Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e2034383337.roa
File:                     3131342e3131342e39362e302f32302d3234203d3e2034383337.roa (raw, json)
Hash identifier:          eZtOjO7I2MepkQbn85egh1Lnu1i+4JgpVaoIbcoDMcY=
Subject key identifier:   F0:4F:B7:F0:5B:4B:A8:67:7E:0F:5A:D6:1B:16:44:81:20:FE:8A:3A
Certificate issuer:       /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
Certificate serial:       1DBFF0CE70BE7A47E6C4A1CC0772E1D431985545
Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e2034383337.roa
Signing time:             Thu 16 Apr 2026 00:18:22 +0000
ROA not before:           Thu 16 Apr 2026 00:13:22 +0000
ROA not after:            Thu 15 Apr 2027 00:18:22 +0000
asID:                     4837
IP address blocks:        114.114.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bf:f0:ce:70:be:7a:47:e6:c4:a1:cc:07:72:e1:d4:31:98:55:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8
        Validity
            Not Before: Apr 16 00:13:22 2026 GMT
            Not After : Apr 15 00:18:22 2027 GMT
        Subject: CN=F04FB7F05B4BA8677E0F5AD61B16448120FE8A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:77:97:91:94:7f:df:74:19:03:e3:58:10:43:
                    e6:4b:7d:41:cd:31:78:83:7c:14:fa:73:32:9f:1d:
                    81:53:f5:6e:23:41:38:8a:dd:59:19:5b:cc:e3:50:
                    23:71:26:5e:03:4f:e1:bc:87:90:96:59:37:5f:11:
                    b4:a2:00:cf:71:11:c2:0e:2e:3f:75:25:6d:7d:5c:
                    2c:66:a3:31:1d:8c:c0:3c:2a:34:8b:93:d6:8d:38:
                    6a:f3:bd:fd:bb:fd:db:26:f9:34:f1:c6:8d:ab:35:
                    1c:95:91:5d:6b:ed:8d:a8:09:61:a7:dc:5a:49:fe:
                    44:38:37:8d:a7:98:41:92:74:f3:15:25:8c:6b:b6:
                    d5:62:66:9b:58:5b:bd:b6:5c:ed:f4:50:73:4d:4b:
                    52:42:9e:57:b4:68:1c:93:0b:21:ff:9b:b0:a8:a7:
                    26:fe:62:c8:28:3f:35:ad:2e:b4:ec:41:3a:86:8b:
                    ca:01:f0:9a:0a:56:26:1e:26:33:9b:88:1e:80:b0:
                    07:ff:b7:75:93:91:d7:99:b2:c5:b3:dc:6e:cd:f9:
                    61:4c:f9:1b:f5:ed:98:fc:0a:a9:4f:5d:ff:ed:99:
                    54:e2:46:43:5d:75:77:f2:d4:78:d5:be:35:9e:36:
                    8e:dd:d5:94:b9:34:48:0c:ed:d7:82:c0:8f:e4:40:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:B7:F0:5B:4B:A8:67:7E:0F:5A:D6:1B:16:44:81:20:FE:8A:3A
            X509v3 Authority Key Identifier:
                keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/3131342e3131342e39362e302f32302d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.114.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:65:a0:3d:cb:63:04:dd:a5:6f:cf:ff:31:2e:2c:22:92:
         57:c8:89:ca:38:be:cb:28:9a:83:d5:37:ef:96:e4:3a:27:bc:
         09:90:7c:31:8e:f5:a9:67:a9:79:8d:13:bc:79:78:1f:8a:e1:
         36:3f:87:78:7f:6d:86:3d:b5:7e:c0:3a:db:90:c8:0c:21:2b:
         80:09:f7:18:8b:6c:b5:bd:62:8b:ad:f0:55:68:7c:e8:0c:60:
         7f:5e:58:ce:ad:d2:94:21:53:d5:f3:de:3b:07:e5:af:bc:99:
         9c:5a:ee:85:77:89:5a:37:8e:12:12:bd:39:fa:5d:11:6f:f9:
         dd:b8:9f:0d:74:eb:11:2a:22:9e:89:63:ad:43:26:67:0d:f2:
         ef:c1:7b:93:ad:e7:5f:aa:ee:bc:ce:6c:a5:72:bb:4d:9a:e5:
         38:35:3b:d1:99:39:a1:63:18:bd:51:09:ba:3b:a6:7b:cf:72:
         1b:06:a7:dd:57:ad:ed:57:93:00:93:53:36:eb:e7:99:4f:da:
         11:55:6d:61:67:42:46:72:fa:e1:cc:aa:38:2c:7c:97:a8:c3:
         0a:90:14:ca:f4:f2:ff:ea:bd:6b:2e:da:94:01:1e:a8:6e:ca:
         25:16:19:f5:ce:01:9b:d9:d3:60:8f:07:9f:6d:7c:95:a4:13:
         4d:b9:73:03
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHb/wznC+ekfmxKHMB3Lh1DGYVUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy
MjZFRjhBODAeFw0yNjA0MTYwMDEzMjJaFw0yNzA0MTUwMDE4MjJaMDMxMTAvBgNV
BAMTKEYwNEZCN0YwNUI0QkE4Njc3RTBGNUFENjFCMTY0NDgxMjBGRThBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOd5eRlH/fdBkD41gQQ+ZLfUHN
MXiDfBT6czKfHYFT9W4jQTiK3VkZW8zjUCNxJl4DT+G8h5CWWTdfEbSiAM9xEcIO
Lj91JW19XCxmozEdjMA8KjSLk9aNOGrzvf27/dsm+TTxxo2rNRyVkV1r7Y2oCWGn
3FpJ/kQ4N42nmEGSdPMVJYxrttViZptYW722XO30UHNNS1JCnle0aByTCyH/m7Co
pyb+YsgoPzWtLrTsQTqGi8oB8JoKViYeJjObiB6AsAf/t3WTkdeZssWz3G7N+WFM
+Rv17Zj8CqlPXf/tmVTiRkNddXfy1HjVvjWeNo7d1ZS5NEgM7deCwI/kQKg/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU8E+38FtLqGd+D1rWGxZEgSD+ijowHwYDVR0j
BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0
NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NTg2NzY0MDE0ODQ1OTU1LzAvMzEzMTM0MmUzMTMx
MzQyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHJyYDANBgkqhkiG9w0BAQsFAAOCAQEANUtloD3LYwTdpW/P/zEuLCKSV8iJ
yji+yyiag9U375bkOie8CZB8MY71qWepeY0TvHl4H4rhNj+HeH9thj21fsA625DI
DCErgAn3GItstb1ii63wVWh86Axgf15Yzq3SlCFT1fPeOwflr7yZnFruhXeJWjeO
EhK9OfpdEW/53bifDXTrESoinoljrUMmZw3y78F7k63nX6ruvM5spXK7TZrlODU7
0Zk5oWMYvVEJujume89yGwan3Vet7VeTAJNTNuvnmU/aEVVtYWdCRnL64cyqOCx8
l6jDCpAUyvTy/+q9ay7alAEeqG7KJRYZ9c4Bm9nTYI8Hn218laQTTblzAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:47 2026 by rpki-client