Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130362e31342e302e302f31352d3234203d3e203337393633.roa
File:                     3130362e31342e302e302f31352d3234203d3e203337393633.roa (raw, json)
Hash identifier:          X9B3G/0KPD2nenQ2JO1Gt14x3vOlzC4plr3DaVVr8hY=
Subject key identifier:   83:0A:97:9B:D2:F3:6C:CF:20:CC:87:04:33:20:58:14:DD:65:09:8F
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       7558693CD8C355CB0442FD30BF4AE747BA94EBBF
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130362e31342e302e302f31352d3234203d3e203337393633.roa
Signing time:             Fri 17 Apr 2026 02:34:07 +0000
ROA not before:           Fri 17 Apr 2026 02:29:07 +0000
ROA not after:            Fri 16 Apr 2027 02:34:07 +0000
asID:                     37963
IP address blocks:        106.14.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:58:69:3c:d8:c3:55:cb:04:42:fd:30:bf:4a:e7:47:ba:94:eb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: Apr 17 02:29:07 2026 GMT
            Not After : Apr 16 02:34:07 2027 GMT
        Subject: CN=830A979BD2F36CCF20CC870433205814DD65098F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:4f:30:24:3e:89:e9:ec:91:93:45:68:1d:
                    9d:27:6b:77:ca:d5:98:1f:79:af:fb:b0:e5:c7:fa:
                    a4:d3:b0:b7:87:d5:7e:33:36:92:95:90:ab:93:ee:
                    88:d8:b4:0c:43:8c:dc:56:f4:71:c1:64:15:19:6c:
                    bd:d9:e3:cb:c6:43:7c:1e:dd:44:3c:71:b2:b6:02:
                    3a:ad:80:46:94:e9:9d:9a:15:86:ef:12:fd:ca:1f:
                    dc:1b:0e:41:a2:73:84:7c:3a:ed:3d:20:95:27:65:
                    cc:0a:1b:48:25:43:df:0b:92:84:be:ae:2e:03:76:
                    c7:fd:df:67:0d:07:20:1c:95:c6:08:50:18:7d:af:
                    3a:af:21:1d:53:12:29:c5:67:4e:c2:e5:6d:06:b7:
                    52:c3:ea:b4:9d:a2:fe:a2:9e:d4:97:97:c7:46:29:
                    da:80:24:5f:29:ee:dd:17:6a:f5:76:54:9f:48:88:
                    50:b0:82:d0:e1:1f:31:84:3a:2a:0e:c5:e1:12:18:
                    17:fb:0d:f9:f5:75:a7:f3:e1:94:b3:07:e1:fe:36:
                    b6:8f:55:1f:ea:19:75:50:6b:62:59:3a:81:09:c4:
                    6d:66:b8:79:c4:66:c3:79:b0:64:74:a4:58:ff:64:
                    79:f4:77:1c:c7:09:aa:80:cb:ef:bf:10:16:0e:40:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:97:9B:D2:F3:6C:CF:20:CC:87:04:33:20:58:14:DD:65:09:8F
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130362e31342e302e302f31352d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.14.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:d6:59:9b:c8:2a:81:42:ff:4c:b1:ef:ac:be:a3:0c:a8:
         55:95:bf:92:88:ae:61:e8:1d:6a:2a:c8:e5:2b:42:67:65:9f:
         b9:89:95:4f:90:0e:a4:77:56:18:9a:38:61:e4:88:09:c2:6e:
         bc:22:27:78:62:82:bd:d3:a5:15:0f:c1:78:00:39:8f:f4:af:
         39:fc:39:7b:f0:b7:11:0a:0c:a3:74:f1:87:f8:51:ab:8f:d5:
         1d:d3:0c:84:bf:a7:1f:5e:e9:e3:05:b8:b4:37:1d:ca:48:18:
         81:65:fe:60:4b:65:c1:77:13:25:08:69:c1:bf:cb:26:5c:cb:
         b5:a7:86:61:a3:f4:b5:37:a3:60:7d:89:4d:cb:f1:84:88:5f:
         aa:3a:ef:ac:cc:9d:2a:ec:06:14:27:c9:f5:a0:23:5b:52:fe:
         45:40:61:c6:47:45:32:e4:1e:0c:c7:ef:8a:aa:c1:ec:5f:f4:
         b5:36:af:9e:15:e9:84:1d:6b:54:84:2f:05:1b:b3:3f:41:5f:
         a6:8b:fa:5a:04:28:25:8b:29:ad:d3:23:85:a5:4f:ba:78:c3:
         71:23:10:ee:7f:8e:db:2b:7f:1d:12:d5:c9:98:f5:1d:fa:c3:
         38:88:89:e9:bc:82:1e:05:f0:4f:34:85:a8:73:62:74:f6:21:
         5b:45:49:35
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUdVhpPNjDVcsEQv0wv0rnR7qU678wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjA0MTcwMjI5MDdaFw0yNzA0MTYwMjM0MDdaMDMxMTAvBgNV
BAMTKDgzMEE5NzlCRDJGMzZDQ0YyMENDODcwNDMzMjA1ODE0REQ2NTA5OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYO08wJD6J6eyRk0VoHZ0na3fK
1Zgfea/7sOXH+qTTsLeH1X4zNpKVkKuT7ojYtAxDjNxW9HHBZBUZbL3Z48vGQ3we
3UQ8cbK2AjqtgEaU6Z2aFYbvEv3KH9wbDkGic4R8Ou09IJUnZcwKG0glQ98LkoS+
ri4Ddsf932cNByAclcYIUBh9rzqvIR1TEinFZ07C5W0Gt1LD6rSdov6intSXl8dG
KdqAJF8p7t0XavV2VJ9IiFCwgtDhHzGEOioOxeESGBf7Dfn1dafz4ZSzB+H+NraP
VR/qGXVQa2JZOoEJxG1muHnEZsN5sGR0pFj/ZHn0dxzHCaqAy++/EBYOQAXzAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUgwqXm9LzbM8gzIcEMyBYFN1lCY8wHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMDM2MmUzMTM0
MmUzMDJlMzAyZjMxMzUyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwFqDjANBgkqhkiG9w0BAQsFAAOCAQEAibDWWZvIKoFC/0yx76y+owyoVZW/koiu
YegdairI5StCZ2WfuYmVT5AOpHdWGJo4YeSICcJuvCIneGKCvdOlFQ/BeAA5j/Sv
Ofw5e/C3EQoMo3Txh/hRq4/VHdMMhL+nH17p4wW4tDcdykgYgWX+YEtlwXcTJQhp
wb/LJlzLtaeGYaP0tTejYH2JTcvxhIhfqjrvrMydKuwGFCfJ9aAjW1L+RUBhxkdF
MuQeDMfviqrB7F/0tTavnhXphB1rVIQvBRuzP0Ffpov6WgQoJYsprdMjhaVPunjD
cSMQ7n+O2yt/HRLVyZj1HfrDOIiJ6byCHgXwTzSFqHNidPYhW0VJNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:40:04 2026 by rpki-client