Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa
File:                     3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa (raw, json)
Hash identifier:          SfeGMuqHWzoAv9iGacYRYzdpfa3BDEWC2CuQowRuJd4=
Subject key identifier:   45:0C:47:6B:8B:00:FD:1F:30:0D:2C:5C:17:3F:8A:D9:D9:7E:A3:34
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       2E4A9EDB675B4EDD19BE4A1F508A0CCDF1C34966
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa
Signing time:             Thu 16 Apr 2026 00:16:28 +0000
ROA not before:           Thu 16 Apr 2026 00:11:28 +0000
ROA not after:            Thu 15 Apr 2027 00:16:28 +0000
asID:                     137702
IP address blocks:        114.114.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4a:9e:db:67:5b:4e:dd:19:be:4a:1f:50:8a:0c:cd:f1:c3:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Apr 16 00:11:28 2026 GMT
            Not After : Apr 15 00:16:28 2027 GMT
        Subject: CN=450C476B8B00FD1F300D2C5C173F8AD9D97EA334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:1f:73:dc:12:3b:6f:9c:c5:72:8d:35:4e:
                    1c:95:6e:c4:6c:9d:b5:00:07:b8:10:22:8c:eb:e4:
                    09:22:d5:ce:10:ea:2d:5c:04:28:01:42:c5:85:9b:
                    79:e7:06:da:28:bf:92:98:7b:4b:0a:78:e3:59:44:
                    0c:2d:45:8f:03:68:ff:4e:23:86:b6:db:6f:80:b3:
                    68:81:e9:c1:b1:16:fd:51:3f:19:a5:d3:49:ef:b4:
                    56:cc:ad:1f:83:d5:c9:65:54:ba:58:61:80:57:85:
                    78:4d:e7:d7:ac:37:2f:a6:19:dd:c0:09:4f:66:7f:
                    51:b8:89:b3:33:9c:52:e6:3f:fb:0a:14:ae:c8:16:
                    22:00:5e:f5:f3:ef:d9:d5:05:85:79:5b:80:26:dc:
                    48:38:cf:2e:54:22:7d:7e:0f:72:66:d7:ee:ee:f2:
                    55:77:cd:5b:a7:ad:19:e1:88:18:db:c4:c1:69:50:
                    29:ff:ee:a9:cb:6b:40:3e:3c:4b:c5:66:6f:b3:81:
                    61:ad:a3:3d:37:c8:8b:ed:44:c0:83:a6:b8:98:53:
                    1d:ba:2d:b3:43:80:5d:a4:f9:83:d0:d9:a9:47:f2:
                    4d:84:55:c3:f9:dc:d4:6c:d3:f7:18:4b:42:e4:ce:
                    c0:8f:06:8e:9c:67:09:3e:46:43:b4:43:17:9c:1e:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0C:47:6B:8B:00:FD:1F:30:0D:2C:5C:17:3F:8A:D9:D9:7E:A3:34
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e3132382e302f31372d3234203d3e20313337373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.114.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6b:99:27:fd:0e:26:11:fe:60:8c:0e:f6:df:aa:01:58:ef:35:
         75:c4:9a:f2:3f:69:f5:ac:cb:d1:43:ca:6f:ac:53:be:3a:20:
         f6:f0:d2:b5:40:84:65:de:67:8e:b6:5c:34:ef:ce:af:ec:e0:
         87:d4:53:bf:8c:25:a7:8d:d3:19:8a:fb:30:46:39:f2:18:dd:
         af:32:ad:b7:51:83:32:93:ac:86:a5:c1:e4:6f:0e:e9:aa:cf:
         2d:74:ec:6e:c4:6d:1e:f0:2d:d8:51:9e:c1:97:7b:d6:57:05:
         b6:ea:ea:0b:36:db:5d:2d:9b:e5:f6:60:72:18:64:d9:58:2a:
         9b:1f:d8:86:05:06:e8:a0:44:07:55:af:b8:36:10:01:b9:f1:
         50:c0:f2:a7:8b:c8:ce:c8:ec:e9:bc:9f:a6:19:c9:d2:df:e3:
         6b:56:ec:b9:3a:5a:c5:09:15:68:2e:17:ab:a3:64:16:9d:f8:
         d4:ef:88:3c:fa:1a:b5:bb:1f:69:61:a1:ca:92:58:8d:da:c4:
         d6:34:78:29:13:96:a7:59:5c:dd:27:26:ae:fc:24:75:bf:65:
         f9:31:5c:2c:c4:d4:f5:fd:e8:0c:a6:72:c6:ab:ad:8a:b4:a7:
         52:38:f6:8f:10:02:11:45:de:d9:f1:48:64:65:89:14:cc:23:
         4f:51:00:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:05 2026 by rpki-client