Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137302e302f32332d3233203d3e203538383334.roa
File:                     3230322e3136382e3137302e302f32332d3233203d3e203538383334.roa (raw, json)
Hash identifier:          15gfNDAw1FG6BgpN0y4kgXWInBrQCc/0o6vjNpAjVpg=
Subject key identifier:   58:6C:BA:53:18:74:78:49:DE:0E:86:49:14:16:0E:2D:D2:68:FA:BE
Certificate issuer:       /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial:       1CF60994A60FA863448503E9DE487626926F762E
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137302e302f32332d3233203d3e203538383334.roa
Signing time:             Thu 16 Apr 2026 01:43:50 +0000
ROA not before:           Thu 16 Apr 2026 01:38:50 +0000
ROA not after:            Thu 15 Apr 2027 01:43:50 +0000
asID:                     58834
IP address blocks:        202.168.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f6:09:94:a6:0f:a8:63:44:85:03:e9:de:48:76:26:92:6f:76:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
        Validity
            Not Before: Apr 16 01:38:50 2026 GMT
            Not After : Apr 15 01:43:50 2027 GMT
        Subject: CN=586CBA5318747849DE0E864914160E2DD268FABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9e:cf:f4:77:f8:4e:d3:c5:65:3c:d7:d7:9b:
                    65:39:37:31:56:07:0a:d4:1c:6d:ad:07:9d:95:8d:
                    96:71:56:00:95:e0:27:7b:b8:b4:dd:3f:33:69:7d:
                    82:07:e5:4c:7c:5a:3a:76:18:c2:ec:30:62:f7:11:
                    34:be:a1:d9:89:6e:e5:8d:38:aa:ff:45:63:d2:5e:
                    47:4f:35:b5:02:cc:62:2e:8d:69:58:7e:6a:46:02:
                    06:bd:90:bc:99:4e:d5:63:78:9d:d3:b9:e9:72:6d:
                    b3:cc:a3:16:e6:3a:c9:a5:ae:f0:64:d3:93:89:88:
                    da:1c:54:be:51:99:97:ba:ae:a1:70:4c:c8:7c:92:
                    ea:62:3c:5b:4f:7e:49:62:4f:ee:bb:2b:c3:56:65:
                    7e:62:37:70:cb:4d:0f:73:d6:94:d3:4c:4e:75:0e:
                    37:33:7d:ed:c9:53:f6:be:05:5f:fa:5d:c2:5e:f8:
                    e4:71:31:72:c8:ba:0d:aa:3d:52:d2:83:a3:3f:47:
                    21:01:4e:f5:64:a1:9a:1c:3e:03:10:3b:5a:ff:f2:
                    81:b5:d5:07:03:10:e6:ae:da:7a:76:79:99:be:13:
                    74:36:ec:67:02:65:b9:f7:1f:93:77:29:ec:8b:1f:
                    69:73:a5:95:66:46:bb:b2:80:9b:dc:12:e0:df:ad:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:BA:53:18:74:78:49:DE:0E:86:49:14:16:0E:2D:D2:68:FA:BE
            X509v3 Authority Key Identifier:
                keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3137302e302f32332d3233203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:29:b6:94:9c:28:7c:7a:7f:cb:d7:e8:36:21:a2:a4:57:
         24:56:4a:9c:07:e9:e2:f4:5b:a8:f6:fd:a6:f3:fb:a5:3e:c3:
         7b:50:3b:1f:07:d1:79:d0:b2:7f:c0:57:e5:c3:47:00:b8:a6:
         2c:01:11:0c:51:af:9a:d7:10:a9:0d:e9:7e:5c:9a:cc:32:85:
         b3:00:21:ed:91:94:eb:22:d7:9f:59:03:bf:b2:3c:36:08:54:
         35:02:17:ff:9f:b8:51:9f:bf:01:6a:f3:86:ff:1f:8d:e9:98:
         fb:78:87:ad:ae:76:88:56:6b:8e:5d:f3:60:dc:94:a2:08:fb:
         70:0a:49:b4:57:9b:e5:50:8c:fa:c8:50:f8:6f:2a:92:3f:e8:
         ec:11:fa:fe:a1:74:69:f8:cc:21:3e:6d:b2:24:7e:8e:69:17:
         ce:92:fa:07:1f:70:98:4e:12:64:32:b0:d9:b5:dc:04:b1:dd:
         da:42:c7:74:16:03:ae:e0:9d:52:3b:8e:44:84:70:46:a4:34:
         b8:ee:f5:44:f6:ff:56:8d:f7:dd:66:b4:c1:17:07:09:2f:a7:
         3c:41:ce:48:d2:d0:90:b3:f4:15:3c:df:9e:48:12:33:2a:31:
         a0:52:c7:ec:ed:97:6e:5c:ba:17:da:70:26:0a:fb:8a:c3:d8:
         a4:ed:ca:4a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUHPYJlKYPqGNEhQPp3kh2JpJvdi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTYwMTM4NTBaFw0yNzA0MTUwMTQzNTBaMDMxMTAvBgNV
BAMTKDU4NkNCQTUzMTg3NDc4NDlERTBFODY0OTE0MTYwRTJERDI2OEZBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4ns/0d/hO08VlPNfXm2U5NzFW
BwrUHG2tB52VjZZxVgCV4Cd7uLTdPzNpfYIH5Ux8Wjp2GMLsMGL3ETS+odmJbuWN
OKr/RWPSXkdPNbUCzGIujWlYfmpGAga9kLyZTtVjeJ3TuelybbPMoxbmOsmlrvBk
05OJiNocVL5RmZe6rqFwTMh8kupiPFtPfkliT+67K8NWZX5iN3DLTQ9z1pTTTE51
Djczfe3JU/a+BV/6XcJe+ORxMXLIug2qPVLSg6M/RyEBTvVkoZocPgMQO1r/8oG1
1QcDEOau2np2eZm+E3Q27GcCZbn3H5N3KeyLH2lzpZVmRruygJvcEuDfrfUfAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUWGy6Uxh0eEneDoZJFBYOLdJo+r4wHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ1NTMzNDUvMC8zMjMwMzIyZTMx
MzYzODJlMzEzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzODM4MzMzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAcqoqjANBgkqhkiG9w0BAQsFAAOCAQEAS4sptpScKHx6f8vX6DYh
oqRXJFZKnAfp4vRbqPb9pvP7pT7De1A7HwfRedCyf8BX5cNHALimLAERDFGvmtcQ
qQ3pflyazDKFswAh7ZGU6yLXn1kDv7I8NghUNQIX/5+4UZ+/AWrzhv8fjemY+3iH
ra52iFZrjl3zYNyUogj7cApJtFeb5VCM+shQ+G8qkj/o7BH6/qF0afjMIT5tsiR+
jmkXzpL6Bx9wmE4SZDKw2bXcBLHd2kLHdBYDruCdUjuORIRwRqQ0uO71RPb/Vo33
3Wa0wRcHCS+nPEHOSNLQkLP0FTzfnkgSMyoxoFLH7O2Xbly6F9pwJgr7isPYpO3K
Sg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:19 2026 by rpki-client