Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231342e302f32342d3234203d3e203536303436.roa
File:                     3134342e34382e3231342e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          qqSa27Im/BSJVv9w3a7RHt0Tvuf7XVazU0hOt1H7Row=
Subject key identifier:   3B:FC:8A:5E:F1:26:E7:D8:7E:73:A0:13:03:28:4B:1A:0A:9C:E2:FA
Certificate issuer:       /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial:       68039730CE28FECC47FAADDC4A8A910266B23181
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231342e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 02:00:13 +0000
ROA not before:           Tue 14 Apr 2026 01:55:13 +0000
ROA not after:            Tue 13 Apr 2027 02:00:13 +0000
asID:                     56046
IP address blocks:        144.48.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:97:30:ce:28:fe:cc:47:fa:ad:dc:4a:8a:91:02:66:b2:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
        Validity
            Not Before: Apr 14 01:55:13 2026 GMT
            Not After : Apr 13 02:00:13 2027 GMT
        Subject: CN=3BFC8A5EF126E7D87E73A01303284B1A0A9CE2FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:95:d7:99:1a:83:a9:11:70:b7:f5:d9:3d:
                    db:cb:b2:29:78:37:a5:4f:f7:f8:c9:98:10:d6:37:
                    6d:62:2b:63:77:a3:4e:92:42:ef:f9:4b:31:0f:33:
                    81:64:de:14:2a:49:73:9c:02:b4:28:d9:85:4c:24:
                    d8:93:b6:53:3f:53:96:08:ea:31:15:d8:1d:4e:f8:
                    cf:f1:b3:3f:22:05:d1:c6:84:d4:1e:ab:53:f0:51:
                    91:dd:17:8d:19:6f:0f:81:6e:2b:c3:2b:69:97:6f:
                    1b:88:1b:68:da:e3:47:b6:03:41:73:5e:28:74:dd:
                    05:79:6a:fa:17:93:be:c2:bd:b8:ca:de:e4:52:9d:
                    30:73:c8:d2:65:46:83:6a:b2:06:4f:5a:31:f2:b3:
                    f7:4e:e2:db:96:6b:02:61:35:0c:8e:3c:ee:e3:b7:
                    17:b6:9d:4f:9f:d7:4b:12:ec:5c:5a:b7:98:02:1d:
                    a4:67:b3:81:7c:b9:85:a0:af:fe:e5:de:86:00:a7:
                    4c:5f:d7:a1:53:8a:36:4d:b1:ae:7a:27:75:19:20:
                    b6:41:25:a8:f4:7b:3f:af:a3:1d:19:87:91:9a:21:
                    68:34:18:d4:89:70:f4:6a:8a:42:f3:6b:8f:89:3f:
                    26:b3:1c:30:5e:e8:d5:bf:fa:b7:f0:ef:62:bb:7b:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FC:8A:5E:F1:26:E7:D8:7E:73:A0:13:03:28:4B:1A:0A:9C:E2:FA
            X509v3 Authority Key Identifier:
                keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231342e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4d:bd:cb:d4:fd:f6:59:50:e9:9e:da:9b:c7:23:95:19:31:
         5a:13:3f:20:d6:80:73:04:de:91:9c:fd:31:b7:1b:35:2a:ff:
         e5:f7:94:0b:99:27:07:38:e2:a3:78:d8:0c:e1:1f:a1:12:d4:
         38:53:c5:43:9a:83:a2:e8:4b:4d:81:76:cb:9e:80:47:e8:a6:
         4f:7d:4b:9b:8a:2b:14:d6:49:d4:7b:a4:42:84:aa:c7:a3:7d:
         5d:8b:31:a7:53:35:a6:23:e8:cc:d4:c5:2e:64:e1:15:af:46:
         6b:73:8b:0d:3d:90:57:61:cd:03:54:a2:16:84:24:d3:aa:cb:
         a7:bf:86:22:f3:dd:39:b6:e2:06:b9:95:c1:93:6d:62:1b:34:
         c7:7c:dd:26:2b:26:e3:b0:f1:6c:60:a2:35:c9:05:b7:98:f2:
         2a:4c:1d:5a:11:67:87:cd:bf:23:3a:f7:75:9f:dc:9f:dc:55:
         44:c8:45:50:87:0b:14:ed:55:83:4e:26:6d:54:a0:06:08:2c:
         70:da:60:a8:9d:9f:19:dc:1e:dc:e8:b6:bd:64:e6:c6:05:85:
         1a:65:e8:1c:f8:35:3d:54:41:f5:cd:20:a4:b8:12:fa:35:6d:
         ad:5b:3d:69:1b:fe:37:fc:1b:51:0c:66:f4:ae:65:74:95:0d:
         52:8a:11:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:11:25 2026 by rpki-client