Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa
File:                     3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa (raw, json)
Hash identifier:          PkCwWnw3PHTq+vYK1KUV313Oht0v/DXlfYx5SoIP84M=
Subject key identifier:   A9:E9:0F:C6:86:17:F3:9B:35:C5:5B:32:7E:BA:BA:E0:DA:B5:ED:31
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       1F205650FCA5BE449F3666C8CB39F4586F68F026
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa
Signing time:             Thu 16 Apr 2026 00:16:28 +0000
ROA not before:           Thu 16 Apr 2026 00:11:28 +0000
ROA not after:            Thu 15 Apr 2027 00:16:28 +0000
asID:                     137702
IP address blocks:        114.114.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:20:56:50:fc:a5:be:44:9f:36:66:c8:cb:39:f4:58:6f:68:f0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Apr 16 00:11:28 2026 GMT
            Not After : Apr 15 00:16:28 2027 GMT
        Subject: CN=A9E90FC68617F39B35C55B327EBABAE0DAB5ED31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:9d:21:71:79:b0:59:14:a6:12:9b:6c:6f:
                    d8:67:62:5d:f6:7d:64:58:78:7a:8f:ca:13:ac:a0:
                    7b:56:ed:84:9a:b9:9b:e2:ae:42:03:db:c0:e7:e5:
                    43:56:3f:d2:39:a7:c7:6b:fe:3c:d3:8a:35:31:69:
                    99:56:f6:fe:9c:27:f5:d2:af:5c:38:38:92:01:5b:
                    f2:a6:e2:28:dc:ad:64:3a:6a:89:55:34:f7:39:0c:
                    06:d3:90:d9:d2:33:0a:95:66:be:28:e6:96:61:e8:
                    f8:43:98:e3:01:ba:84:37:5f:9c:db:20:7b:9f:31:
                    18:75:c3:c8:9c:cf:6f:2f:df:49:13:50:ed:ff:fe:
                    a2:0b:8e:bf:47:21:fb:76:81:84:29:f7:2a:44:b0:
                    7a:50:ed:74:7e:6f:67:2a:38:79:96:00:a6:40:85:
                    8d:f8:8f:41:4e:9d:9f:77:4b:3d:d1:b0:f5:50:76:
                    7b:0f:3a:7e:08:04:c5:5a:4f:f1:80:57:2f:8c:2b:
                    56:08:69:a1:3d:d3:7d:0a:92:ee:f2:72:91:d7:0d:
                    5c:35:7f:84:07:fe:6a:65:fd:36:f6:43:83:d7:88:
                    3e:4e:fa:8d:9b:0e:79:56:9d:97:57:8a:42:45:f3:
                    d5:0e:b6:c9:ee:f1:f9:74:57:cd:46:cc:09:2b:fc:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:0F:C6:86:17:F3:9B:35:C5:5B:32:7E:BA:BA:E0:DA:B5:ED:31
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3131322e302f32302d3234203d3e20313337373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.114.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:9f:4e:e7:2b:f7:8a:9e:46:c9:bc:c3:d6:c6:ec:ef:ab:
         34:7d:c6:d8:12:8e:f0:de:4e:2d:a5:38:61:f7:84:fe:a7:5c:
         08:e0:55:57:92:09:45:a7:41:9f:d2:88:19:40:29:26:3e:31:
         5c:c0:87:dd:97:7a:cb:ee:00:8e:7a:82:92:b0:67:e3:c3:c1:
         93:b9:6e:66:17:25:62:19:80:14:14:5b:a3:a4:77:47:60:03:
         86:2d:6e:19:d1:f9:87:07:20:6e:b9:11:e4:c2:b0:65:25:fb:
         0e:09:d0:96:1e:b5:ac:0e:d4:ef:c2:d9:1f:49:a3:b7:d2:c6:
         8c:e1:f9:b4:77:dc:ed:e0:84:14:cc:83:d5:17:43:08:a4:2d:
         47:f7:e1:33:06:06:27:b1:d5:5a:85:6e:ae:dc:ea:13:00:23:
         3a:0c:05:ce:77:af:e4:ab:2a:aa:4d:a4:d9:87:f7:bd:d7:33:
         ff:c9:17:1c:50:e7:f3:9a:40:5d:55:50:f1:5d:c7:e2:ad:89:
         ff:83:22:79:bd:a7:ff:39:05:92:6a:49:4c:de:7e:3b:7c:66:
         52:b7:b2:78:cf:15:6f:e4:8d:42:bc:11:79:7b:8d:3c:b1:3f:
         6c:59:46:6a:66:8d:c1:00:d4:2e:d1:51:89:b5:06:69:4e:c7:
         02:96:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:43 2026 by rpki-client