Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa
File:                     3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa (raw, json)
Hash identifier:          hL0wHDpBOYLjsYCGPCFPHEezrVtDUdtjjamEpq9zHYw=
Subject key identifier:   6F:8F:81:2E:CE:FB:88:80:13:64:8D:0A:B5:96:8B:C1:13:5C:6D:B9
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       5FCFB8B3340C5DFFA880C00B0FE175FA28EE68F9
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa
Signing time:             Wed 15 Apr 2026 07:52:39 +0000
ROA not before:           Wed 15 Apr 2026 07:47:39 +0000
ROA not after:            Wed 14 Apr 2027 07:52:39 +0000
asID:                     56048
IP address blocks:        114.112.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cf:b8:b3:34:0c:5d:ff:a8:80:c0:0b:0f:e1:75:fa:28:ee:68:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:47:39 2026 GMT
            Not After : Apr 14 07:52:39 2027 GMT
        Subject: CN=6F8F812ECEFB888013648D0AB5968BC1135C6DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:90:d1:d4:5d:dc:44:c7:1b:a9:21:b0:31:
                    f3:57:97:78:cd:c3:f9:23:61:9a:42:6c:e4:61:d0:
                    a9:e9:9e:30:a8:66:35:fa:64:29:3f:b7:e7:78:da:
                    7a:b6:92:b5:c8:ae:62:43:ce:91:b8:d6:e5:50:7e:
                    22:bf:42:84:71:3f:48:8c:c4:4d:91:ba:e0:65:2d:
                    bc:1c:a5:2b:3f:6c:73:e4:30:e7:e2:e4:89:d2:10:
                    07:2b:4a:cc:c3:88:9e:4a:1b:2a:20:08:ab:0f:3b:
                    5e:de:a5:ed:4b:d4:0e:be:cb:20:60:95:99:fa:11:
                    48:00:24:d8:fc:a3:36:8e:db:0a:15:f2:f4:a8:ea:
                    d4:b9:b3:7b:f9:9e:d9:bf:75:a9:f0:34:b5:8e:6a:
                    e8:95:0e:36:70:77:f6:29:32:9c:46:03:32:5d:98:
                    d8:96:7f:21:22:a1:79:50:8b:21:42:00:f4:81:5a:
                    9d:97:4e:a8:27:21:8d:06:16:8b:4f:b9:45:39:1e:
                    18:74:d1:b6:b2:a9:11:95:2b:e6:b8:44:57:47:0f:
                    b8:3e:1d:5e:00:32:ac:4a:24:e7:6a:db:6a:fa:8d:
                    a7:7c:84:e3:09:67:61:7f:79:87:1c:14:9c:62:f5:
                    ab:b8:b2:2d:0f:b9:4e:7b:e6:b9:8c:d3:38:78:da:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8F:81:2E:CE:FB:88:80:13:64:8D:0A:B5:96:8B:C1:13:5C:6D:B9
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e3130342e302f32322d3332203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:b6:4c:a1:80:d6:1b:55:44:73:4d:f4:5e:a3:35:69:75:
         67:43:a9:d3:1b:bd:58:c9:d8:81:5f:63:b0:8e:40:c7:6f:69:
         30:13:c9:64:50:39:48:5a:1b:1d:66:4d:25:3c:93:1f:3f:3d:
         37:cd:e6:5d:28:81:cf:c5:d0:33:cc:cd:07:90:8a:0d:24:c2:
         c8:42:88:b7:6e:a9:2a:cb:8a:36:3a:b3:c6:4c:79:a8:1c:2e:
         f7:d3:60:31:9d:2a:6b:aa:e0:40:6c:cd:0d:a6:0f:30:a3:bc:
         d2:8a:ff:df:88:19:22:fe:af:d7:fc:90:db:6a:04:37:c9:7f:
         65:fe:12:a6:62:83:fc:cd:bb:0e:92:79:1d:b3:4a:2d:e7:e4:
         04:ea:f4:e3:e1:a7:30:12:b6:c6:09:60:a4:df:61:b7:54:48:
         11:56:55:ab:0b:bd:f1:b4:c3:22:96:ad:23:22:f0:1a:81:76:
         d6:f7:1c:22:b2:4f:b6:61:a3:29:c2:83:4f:03:b9:e9:20:ac:
         bb:76:42:df:82:b1:38:d3:98:c2:81:44:24:ec:d9:4c:cf:87:
         e6:e0:ff:4a:5d:c0:fe:0d:e7:41:c0:c4:cf:23:5b:5b:f6:cf:
         fc:d1:64:e4:c5:eb:86:ef:7f:e7:42:53:56:25:87:ad:5f:a9:
         59:42:8c:f9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUX8+4szQMXf+ogMALD+F1+ijuaPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA0MTUwNzQ3MzlaFw0yNzA0MTQwNzUyMzlaMDMxMTAvBgNV
BAMTKDZGOEY4MTJFQ0VGQjg4ODAxMzY0OEQwQUI1OTY4QkMxMTM1QzZEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsh5DR1F3cRMcbqSGwMfNXl3jN
w/kjYZpCbORh0KnpnjCoZjX6ZCk/t+d42nq2krXIrmJDzpG41uVQfiK/QoRxP0iM
xE2RuuBlLbwcpSs/bHPkMOfi5InSEAcrSszDiJ5KGyogCKsPO17epe1L1A6+yyBg
lZn6EUgAJNj8ozaO2woV8vSo6tS5s3v5ntm/danwNLWOauiVDjZwd/YpMpxGAzJd
mNiWfyEioXlQiyFCAPSBWp2XTqgnIY0GFotPuUU5Hhh00bayqRGVK+a4RFdHD7g+
HV4AMqxKJOdq22r6jad8hOMJZ2F/eYccFJxi9au4si0PuU575rmM0zh42lVjAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUb4+BLs77iIATZI0KtZaLwRNcbbkwHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTU5ODQyOTQ3NjcwOTk5MDUvMC8zMTMxMzQyZTMx
MzEzMjJlMzEzMDM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzQzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAnJwaDANBgkqhkiG9w0BAQsFAAOCAQEALTG2TKGA1htVRHNN9F6j
NWl1Z0Op0xu9WMnYgV9jsI5Ax29pMBPJZFA5SFobHWZNJTyTHz89N83mXSiBz8XQ
M8zNB5CKDSTCyEKIt26pKsuKNjqzxkx5qBwu99NgMZ0qa6rgQGzNDaYPMKO80or/
34gZIv6v1/yQ22oEN8l/Zf4SpmKD/M27DpJ5HbNKLefkBOr04+GnMBK2xglgpN9h
t1RIEVZVqwu98bTDIpatIyLwGoF21vccIrJPtmGjKcKDTwO56SCsu3ZC34KxONOY
woFEJOzZTM+H5uD/Sl3A/g3nQcDEzyNbW/bP/NFk5MXrhu9/50JTViWHrV+pWUKM
+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:31 2026 by rpki-client