Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e33322e302f31392d3234203d3e2039383039.roa
File:                     3131362e3231342e33322e302f31392d3234203d3e2039383039.roa (raw, json)
Hash identifier:          htPttDVb0kWX6wnItHN++EBcVc6dyeN811V4YSR37w0=
Subject key identifier:   B4:7D:D4:35:54:B4:98:CE:64:75:8B:F6:1F:AF:84:D6:8D:7C:81:AC
Certificate issuer:       /CN=0491F42A3990BD60D32248583741F141AC61F0EE
Certificate serial:       70A5F619A4370ADA3AC415227FBCAF311B11CEDF
Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e33322e302f31392d3234203d3e2039383039.roa
Signing time:             Thu 16 Apr 2026 02:26:40 +0000
ROA not before:           Thu 16 Apr 2026 02:21:40 +0000
ROA not after:            Thu 15 Apr 2027 02:26:40 +0000
asID:                     9809
IP address blocks:        116.214.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:f6:19:a4:37:0a:da:3a:c4:15:22:7f:bc:af:31:1b:11:ce:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE
        Validity
            Not Before: Apr 16 02:21:40 2026 GMT
            Not After : Apr 15 02:26:40 2027 GMT
        Subject: CN=B47DD43554B498CE64758BF61FAF84D68D7C81AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:07:af:dc:6c:64:72:ec:2b:70:a5:59:f3:
                    2d:08:b9:68:6a:33:87:a4:ac:d6:21:9e:8c:96:68:
                    94:c8:1f:d9:1f:84:4d:46:ea:67:0f:63:86:3d:21:
                    ac:c3:7a:cf:fe:f3:8d:5d:44:87:16:70:fd:a9:7c:
                    57:ea:45:58:05:1c:43:80:b9:e4:6e:ca:c5:8f:6a:
                    20:d4:09:f8:66:3e:8b:c8:a5:3a:d2:99:3b:33:8d:
                    74:85:1a:95:ba:1b:5c:57:87:31:e7:3e:c2:29:ce:
                    72:7a:43:98:ad:35:65:85:3b:77:2e:9b:c8:9d:a5:
                    3d:d1:01:a6:8e:3d:c4:61:b6:b5:af:1c:d0:e0:eb:
                    0b:a8:23:be:81:47:7b:44:2d:99:28:de:78:32:fe:
                    23:a1:28:8d:a8:35:4b:22:8d:f2:ef:d9:22:29:c6:
                    eb:02:a6:c6:3e:b0:6f:44:e0:e5:56:44:20:f9:46:
                    5c:a4:c7:ff:c3:c3:ec:91:89:84:f3:85:a2:54:00:
                    9d:4a:01:f5:bd:5d:47:07:d6:45:25:58:5b:31:58:
                    a8:9c:53:c0:c2:62:a5:87:3e:eb:4c:7f:b8:ba:8a:
                    8f:fe:87:84:53:ca:f3:65:eb:1a:22:ee:ec:e9:ba:
                    b6:c9:2b:cf:2b:03:5e:42:99:31:22:41:b2:c8:81:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7D:D4:35:54:B4:98:CE:64:75:8B:F6:1F:AF:84:D6:8D:7C:81:AC
            X509v3 Authority Key Identifier:
                keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3131362e3231342e33322e302f31392d3234203d3e2039383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.214.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:8c:b9:0c:3d:af:26:e4:03:15:10:fe:20:47:33:84:c3:
         9e:50:94:bf:73:bc:ec:b1:69:71:3c:eb:47:e6:3e:52:ec:1c:
         1e:0d:70:90:fb:a5:cb:f1:df:90:3d:95:9a:3d:c9:2c:e7:a8:
         88:3d:5e:39:3f:a5:84:34:61:7b:e9:2c:bc:1f:fb:e2:33:4c:
         2e:91:15:7d:ee:29:e1:b0:25:bb:d6:39:c7:2b:8c:3b:7b:84:
         46:e4:ec:77:c9:89:b3:d6:f2:b1:3b:24:a7:98:31:f2:17:b3:
         50:4b:ff:c1:34:d8:b7:b3:b4:0e:4e:eb:34:2a:9b:a4:56:bc:
         a6:16:6d:bf:16:6e:4f:3f:b1:37:52:b4:86:ab:c0:d1:ab:3f:
         aa:01:4b:4a:c1:09:0e:4d:10:67:72:9c:d0:80:84:4f:1f:54:
         52:e2:d3:d5:70:14:cc:72:48:d6:17:d1:a7:3e:7b:f0:cf:7c:
         0f:9d:9e:d5:b5:b6:22:c4:fb:e1:4a:40:05:19:9e:ab:10:38:
         e0:f2:6f:92:75:67:a1:4c:57:8e:f6:ff:6e:b4:33:f4:ba:92:
         35:0b:8a:9d:12:d2:5d:09:54:4d:0c:a6:00:29:35:ce:ee:61:
         49:b4:60:3e:9a:56:5f:fc:b3:6e:d5:87:70:0e:7d:cb:6d:ed:
         0c:bb:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:29:13 2026 by rpki-client