Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e382e302f32312d3231203d3e20313334373733.roa
File:                     3131392e33322e382e302f32312d3231203d3e20313334373733.roa (raw, json)
Hash identifier:          EEfxf0kg5+fTpLLfIkKQ9G1K3El6k7G3QEVAiANogc0=
Subject key identifier:   5F:39:99:4F:21:72:38:88:10:3E:A0:E7:1C:B6:A3:5F:98:DE:10:19
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       4F7E71B4C26D342A2C4312478A6FC0760C102FFD
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e382e302f32312d3231203d3e20313334373733.roa
Signing time:             Tue 14 Apr 2026 03:22:34 +0000
ROA not before:           Tue 14 Apr 2026 03:17:34 +0000
ROA not after:            Tue 13 Apr 2027 03:22:34 +0000
asID:                     134773
IP address blocks:        119.32.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7e:71:b4:c2:6d:34:2a:2c:43:12:47:8a:6f:c0:76:0c:10:2f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 14 03:17:34 2026 GMT
            Not After : Apr 13 03:22:34 2027 GMT
        Subject: CN=5F39994F21723888103EA0E71CB6A35F98DE1019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:20:bd:0e:d4:23:da:91:e7:cb:0e:5c:71:
                    4b:34:42:29:98:39:06:f8:9a:a2:b0:b4:56:fc:c7:
                    e6:87:2f:65:11:58:02:85:e2:a8:d1:61:92:ac:72:
                    1d:8f:b3:23:07:42:02:00:26:6a:d7:03:2d:57:61:
                    85:8a:8e:8a:f2:3b:ac:39:05:3e:1a:b4:ff:16:89:
                    88:75:ff:d3:99:b0:ee:5f:84:9b:54:43:bf:e6:3f:
                    dc:73:29:82:47:56:6c:cf:d4:18:d0:03:3b:8b:cb:
                    cf:05:a3:02:f7:a5:12:db:8e:af:9a:2b:7a:7f:e0:
                    ed:a2:cf:da:77:19:04:4a:69:e8:c6:e5:86:ff:99:
                    a7:7e:4c:60:08:80:13:7a:0b:33:9e:8c:d6:ac:f8:
                    05:a2:b7:9c:08:59:ac:f9:e6:a4:08:7d:f8:7a:6a:
                    5d:c7:a4:96:ab:39:c9:d0:a0:17:36:92:06:d1:54:
                    bd:0f:e0:6f:6d:ac:00:8a:51:30:8f:f4:73:e0:c2:
                    ca:ef:80:72:75:a1:d4:ba:28:61:2e:44:98:d5:ec:
                    75:41:64:ab:74:1c:63:01:f9:40:0b:84:6e:0d:f8:
                    13:c1:34:f0:a9:2a:17:10:aa:5f:05:27:05:13:99:
                    b6:ea:26:ca:a3:e4:44:72:6b:83:82:dd:c6:08:dc:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:39:99:4F:21:72:38:88:10:3E:A0:E7:1C:B6:A3:5F:98:DE:10:19
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e382e302f32312d3231203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.32.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:87:91:56:6e:97:7a:9e:5c:88:19:b2:53:ec:38:ad:34:e7:
         14:07:97:00:c2:07:75:d2:ed:77:f0:ef:b2:cf:ae:af:f6:78:
         4c:cc:e2:5d:b7:3a:b2:58:23:1f:d0:d0:7b:d2:b6:f0:e8:b3:
         a5:d9:7e:e0:4a:d0:7c:40:5d:6a:0a:7b:af:2e:d8:ed:bd:b3:
         7c:5c:8c:e4:6f:48:a6:02:d5:43:b2:fe:cd:e0:93:7a:96:e5:
         b6:37:ec:49:54:e2:14:33:87:ca:e5:e4:09:3f:27:22:ed:a9:
         39:e9:32:ff:c6:39:a3:20:35:14:82:0f:0c:ca:a1:4e:a2:7d:
         7d:9f:72:43:d6:9f:f7:a2:51:be:71:a1:38:8d:65:69:fc:c3:
         31:8b:eb:22:cf:6f:6b:c4:f9:d3:5f:b3:5c:b9:1a:ec:8f:4f:
         1b:f6:bf:f0:0b:31:99:39:b1:1f:44:bb:6c:a5:2f:ad:b7:cf:
         d0:86:d1:3b:d3:34:b3:44:dc:6f:75:8a:be:50:27:e6:6b:34:
         e7:78:c2:f2:5c:79:e0:1b:dc:e5:c0:1a:59:4e:96:e5:03:e2:
         3a:fc:02:77:56:30:24:6c:a9:c7:6b:b5:b9:72:63:c3:b6:b3:
         65:c3:cf:4a:c5:e0:0c:bc:5a:bf:64:b2:03:5a:3d:ff:46:12:
         a5:33:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:36 2026 by rpki-client