Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e203536303436.roa
File:                     3131342e3131342e302e302f31382d3234203d3e203536303436.roa (raw, json)
Hash identifier:          wyOP2OkcK0RyKhtQQ5BY1J2XPn5SwDwaHoFghxO5Lgo=
Subject key identifier:   C6:F2:22:96:84:9E:02:24:DA:AA:6C:62:0E:82:4D:56:29:6F:A8:AB
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       6AD1FA109FD2570F522BB85842E4D14576FC4D27
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e203536303436.roa
Signing time:             Thu 16 Apr 2026 00:17:40 +0000
ROA not before:           Thu 16 Apr 2026 00:12:40 +0000
ROA not after:            Thu 15 Apr 2027 00:17:40 +0000
asID:                     56046
IP address blocks:        114.114.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d1:fa:10:9f:d2:57:0f:52:2b:b8:58:42:e4:d1:45:76:fc:4d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Apr 16 00:12:40 2026 GMT
            Not After : Apr 15 00:17:40 2027 GMT
        Subject: CN=C6F22296849E0224DAAA6C620E824D56296FA8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:65:2f:6d:78:55:cf:a2:24:5a:3a:43:a8:
                    d8:7f:62:85:1a:26:f7:f3:01:f1:f2:04:b0:5c:27:
                    b7:14:94:c8:a0:ca:70:61:88:dd:63:74:82:5b:1b:
                    45:50:30:e9:fb:95:c6:21:02:7f:39:72:c0:f5:76:
                    06:15:87:c3:f7:35:ae:3a:19:60:42:7d:5a:b0:94:
                    0f:cf:fa:1e:3f:be:10:83:ab:1b:60:cc:5e:20:69:
                    7d:a3:1b:9c:a5:2d:5a:3f:21:b7:27:a9:e8:b6:8d:
                    5c:a2:43:36:3e:02:11:97:c0:8f:19:76:80:75:d5:
                    e5:40:b9:2f:f0:3a:5a:f0:34:46:70:a0:c7:14:4f:
                    0f:1b:7e:b3:66:47:75:2d:27:67:64:6c:b0:3d:da:
                    52:25:e9:1e:b9:21:a6:05:14:fb:79:0d:4f:b0:3b:
                    d3:6e:98:a1:54:53:4c:09:38:04:42:8c:c9:4a:24:
                    dc:cf:7a:01:f8:5d:1e:87:12:2a:7c:11:3d:b1:56:
                    3a:34:87:29:a7:18:f3:72:de:d9:5b:1c:2f:a2:ab:
                    11:79:55:e2:06:15:04:b3:1b:8e:17:22:89:f7:c3:
                    cb:2a:b1:2c:de:03:f4:51:68:a2:ff:96:20:c9:0d:
                    4f:16:d8:dd:24:79:1d:fa:1b:d5:2c:c4:b8:c9:b4:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:22:96:84:9E:02:24:DA:AA:6C:62:0E:82:4D:56:29:6F:A8:AB
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e302e302f31382d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.114.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         e0:39:21:ef:59:80:1c:6e:d0:dd:e6:0b:29:8d:d0:b6:04:85:
         8f:ba:e2:fc:0f:4c:ae:ab:ca:c7:71:01:50:ef:26:c2:c6:f4:
         98:1d:69:09:0f:77:fd:36:82:73:12:61:48:d5:38:b5:11:f7:
         4b:ce:84:c4:9a:0a:53:dc:ba:f0:11:01:48:b9:54:54:ba:f7:
         aa:1f:80:89:68:3a:e5:1c:63:2b:fc:d9:53:67:6d:02:6d:07:
         d6:14:0d:75:bc:47:43:a8:68:aa:fd:c4:e1:7c:49:02:db:6f:
         f4:cd:42:db:8a:27:2b:2b:ac:bf:06:9a:ab:ea:a7:9d:12:75:
         7f:70:bf:7a:9b:14:ff:74:0a:8b:d2:67:4a:e3:80:12:b4:ce:
         5e:99:35:f0:3f:c4:ca:f3:96:66:56:66:00:3f:1e:2f:1a:d3:
         22:3c:f3:a0:ad:e0:b0:ca:e7:2f:d1:01:74:ff:4b:51:fa:2a:
         95:b3:4e:95:6e:b3:71:ad:27:3b:30:6e:32:10:f1:4b:4c:b4:
         71:28:66:f2:88:fe:9e:8a:6f:6f:9b:8d:82:f7:54:fa:cb:ca:
         9c:c3:ce:e6:47:6e:53:52:62:35:36:13:27:dd:c6:dc:7b:4e:
         75:a3:e7:ba:0f:42:d4:94:53:83:0a:81:82:64:89:34:b3:41:
         73:21:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:09 2026 by rpki-client