Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e203536303438.roa
File:                     3131342e3131322e39362e302f32322d3332203d3e203536303438.roa (raw, json)
Hash identifier:          Im+AHUjV8vaPKV8Bd685N6Il/JMxbozeQhy5a6kBVk0=
Subject key identifier:   0F:82:B1:9B:88:B3:D0:37:49:B4:E0:85:E0:0A:3B:41:66:34:83:47
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       249A2813640154E826FBB8297FCA6E7C78D26458
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e203536303438.roa
Signing time:             Wed 15 Apr 2026 07:51:35 +0000
ROA not before:           Wed 15 Apr 2026 07:46:35 +0000
ROA not after:            Wed 14 Apr 2027 07:51:35 +0000
asID:                     56048
IP address blocks:        114.112.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9a:28:13:64:01:54:e8:26:fb:b8:29:7f:ca:6e:7c:78:d2:64:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:46:35 2026 GMT
            Not After : Apr 14 07:51:35 2027 GMT
        Subject: CN=0F82B19B88B3D03749B4E085E00A3B4166348347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:b8:c4:e1:df:f5:56:e4:3a:f6:09:0b:57:
                    9a:cb:dd:15:57:a9:16:7c:2c:c0:5b:79:d3:f9:bf:
                    f0:9e:a4:26:06:42:79:9a:2d:b1:03:3c:5c:35:a2:
                    fb:de:d6:72:c4:af:1e:ba:51:d5:16:03:2e:e5:8f:
                    e9:18:f8:5c:f3:f8:67:95:69:98:a4:e0:a6:0c:80:
                    93:01:66:5c:07:35:bc:04:bc:5e:d5:30:01:4e:96:
                    3f:66:53:36:2d:93:d4:2b:1b:c4:75:66:57:7d:db:
                    a5:49:2c:d4:e4:af:f2:35:16:e2:4f:e2:5a:88:c1:
                    78:a4:c1:03:e5:fc:37:85:3c:49:41:c9:36:58:82:
                    20:0c:4d:c4:1b:c3:ac:f6:46:10:7c:f5:c0:a7:19:
                    1b:80:33:8f:e2:dd:6c:25:a5:40:f0:c7:d3:35:27:
                    c4:3d:91:5d:e6:a7:d7:06:ea:e6:1b:87:56:8e:47:
                    85:8c:11:f7:9b:30:48:2d:a9:68:3d:ec:44:c4:f3:
                    66:d4:a7:5e:99:de:27:ad:4b:da:b5:4a:e7:4a:4c:
                    61:d1:22:f5:5e:38:04:f4:6c:a3:a5:e0:a0:be:b2:
                    ba:c3:7f:a6:e8:71:3b:af:2a:fc:a1:fd:a3:07:25:
                    fa:0a:93:61:f0:14:15:bc:07:b3:f0:9b:d2:fa:69:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:B1:9B:88:B3:D0:37:49:B4:E0:85:E0:0A:3B:41:66:34:83:47
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3131342e3131322e39362e302f32322d3332203d3e203536303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.112.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:d7:5e:35:b6:62:24:a0:6b:76:26:fc:9c:27:b5:1b:ce:
         bc:32:e2:9c:9e:da:03:74:1d:5f:21:07:c8:c6:a8:d5:3a:dc:
         71:67:16:c1:57:ca:b0:a1:aa:57:26:b1:17:b8:0a:37:c8:1b:
         66:40:44:57:7d:98:e9:af:80:e1:b3:83:60:57:8f:b5:4e:88:
         6a:d7:31:32:7b:7c:c8:46:5d:37:ae:22:19:05:d8:57:88:51:
         c8:5e:6c:6a:97:cb:a0:0b:85:6d:9f:71:32:f4:62:76:46:7b:
         71:ac:bf:e8:e7:8a:bc:80:14:04:7d:ba:72:0b:98:ac:28:99:
         27:5d:36:77:1c:c2:b4:9c:4b:1d:4e:fd:8e:b3:db:ed:62:3e:
         a5:7d:ff:36:b1:a9:aa:0e:f7:a3:3f:95:3b:1d:0a:62:cf:94:
         ae:90:54:cf:7b:71:7c:2d:15:3c:a4:6d:42:eb:80:5f:b6:9d:
         c4:81:84:92:f4:67:86:76:9e:55:e4:0c:2f:4f:54:d3:ff:34:
         80:aa:9f:b1:7f:c1:e3:ef:15:75:d1:f5:c8:a2:e9:1c:b9:87:
         51:6e:a7:ed:4c:30:91:26:72:7a:52:d2:91:e6:6a:26:3b:e9:
         ad:34:f6:d2:46:c0:52:64:26:b5:fe:99:60:54:56:57:e7:01:
         9a:44:f9:b0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJJooE2QBVOgm+7gpf8pufHjSZFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA0MTUwNzQ2MzVaFw0yNzA0MTQwNzUxMzVaMDMxMTAvBgNV
BAMTKDBGODJCMTlCODhCM0QwMzc0OUI0RTA4NUUwMEEzQjQxNjYzNDgzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBLjE4d/1VuQ69gkLV5rL3RVX
qRZ8LMBbedP5v/CepCYGQnmaLbEDPFw1ovve1nLErx66UdUWAy7lj+kY+Fzz+GeV
aZik4KYMgJMBZlwHNbwEvF7VMAFOlj9mUzYtk9QrG8R1Zld926VJLNTkr/I1FuJP
4lqIwXikwQPl/DeFPElByTZYgiAMTcQbw6z2RhB89cCnGRuAM4/i3WwlpUDwx9M1
J8Q9kV3mp9cG6uYbh1aOR4WMEfebMEgtqWg97ETE82bUp16Z3ietS9q1SudKTGHR
IvVeOAT0bKOl4KC+srrDf6bocTuvKvyh/aMHJfoKk2HwFBW8B7Pwm9L6aSE9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUD4Kxm4iz0DdJtOCF4Ao7QWY0g0cwHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzMxMzEzNDJlMzEz
MTMyMmUzOTM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzQzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAnJwYDANBgkqhkiG9w0BAQsFAAOCAQEAb+LXXjW2YiSga3Ym/JwntRvO
vDLinJ7aA3QdXyEHyMao1TrccWcWwVfKsKGqVyaxF7gKN8gbZkBEV32Y6a+A4bOD
YFePtU6IatcxMnt8yEZdN64iGQXYV4hRyF5sapfLoAuFbZ9xMvRidkZ7cay/6OeK
vIAUBH26cguYrCiZJ102dxzCtJxLHU79jrPb7WI+pX3/NrGpqg73oz+VOx0KYs+U
rpBUz3txfC0VPKRtQuuAX7adxIGEkvRnhnaeVeQML09U0/80gKqfsX/B4+8VddH1
yKLpHLmHUW6n7UwwkSZyelLSkeZqJjvprTT20kbAUmQmtf6ZYFRWV+cBmkT5sA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:06 2026 by rpki-client