81:8b:20:97:12:ba:5b:79:
                    36:95:a3:1e:3c:d8:32:e5:b7:fc:b2:13:46:43:5a:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A5:60:E0:18:A9:5F:C6:9C:C1:DF:48:CF:96:E2:AC:4B:C2:AC:7E
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e33322e302f31392d3139203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.32.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:b9:b0:bf:c7:8e:cc:83:44:ed:1f:fe:bc:f9:7a:ef:a3:5d:
         81:94:a4:70:33:9f:e5:9d:0a:dc:4c:30:17:72:71:ee:95:05:
         3c:a9:c5:b9:b7:22:66:0e:c4:ef:c6:bb:61:a8:36:bc:67:cb:
         8a:c9:16:d2:52:e7:3c:06:26:4a:88:4c:fc:8d:c6:e7:eb:c2:
         74:5f:4a:e2:c9:9e:44:9c:2e:41:c1:5e:5a:a7:d0:8e:99:42:
         b5:39:e4:ac:4a:aa:d1:14:ae:33:75:8e:bf:ae:94:67:16:f9:
         30:cd:d8:a9:06:00:ef:f2:c4:64:38:a8:35:3c:97:af:67:9e:
         ec:7d:7f:8c:33:f6:5f:69:6c:54:2c:cb:84:d4:53:2e:30:52:
         f1:3d:23:db:5f:28:f7:9e:35:00:13:08:27:e8:b6:01:e7:a2:
         5e:be:1e:51:c6:88:00:a5:64:f4:52:88:14:19:cc:09:19:94:
         7c:78:e3:a6:5e:65:c0:45:3c:2f:b9:14:3f:0b:2f:ea:c6:ab:
         c4:07:ee:61:cb:95:12:8c:91:ea:33:e6:dd:5e:c6:93:b6:f0:
         4c:71:ca:d9:2f:29:69:60:1c:9f:28:1f:da:75:d5:a1:d4:25:
         cf:08:4c:5d:82:af:8d:85:a1:c4:55:38:01:23:ae:f1:0e:54:
         a5:af:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:39 2026 by rpki-client