Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32312d3332203d3e2034383038.roa
File:                     3131342e3131322e39362e302f32312d3332203d3e2034383038.roa (raw, json)
Hash identifier:          jjutZHTXEoE9FAunlZGvhzQN6yPwPHr1ZGxKzXyadPI=
Subject key identifier:   A6:56:36:45:73:EC:35:B4:54:FF:9E:D5:7B:1B:1E:15:46:33:BD:0E
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       11800506108DE801FB953A00D5977EA2E556AC75
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32312d3332203d3e2034383038.roa
Signing time:             Wed 15 Apr 2026 08:02:04 +0000
ROA not before:           Wed 15 Apr 2026 07:57:04 +0000
ROA not after:            Wed 14 Apr 2027 08:02:04 +0000
asID:                     4808
IP address blocks:        114.112.96.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:80:05:06:10:8d:e8:01:fb:95:3a:00:d5:97:7e:a2:e5:56:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:57:04 2026 GMT
            Not After : Apr 14 08:02:04 2027 GMT
        Subject: CN=A656364573EC35B454FF9ED57B1B1E154633BD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:54:44:e0:7a:0f:37:96:cc:36:63:79:92:
                    53:2f:cd:23:44:27:61:88:04:83:9e:51:ff:0c:b5:
                    f2:d3:fe:0b:91:19:19:04:06:29:37:46:4a:ad:41:
                    20:8f:5f:eb:d5:7b:67:e0:6c:38:53:1f:dc:45:66:
                    23:b2:a8:f0:7c:86:dc:af:73:ae:e9:ac:bb:90:08:
                    ae:24:16:45:de:3a:65:aa:d4:41:d6:ce:80:e6:ab:
                    0c:d2:7d:d0:b4:65:ea:cc:45:d8:c5:f9:c2:8e:74:
                    12:fc:e0:db:ff:8f:a4:b8:bd:66:e7:9c:fb:d4:ce:
                    77:bb:ca:cf:07:30:71:bc:63:25:77:09:00:97:a2:
                    d5:7c:47:ea:f2:a6:d9:93:85:45:61:d5:e4:66:85:
                    74:d6:84:65:f4:ae:3f:74:2e:14:3d:d6:b0:8a:30:
                    4f:6b:52:d8:f2:7d:71:d0:31:69:96:5e:12:f6:49:
                    08:a3:f5:6a:6b:0c:c0:de:af:14:72:ae:c4:e1:f8:
                    b4:7e:ca:78:39:c1:bd:57:9e:bc:b0:2d:60:01:74:
                    d7:58:c5:d3:d1:48:2e:a3:7e:15:86:ee:c8:b2:98:
                    c1:57:07:66:02:f7:54:52:7a:d3:0b:ea:2a:5a:a8:
                    6a:86:68:bb:4f:44:c0:0f:b5:02:a9:19:b6:dc:66:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:36:45:73:EC:35:B4:54:FF:9E:D5:7B:1B:1E:15:46:33:BD:0E
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32312d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:0e:e0:c0:42:48:a1:8e:5e:39:8d:6e:a8:c4:7d:02:06:
         09:44:5d:3d:84:3d:eb:1b:68:ab:27:66:65:00:7a:50:6e:41:
         4f:a8:8c:c6:36:a9:ae:92:99:63:1a:fb:b5:b6:96:8f:e6:98:
         f2:cf:ca:0b:af:23:b3:cc:b5:86:42:30:8b:e5:2c:19:27:42:
         36:d2:a8:bb:c1:c5:df:11:90:2d:9b:f4:63:0f:a2:a3:5a:2e:
         e9:4b:2e:cd:40:41:f4:f3:23:5b:a6:db:72:72:b3:78:d2:cb:
         c8:31:dc:97:3b:5d:62:60:a0:4a:28:73:f7:0e:e2:48:4f:45:
         e3:88:23:83:97:96:e5:b4:4d:87:31:63:71:de:31:56:50:43:
         d0:b0:c1:ba:c6:df:c7:42:ce:7d:36:97:a5:35:37:d6:f7:09:
         24:11:7b:7d:88:f9:ae:2a:80:9f:44:21:b9:e9:09:62:35:49:
         52:42:19:f2:fb:f9:05:78:f7:30:e6:6c:7a:2c:f6:61:f0:61:
         8b:1c:f4:a6:aa:b1:e2:ef:1b:ff:d8:f1:89:f0:8f:fb:68:e3:
         2a:fe:25:5b:90:77:97:84:81:b4:1f:34:64:46:52:fa:e0:ac:
         b4:6e:c5:04:57:50:6e:73:f5:c9:64:a7:ca:0b:b0:62:2f:87:
         2a:2d:7e:01
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEYAFBhCN6AH7lToA1Zd+ouVWrHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA0MTUwNzU3MDRaFw0yNzA0MTQwODAyMDRaMDMxMTAvBgNV
BAMTKEE2NTYzNjQ1NzNFQzM1QjQ1NEZGOUVENTdCMUIxRTE1NDYzM0JEMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWIFRE4HoPN5bMNmN5klMvzSNE
J2GIBIOeUf8MtfLT/guRGRkEBik3RkqtQSCPX+vVe2fgbDhTH9xFZiOyqPB8htyv
c67prLuQCK4kFkXeOmWq1EHWzoDmqwzSfdC0ZerMRdjF+cKOdBL84Nv/j6S4vWbn
nPvUzne7ys8HMHG8YyV3CQCXotV8R+ryptmThUVh1eRmhXTWhGX0rj90LhQ91rCK
ME9rUtjyfXHQMWmWXhL2SQij9WprDMDerxRyrsTh+LR+yng5wb1XnrywLWABdNdY
xdPRSC6jfhWG7siymMFXB2YC91RSetML6ipaqGqGaLtPRMAPtQKpGbbcZnNpAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUplY2RXPsNbRU/57VexseFUYzvQ4wHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzEzMTM0MmUzMTMx
MzIyZTM5MzYyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3JwYDANBgkqhkiG9w0BAQsFAAOCAQEAp8cO4MBCSKGOXjmNbqjEfQIGCURd
PYQ96xtoqydmZQB6UG5BT6iMxjaprpKZYxr7tbaWj+aY8s/KC68js8y1hkIwi+Us
GSdCNtKou8HF3xGQLZv0Yw+io1ou6UsuzUBB9PMjW6bbcnKzeNLLyDHclztdYmCg
Sihz9w7iSE9F44gjg5eW5bRNhzFjcd4xVlBD0LDBusbfx0LOfTaXpTU31vcJJBF7
fYj5riqAn0QhuekJYjVJUkIZ8vv5BXj3MOZseiz2YfBhixz0pqqx4u8b/9jxifCP
+2jjKv4lW5B3l4SBtB80ZEZS+uCstG7FBFdQbnP1yWSnyguwYi+HKi1+AQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:11 2026 by rpki-client