Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa
File:                     3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa (raw, json)
Hash identifier:          30abUNm74g1k8tMKe5T35ZLm+G90Iu7z7sLUeW/Wf0A=
Subject key identifier:   E6:F0:B4:40:75:87:4C:2C:41:23:E4:42:15:A7:0A:E7:96:87:0D:37
Certificate issuer:       /CN=0491F42A3990BD60D32248583741F141AC61F0EE
Certificate serial:       3442915952838A6E15BD45F330515094B04E31E1
Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa
Signing time:             Thu 16 Apr 2026 02:26:40 +0000
ROA not before:           Thu 16 Apr 2026 02:21:40 +0000
ROA not after:            Thu 15 Apr 2027 02:26:40 +0000
asID:                     9809
IP address blocks:        116.214.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:91:59:52:83:8a:6e:15:bd:45:f3:30:51:50:94:b0:4e:31:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE
        Validity
            Not Before: Apr 16 02:21:40 2026 GMT
            Not After : Apr 15 02:26:40 2027 GMT
        Subject: CN=E6F0B44075874C2C4123E44215A70AE796870D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:74:33:e5:cd:e4:33:3a:91:e8:90:2f:6d:
                    e0:ca:c4:4b:b2:a3:18:48:27:37:c0:75:93:dd:55:
                    07:85:f9:57:6d:6f:34:ca:0a:e2:00:aa:52:9f:e1:
                    99:57:01:e6:f8:05:d2:c8:77:79:d5:10:be:42:ff:
                    a8:55:0a:c1:fd:58:32:fa:ec:38:91:a2:43:1f:dd:
                    69:2b:c9:0f:27:61:49:48:3b:3e:a6:65:d9:b2:a3:
                    64:23:90:3b:3c:a1:47:cd:f4:1e:45:2c:dd:3a:69:
                    27:93:1e:f1:ef:57:56:04:d8:ea:17:ad:5f:08:8d:
                    98:9d:a6:1a:40:e2:f8:7c:32:e7:5f:ee:cb:46:14:
                    0e:16:8e:9b:ea:3f:0a:a6:f3:cb:60:14:5d:7b:f5:
                    02:30:f6:bf:9f:c6:47:72:6f:5f:f0:b8:e7:ba:86:
                    ac:49:91:dd:78:61:40:2c:ac:8a:89:fc:4d:ed:17:
                    a4:c3:4c:66:32:c5:5c:ac:d7:be:f6:12:4e:4e:07:
                    82:b1:26:2f:4b:f6:74:a1:71:80:53:b3:c6:c1:c6:
                    b5:da:85:ef:20:93:b2:1a:03:23:19:de:49:82:7e:
                    e6:65:a2:7f:db:7a:a1:db:48:f8:12:e4:e4:35:25:
                    c8:07:85:3e:98:93:a6:9c:63:41:55:d6:fe:46:99:
                    a2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F0:B4:40:75:87:4C:2C:41:23:E4:42:15:A7:0A:E7:96:87:0D:37
            X509v3 Authority Key Identifier:
                keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e3132382e302f31372d3234203d3e2039383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:10:47:4e:68:5d:eb:62:82:bb:83:41:c3:ba:6b:5b:e2:
         28:ac:2a:e9:6a:23:0e:6c:a6:ec:ae:f2:14:74:cf:aa:a6:91:
         18:eb:7a:98:f0:99:43:89:7d:a5:bf:d5:2c:24:30:2c:aa:0a:
         ce:dc:97:ae:dd:ff:ce:de:b5:d4:aa:ff:24:fb:7c:11:02:18:
         01:5e:1e:c1:07:7f:28:a6:83:b2:84:87:51:a6:01:c4:2f:a4:
         6f:97:dc:c8:24:4e:8d:29:90:84:94:fb:e7:48:0e:82:a9:fa:
         c4:ab:ce:94:05:c0:46:33:64:51:6b:f6:1d:34:65:44:a3:fc:
         8a:1e:60:d2:38:e7:61:b4:70:e1:7a:33:e1:17:ed:83:6f:f0:
         1c:61:96:1d:46:38:6a:01:cd:ae:51:06:10:e1:cb:d2:35:2b:
         2f:c7:ac:ae:91:eb:1b:27:30:fb:63:2d:f3:02:75:e0:5e:6a:
         3b:4d:a0:bb:52:05:c6:f6:3e:59:a3:09:68:b7:06:a9:e2:08:
         27:2a:a7:da:90:c8:bf:f3:e8:95:b4:19:4a:bf:86:97:23:e4:
         c7:0c:31:b6:62:2d:b8:b8:18:2d:4f:a9:3b:fa:9c:03:f9:03:
         4c:98:2a:00:14:bd:0b:0e:e9:fd:1f:95:76:fc:1c:8e:f2:d8:
         b4:08:c2:e1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUNEKRWVKDim4VvUXzMFFQlLBOMeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB
QzYxRjBFRTAeFw0yNjA0MTYwMjIxNDBaFw0yNzA0MTUwMjI2NDBaMDMxMTAvBgNV
BAMTKEU2RjBCNDQwNzU4NzRDMkM0MTIzRTQ0MjE1QTcwQUU3OTY4NzBEMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn0nQz5c3kMzqR6JAvbeDKxEuy
oxhIJzfAdZPdVQeF+VdtbzTKCuIAqlKf4ZlXAeb4BdLId3nVEL5C/6hVCsH9WDL6
7DiRokMf3WkryQ8nYUlIOz6mZdmyo2QjkDs8oUfN9B5FLN06aSeTHvHvV1YE2OoX
rV8IjZidphpA4vh8Mudf7stGFA4WjpvqPwqm88tgFF179QIw9r+fxkdyb1/wuOe6
hqxJkd14YUAsrIqJ/E3tF6TDTGYyxVys1772Ek5OB4KxJi9L9nShcYBTs8bBxrXa
he8gk7IaAyMZ3kmCfuZlon/beqHbSPgS5OQ1JcgHhT6Yk6acY0FV1v5GmaLHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU5vC0QHWHTCxBI+RCFacK55aHDTcwHwYDVR0j
BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG
MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5Njk3OTYyOTE3ODA5MzU3MC8wLzMxMzEzNjJlMzIz
MTM0MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzOTM4MzAzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEB3TWgDANBgkqhkiG9w0BAQsFAAOCAQEAsIIQR05oXetigruDQcO6a1vi
KKwq6WojDmym7K7yFHTPqqaRGOt6mPCZQ4l9pb/VLCQwLKoKztyXrt3/zt611Kr/
JPt8EQIYAV4ewQd/KKaDsoSHUaYBxC+kb5fcyCROjSmQhJT750gOgqn6xKvOlAXA
RjNkUWv2HTRlRKP8ih5g0jjnYbRw4Xoz4Rftg2/wHGGWHUY4agHNrlEGEOHL0jUr
L8esrpHrGycw+2Mt8wJ14F5qO02gu1IFxvY+WaMJaLcGqeIIJyqn2pDIv/PolbQZ
Sr+GlyPkxwwxtmItuLgYLU+pO/qcA/kDTJgqABS9Cw7p/R+VdvwcjvLYtAjC4Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:29:12 2026 by rpki-client