Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e2034383038.roa
File:                     3131342e3131322e39362e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier:          2RKoWKxmYLtQAEKSW4aZgKv02IUP6uwd+uFOdd8yj/k=
Subject key identifier:   F1:A3:77:4A:18:79:80:17:E0:F2:FD:E5:63:48:78:66:50:C7:E0:89
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       6054176B798C579054C684B25B794CE91F36A6EF
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e2034383038.roa
Signing time:             Wed 15 Apr 2026 08:03:35 +0000
ROA not before:           Wed 15 Apr 2026 07:58:35 +0000
ROA not after:            Wed 14 Apr 2027 08:03:35 +0000
asID:                     4808
IP address blocks:        114.112.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:54:17:6b:79:8c:57:90:54:c6:84:b2:5b:79:4c:e9:1f:36:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:58:35 2026 GMT
            Not After : Apr 14 08:03:35 2027 GMT
        Subject: CN=F1A3774A18798017E0F2FDE56348786650C7E089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:7f:6e:44:53:74:fe:ec:27:fa:13:db:aa:
                    66:20:8f:b1:78:0d:f7:12:32:0d:d3:a6:06:d4:cb:
                    8d:b1:12:03:3a:e0:e5:3a:96:cc:ce:60:4c:ad:2e:
                    93:f6:2a:e0:81:c0:a4:f2:1d:c4:8d:73:4c:41:70:
                    08:84:9b:04:d7:74:c7:d4:d7:f8:14:31:22:a8:f7:
                    17:53:6a:92:95:c7:f1:44:b1:b2:3d:ab:2d:d2:95:
                    33:6e:79:d6:88:7f:f3:a1:dc:21:a4:0d:36:2c:f7:
                    1f:07:14:ed:83:cb:99:58:42:f2:1f:12:1c:df:65:
                    3a:38:07:8b:f2:09:9f:84:e8:17:4e:b7:bf:50:01:
                    a3:14:98:6c:24:bc:78:ec:76:ce:5e:7d:c1:1f:f8:
                    cf:52:b1:ce:31:45:36:83:69:82:21:5f:7b:f4:96:
                    33:f3:1a:c5:80:4b:ed:b0:63:30:7c:72:c3:f4:5a:
                    7f:29:17:ad:7a:75:fe:9f:24:05:2d:e6:7f:6d:df:
                    40:83:47:8c:28:73:e4:32:d0:3f:1b:66:61:77:ed:
                    96:5c:4e:b3:43:34:2f:51:80:54:82:a3:b0:8f:4b:
                    3c:0a:a3:0d:ba:a7:87:25:bf:12:34:52:43:6c:4e:
                    7e:76:b5:1b:a3:81:31:07:28:a2:c4:74:fb:0e:9e:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:77:4A:18:79:80:17:E0:F2:FD:E5:63:48:78:66:50:C7:E0:89
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:41:25:2a:a8:09:e0:f7:bf:21:0e:d9:61:4e:bd:a2:a6:e0:
         99:58:dc:c2:59:f8:92:6d:47:3d:c3:c3:35:0d:ac:7d:24:a9:
         8e:87:c9:05:79:1c:4a:8b:27:4c:4b:8a:d2:f1:16:58:37:e0:
         10:e8:4c:5a:d4:fd:d5:af:74:39:aa:6c:64:91:56:9b:e9:44:
         d4:d7:b7:5e:36:6b:ea:5a:d5:75:16:a7:03:9c:8f:bd:a9:6d:
         fb:d7:0a:fe:92:61:ed:8d:f3:dc:57:10:a8:44:75:f9:6a:f0:
         3e:0c:ad:06:4c:fb:3a:b7:d3:58:7c:71:93:0f:cc:fc:b4:99:
         5f:e1:f9:73:3a:d9:ae:c4:d9:f6:0d:f7:ce:f0:84:34:60:b1:
         37:11:44:ea:f8:89:1f:47:4c:df:81:1c:ed:3e:3e:cb:e3:59:
         72:b8:75:d5:04:8b:9d:22:0a:c4:b0:57:93:dd:a9:61:e1:5d:
         53:f2:80:f0:57:03:3d:06:ea:4d:16:c5:eb:05:13:14:4f:99:
         db:d1:39:77:a8:dd:f5:68:a0:5f:d2:bf:0b:fb:b1:69:3d:6f:
         7c:ef:cc:3d:2e:95:bf:34:35:c3:57:be:a2:f9:4a:27:14:f9:
         91:a1:5b:26:0d:b9:96:de:ce:77:7b:9c:50:52:31:66:94:32:
         e8:b4:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:20 2026 by rpki-client