Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa
File:                     3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier:          tyBM/SOFRdhHTCCp2GB4IxuE/44b2EFF/nyyzPKH80k=
Subject key identifier:   0F:2B:92:75:D8:D5:55:CF:F4:EA:81:A0:FB:B8:97:47:61:74:33:5F
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       16862DE574EA1B0A19256B61846AB98633A4E6B2
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa
Signing time:             Wed 15 Apr 2026 08:02:32 +0000
ROA not before:           Wed 15 Apr 2026 07:57:32 +0000
ROA not after:            Wed 14 Apr 2027 08:02:32 +0000
asID:                     4808
IP address blocks:        114.112.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:86:2d:e5:74:ea:1b:0a:19:25:6b:61:84:6a:b9:86:33:a4:e6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:57:32 2026 GMT
            Not After : Apr 14 08:02:32 2027 GMT
        Subject: CN=0F2B9275D8D555CFF4EA81A0FBB897476174335F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:12:8a:7a:fb:ef:b2:d4:63:bf:68:c1:c7:
                    5b:82:e2:72:02:76:89:74:c0:78:09:ee:3c:55:22:
                    0e:f7:3f:dc:0a:e2:d5:27:d8:2f:62:99:d9:35:8f:
                    b8:ce:26:ed:1b:70:db:26:b2:3a:74:42:42:10:e7:
                    23:bd:a5:a4:4e:90:20:49:b8:35:21:9f:a1:32:4f:
                    b6:6f:d7:75:74:f8:23:49:ec:7b:df:8e:ff:ba:a3:
                    f8:ed:40:ca:1e:46:c3:44:98:57:19:e1:72:52:7e:
                    5b:91:6b:f1:ce:fb:63:25:06:8a:5d:c0:6c:ef:3c:
                    3a:e1:a7:7a:fc:7f:e7:e1:92:46:5b:87:1f:1f:00:
                    8e:c2:33:bf:93:df:d8:9a:73:e2:5e:c9:6b:d4:8c:
                    85:96:f1:bf:c5:46:3b:03:fd:d4:84:f0:ab:7b:cb:
                    2f:d4:d3:2b:4b:43:c0:a8:58:11:07:53:1c:b3:18:
                    d9:de:f7:4e:a3:39:6d:08:f1:d1:9f:91:27:c3:a2:
                    43:b6:ec:49:b3:58:33:1f:26:05:eb:15:b4:f9:5a:
                    d9:5f:9f:6d:4c:39:44:e9:d2:d7:e5:8f:53:d9:65:
                    18:3c:c6:ba:da:9a:ec:f9:81:79:42:8f:60:7e:bc:
                    e0:16:af:94:47:f4:a7:00:8d:72:0d:63:fd:fa:38:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2B:92:75:D8:D5:55:CF:F4:EA:81:A0:FB:B8:97:47:61:74:33:5F
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:92:bb:e6:64:6e:d8:41:bf:ca:0f:5f:22:75:ed:84:71:
         55:ba:58:f7:5e:99:16:c2:b5:56:bb:6a:70:83:76:40:58:ea:
         8a:f0:75:0a:1f:50:f6:bb:2b:4a:ca:f0:7f:5b:82:86:ff:24:
         df:3c:b7:98:96:86:54:fa:c3:4d:6a:c9:07:35:20:2b:27:b0:
         4f:9f:03:66:f9:67:59:d1:91:7c:c0:0c:8a:7b:4d:d8:5b:1d:
         54:43:e7:67:11:2c:b2:63:f9:56:f6:a8:f7:24:1d:de:91:c5:
         8e:fc:91:d4:96:c9:cc:88:7e:1c:3c:cf:b8:f2:18:c7:f5:ba:
         39:56:ef:5b:cd:df:a1:09:77:dd:d5:78:e4:4d:a4:3e:a3:7e:
         bd:65:6a:84:d2:87:e8:39:bc:c1:a8:72:eb:ba:e7:75:ed:5e:
         e9:f1:b8:09:67:6c:6c:af:20:e5:3c:d5:7c:65:8f:dd:b9:51:
         14:a3:19:63:aa:91:01:06:5d:3c:aa:83:38:89:b8:23:59:8e:
         2f:c0:d1:a2:9d:0a:a5:5b:7d:8f:aa:0d:20:ef:b3:7a:3b:52:
         08:2c:97:7f:64:49:25:62:7d:aa:6a:5e:49:85:cd:87:c6:ad:
         fd:7d:a8:f2:80:4b:df:d1:47:24:98:10:a3:25:6a:3f:62:b3:
         a5:8f:20:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:28 2026 by rpki-client